{"report_id":"d75ce3fd-03ee-473f-833d-5e458cc7e8aa","version":0,"status":"done","tags":[],"date":"2026-07-08T12:11:12Z","url":{"schema":"https","addr":"rainbetlogin-nz.com","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetlogin-nz.com/","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"title":"Rainbet app NZ for mobile crypto casino access","dom":{"size":79989,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2416)","md5":"26b929b3526535afad176b833ea0d173","sha1":"2d0dc07f220b73640cacac7d21c7b35f2e57708d","sha256":"eb6a29b33a8d93ce103665d1fe75b5bf6390a6bdf019d63a636fb98882ee3dd1","sha512":"428b89b21648eb45761ff2d8f78b04e82070f1ececd3d1b0c1fa73c522f418368c42eedc0c0fef85be7b2f4a07a741ec55dc870c14db315517c827d0d624e3c9","ssdeep":"768:uX97f4sjYRI+ufNNuNmBjtOwZYymyliaV5CpLnz5:OOufN4NGjtRZOU5Urz5","tlshash":"7e73f9a791f4af6702634257695e724a7ead8003cf195a84b3ec46ed6fc5e87483338c","dom_hash":"domhashd1208b3dfba7dec1258a97d8a499e90d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbetlogin-nz.com","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T12:11:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetlogin-nz.com","ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":68,"request_count":34,"received_data":1232287,"sent_data":17683,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetlogin-nz.com/js/content.js","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"329a3cc633e5323d4c108ca9bcb8fc28","sha1":"48fa3d3965389aa93ca6afebf8110fc7864ab797","sha256":"41d57bf923b062c6d4e07891f686810826cad68a2806e6693dc01d9b51de4cf0","sha512":"967d61e8e204db779a61f30aa1ec1de02ed96b5334fe7fdd9d85af47f10b22122dea551c4be7b1da9fccb5ccd9ffc124b1877bbed9a0a3fe93c0664ba59cd0db","ssdeep":"","tlshash":"d9511c55a0114036883363aacb5bd2a9f62c00e7b541c68ebd1dca093fb1d9565f3edd","size":2882,"data":"","first_seen":"2026-07-08T12:11:18.042596Z","last_seen":"2026-07-08T12:11:18.042596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48eb278dc6e2b6bb749d84fcf00d00a0","sha1":"e3a071c268338f10199fae4a0008e6ff74f2b60d","sha256":"5ac84bea16fd5e1c45aa6db3d823c3945440156bec8689fa0f7650d073e63fa8","sha512":"d64dc0d2baae9c88a6d1d5de5e3694176a7b50cd4e5a83af78b5cf42950cb386e6ac20cbd2ab80b5a668b9f45fd56dca283f7081b84a3866fcdbef1cb866b8d1","ssdeep":"","tlshash":"d3d022cab0f1aa70e312f02d9a474928a27b000a014ceb9491008f97bf1102fc31d54b","size":197,"data":"","first_seen":"2026-07-08T12:11:18.06167Z","last_seen":"2026-07-08T12:11:18.06167Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/js/main.js","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f3add2b3a5b26c4c954bfa8397a8aea","sha1":"98f57c5c5aa918f3291a9e577e5153827e884352","sha256":"4298cf1328077c79a37a397620b18bcebd428b097eb32799c7dbf9c0bfc887f5","sha512":"2ef48380cd6b34479c6ee0e311c8ca0e1d05d7018c135b6fa6ea53a3e11a3acbfeae198b2752526380db8aafd8233f2ef8bc5b75e21b8ea657cd6b1a10cdc363","ssdeep":"192:tjx3F73qWBexlg6SXXvCx6IIlf1UIRytW9qB0CTSNB+/P:xxhqWeXPGXvAYCgFDi","tlshash":"d412429a23181536807b637bdbc79689f26260bf758145283c1c86c90ff0d9556f2ffa","size":9633,"data":"","first_seen":"2026-07-08T12:11:18.056734Z","last_seen":"2026-07-08T12:11:18.056734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/space-xy-crash-game.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.138Z","timestamp":1783512648138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/space-xy-crash-game.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-266e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=in%2BBdp8RWXi4FMVqKSWPEbpaYlNur88rY7ue%2BdUwfd9FmFvSjGAx4S1D%2FePzLdd4su53UcEfNqPGh6s2LqNa45up1Su%2Bll%2ByrTUHGe3hvaaZxHoR4Z%2FPB2i%2FUqqW18EKpuX7qupG\"}]}\r\ncf-ray: a17efce2eee223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9838,"size_decoded":10581,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15f9a8fce785fcab14d2cb5a306364eb","sha1":"6f4feb93a6a3dbfa0dde92acf4f2f7c70f30f82e","sha256":"9ee9ac501844fa0c4463bfbee019625a13a240670a690ceed6cbd46e650076e5","sha512":"a1b5f8f6a1ca568fd74f2ca857272e18f1f742df276eb31cc0623fc9bf5faaa57dc7e731b66e720bc8cc71d234f30f578f7c1328180e4a149dffa78eaf25d61c","ssdeep":"192:q+ipsVnnWrXXKHnkQnhmnA9mQRfuqxCjcOJ1z7QRk8Z1zBdOyem0:q+isnWrXXEkQnYnG5pOj5ezBdOG0","tlshash":"bf12c06d642c88c4a81149cd9a386a4f701d1cc69e19e333463003aabaf07179afb3e7","first_seen":"2026-01-13T05:33:42.081615Z","last_seen":"2026-07-08T12:11:18.016511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/favicon-rainbet.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.372Z","timestamp":1783512648372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/favicon-rainbet.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-802\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6S%2FouVpqaWaCnkzFD6J9fYAeJyhY0uUZkIYhf2kM9G20d7ib6AvCOoGCj9zDD56N%2BOigwp5Qncuf8LKQiVeS8RvGZc4FS90YjDpqG3o1ILuPD1n9gohVY6oSNBPqXfA9sX4mHGX\"}]}\r\ncf-ray: a17efce45f2a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2050,"size_decoded":2792,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbcdbe9f0bacd582b40e9c6a4cbf0173","sha1":"58b4118a88af7bf36230a130837d1ab603da355d","sha256":"6c6875ded1b1cf515f3700a256c68b18f045a71123eb07d50bffc0b1abd58c93","sha512":"50b298c150701da685cc604c7b409dcae96dc751f18c6e546a463c06a7f6acd57c5f5fd96ec6e7ae73355fe220329f912f7bbcf56189b3b56a92a9ca89cf0ce0","ssdeep":"","tlshash":"2b4108f5d71c1b4ac7c537b034c1a3a5f35eb832340997b5838801252790bc18171a6e","first_seen":"2026-07-08T12:11:18.018096Z","last_seen":"2026-07-08T12:11:18.018096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T12:10:47.356Z","timestamp":1783512647356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KJyLRtUFrFuqbbm6Orfs54m7L%2Bd20EpMpMihqY5swPQSuGn%2BC5FrIONuPL5zzMWfrPOZO%2BVlLszReBCAlUDzYINoEZ5uESduw5XYU5YhkuBQLfaCpi6IT74o2UfyCUy1LfFLPIt\"}]}\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17efcde4e3c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93028,"size_decoded":16350,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2354), with CRLF, LF line terminators","md5":"86544fb6d225212f14599f8e509408a8","sha1":"2c8bb4620cd27c0dad385dce69165682a3edb1a0","sha256":"1eedd9bb037034056db3f05896e3ae7de3f572e806cb4bc37b102c3f5a48325b","sha512":"00ec3a0824b4b2c689468319e4b5de039ad146b0fac5281a23528743f759ad94531e89b210f07c489931fa4a4a3264acfbdca5dc0c37c2a0144a96646ed99256","ssdeep":"768:31tPf4yN3R2yuzif4dmBjthGP0cFliaV49zLnqz:fHuziAdGjtYPIU4lrqz","tlshash":"c693e7e2a6f5afe7026e02566c6a710a7e5c9013cb190d4c77fc569d2f89e8b447338c","first_seen":"2026-07-08T12:11:18.019575Z","last_seen":"2026-07-08T12:11:18.019575Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":12,"connect":27,"send":0,"wait":169,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/fonts/Roboto-Regular.woff2","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.106Z","timestamp":1783512648106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /fonts/Roboto-Regular.woff2 HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:50 GMT\r\netag: \"6a06cdc6-100e4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1wNyl5XSOmS%2Fdwr1fCFC9MPLnB3A0T73fKsLzQ6GqY1DA1elEaHk%2BOIizt42bXXWELrYGBU0zNWCz66SdZcFphxtnKtcaquXXOr%2Fld9DHYn74FthbItMWciftAobExm4O6N8EeU\"}]}\r\ncf-ray: a17efce2aed123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65764,"size_decoded":66504,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65764, version 1.0","md5":"81f751c74973b61ebedbf61f3ecbf480","sha1":"2915741bf3d737044a6ef97afd6d4eabef908479","sha256":"56de0d03455d412c89d88c63da6037845d9d2e726e6fdc7adcd3e9aed0d2150a","sha512":"28a13bec6d0470bd403f791ac25c91c13e77f261f5c933e40b6fb608d4063d55463b3c7ad6278cc37566fc42de02415440552775fc6f441b81bf5438f3c38b41","ssdeep":"1536:yocaU46P1mgYxcM24zCDRfsbcm3bBPf8WPMht+:Lcv5Nm1p3SfsbcCdPf/ag","tlshash":"8753021821989f88c9fd6993178fd528f46a24e191cbf0739abe508928da772614f07f","first_seen":"2023-04-06T20:04:33Z","last_seen":"2026-07-14T05:54:01.509205Z","times_seen":5573,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/stormy-witch.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.143Z","timestamp":1783512648143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/stormy-witch.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-725e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVQvXESjrRr72ZkrfTUHQq1KmkxquhXrWqESOTGxiytuykhds2AqowqdQ%2BQ2QcYvt3%2F2lmJOzKs0IcbkdZPSubNoB%2Bw%2FpzYki2yXCTtVNpp3JamPrjDVmZr%2FHt4K%2F9Mnix6Yfs6j\"}]}\r\ncf-ray: a17efce2eee723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29278\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29278,"size_decoded":30020,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3beae85dfeb25ddb3c0c15e337784ca","sha1":"b3e8f7ff0497484ffa090ccf784ee0062cfcb404","sha256":"0aceaef6d69c6fd58b0c463bf6f0a3792511e544b8df04fccae243b78f21189d","sha512":"d8daa11979485a43a5f9167aedadb58eca9ea5f657f4ab1504df03e98ddf20a8fa38fa829ad8008b8b928cf4f78c91f44fc711d45c824eaa10dc4a449ff854d8","ssdeep":"768:0uFkfGrUmL/SqYvsVles77i+q0S0Tv+qtqo8h8V:W9/Uj7i+qujLtqK","tlshash":"14d2f2f14514c68d5929b78092cd7eca4cc85e703c97a38a379abd7bb8379427668310","first_seen":"2026-01-13T05:33:42.10811Z","last_seen":"2026-07-08T12:11:18.021447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/baccarat-dance.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.408Z","timestamp":1783512648408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/baccarat-dance.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-7d6c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQxNMU25vYkDKlSQneOdKQmzm%2Bv5wA66n2JnUYbdOg03Bggc61xtS%2FSovaDhep26ObnuEyB9Z3ded8dcFBL11p9wK96ziQ1FeXoCfupJz9qGFajP1MSzfB%2FwdP7EOKhjdAT1Cxld\"}]}\r\ncf-ray: a17efce49f2c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32108,"size_decoded":32844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f291c300a84534ccadf54a50c0a6578","sha1":"1c182a0127c61d696ff36564ce70d2a026776f16","sha256":"bf264325109328c41930733196e5d410c0002f1ecc603c7f5e60753b380d572a","sha512":"dbd15f0503acbab5dbd3a41ef1d034695165b18a4921596c93988516f9ed75e9487f8d54d59205ee5e871693f465b1b6bd55974362873368354c6187b6c17503","ssdeep":"768:GE6IrDiCA6qXpZAMZJ1DVsO9YXsbLBrfI1plX6RCSPvGd7Sb:AIrDwD7QOe83B2YCS3E7a","tlshash":"8fe2e1dbba379385de4a76fc8c04e55198ed7822f8e276af14c1c117de84e0346e6ac0","first_seen":"2026-07-08T12:11:18.029649Z","last_seen":"2026-07-08T12:11:18.029649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/live-roulette.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.415Z","timestamp":1783512648415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/live-roulette.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-4da4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pz04k0vVW1LODZJ61Fmtm8lHpmtzhyyGKiQcUDNqVWoijorjdrUQI9GjzyH2ez6xbq%2FpWWoxqBE3V2vPol2PzGOocFV3CFhLplLXzr%2BcASRmMf%2FfLQOR2jruWfCHvpr7kS4dK8h6\"}]}\r\ncf-ray: a17efce49f2f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19876,"size_decoded":20612,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4229d3cf28780cf39866b9fc0fea5db4","sha1":"24728ca63eb98199b14f60b4f6ef92ebd4dfb9c1","sha256":"a29e2252f07c7a1e2714bdd318d0be9bc51533361c1432ce2d7d05170e5cb79d","sha512":"1c3923bcacb7df8d7a533778274e3f938236cd49239a80cddebfc8da9fe7f5b22ba2b9b37367fd345222e445253c4033f4a53b437b1d2a7f0f66e2bd7cc10dff","ssdeep":"384:dprH98Krzem7wPh/OZoks2tlYElLlHH1lmObqvf6qNP86h:TH9FrzemWt0PPHfm9d9h","tlshash":"7992d023f304f79be1404275492eba4ed6c3fa36bd46f3139a4029a50723900dd3d9aa","first_seen":"2026-07-08T12:11:18.030787Z","last_seen":"2026-07-08T12:11:18.030787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/miss-cherry-fruits-slot.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.129Z","timestamp":1783512648129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/miss-cherry-fruits-slot.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-6f82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TWpRxmndgoyMVTx%2FfNC2wNbR%2FrL0CBKtwxJn5SoLQyaJ%2FMLC6dXLXk%2FHEYzPSdazK%2F%2B%2Fuyp3lRHOc2SmMpEL8FPHtErihEeujxiKavBgqQIbBghyVV7se6pz76uiGhzT8SSZf0g\"}]}\r\ncf-ray: a17efce2dedc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28546\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28546,"size_decoded":29290,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95a7418f475cfc862777d7e157fbef9c","sha1":"531ae8fb76e9c2d3dc5566149caf4865e556fc86","sha256":"da24245db9d1b8e7c00faa880dd913c03a412641e31d2fbb9625d75e68d68f70","sha512":"c700117d41e62a78832a0ad5e4d6d542b99a11de4390e2dae2a14aae064eaf1e2c85bab2edf74a4792f6565026e1677bd5e366ccf22921407ead07a65affd024","ssdeep":"768:6Le76vrvvjvkjTNp3htisbKBwVbvg3R3vZowXQpd:6KKs3Yovgh6wgz","tlshash":"72d2f191ff1544bd73a70568602088ef6d7acc0e9e07b2ec1a748956cc0eb172b7e57a","first_seen":"2026-01-13T05:33:42.118514Z","last_seen":"2026-07-08T12:11:18.032291Z","times_seen":6,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/baloon-crash-game.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.135Z","timestamp":1783512648135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/baloon-crash-game.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-424e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78d5m31dxx%2BpLrGkMqLG5P2EiGonFwUQCjZ2IA5h1RciV17uy39SDxvhXczOCOTuaPS%2FhyJP9gCW0feqs60WFmwloLDkUevrclTiQ5UWfZP%2FKZIKD%2F%2F%2F3uk6TCxb4ICa9kIT%2B92N\"}]}\r\ncf-ray: a17efce2dee023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16974,"size_decoded":17718,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b972af4713c7acbe95cc98b7e4c96a8","sha1":"c1ba2a524cd4fb0485daed9731c993402bdd3f5e","sha256":"9546e06543fe14335cee06986d3e68a60da758d9bff89e2514f99e311ce54b09","sha512":"9fc05ca80d7644e615f8c87ae99b5a1a20940a58ad93174cfded4f7bc9d629cc2ec84df613102b816e60016aa8cd089bd1e6f3a79bb55ed6aaab2f31ebe81d18","ssdeep":"384:iC74pUu4NNufmqsUYolD3zbbch9xlrKp9fq1K3fRe:iC742l/01D3DcfrKphyK3fRe","tlshash":"9a72c0f3e9d5113034c01fab19d7a11f6af8bb1750e17e6ae5971c300896fb1a3052ae","first_seen":"2026-01-13T05:33:42.091895Z","last_seen":"2026-07-08T12:11:18.032914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/crash-royale-crash-game.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.141Z","timestamp":1783512648141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/crash-royale-crash-game.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-3072\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ciJI2WGpXGcM8BVsPTSJeo8Hf%2Bsu9av08vuQmbtzgF38dOjTBfmjnJ9Ymv25DZMjihS7OE%2BKOgHpIWOk5SIglG7GeOATQW5T6d15tTGj9tIFJeg294AiohVHDUR3LjZ%2FlvGZBJR\"}]}\r\ncf-ray: a17efce2eee623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12402\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12402,"size_decoded":13138,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93ba6a53d213e92fdd8d4f947a44b7b2","sha1":"c98fc68dbe2d17ff57f375eff08859db7b3a78ea","sha256":"627e87e941265b46c805a6056817633b7dbd3cf0e6c6f06e008977981199f251","sha512":"af25c294a8df137f7df67e87f4cfb044174684a25b4eb735ef0a7f7ca02d1fd18ec6193affd4ca9a83c57e36e7c221530b1f87dbc3fa309a3f913675b893988e","ssdeep":"192:71j3vdjajGPKHVrFFvxSQAxKo9RqBc14v5T4BDq84aUFpAgBXhkJToEuGsSs0SH:71rvvPmvxa0rBc1I4BDizOJToCsSs0c","tlshash":"7342c0fe5adc60317e2381d86426c117f56e28347128fe9f862f6bb461854d7b4601ba","first_seen":"2026-01-13T05:33:42.049268Z","last_seen":"2026-07-08T12:11:18.036933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/sweet-bonanza-candy-land-casino-game.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.418Z","timestamp":1783512648418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/sweet-bonanza-candy-land-casino-game.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-86f6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jG6h3qzQEG9mShCVF99Rs2KFTNYsDF%2Fi80vQNEGaGxTggSUuVKTysIAC%2FK0FtIGw9%2BnTdW9uk045e7iSrR0G6VAH1s82mRBJNe7O9rGeEA6qpOEo0gZ1JtG5lT%2Fs0%2BpPef2Jzoue\"}]}\r\ncf-ray: a17efce4af3123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34550\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34550,"size_decoded":35290,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1eb7d2a0e692d9c321371684b008fe86","sha1":"c1c31fec1cbcd71fe4aa4d7760f32b64edcae575","sha256":"4ae2db1427c96abeaba33f60e814cda9a7f17a1f9bb037ccf66e3179c374930d","sha512":"bd4b67bfd962e854c109a0b9e64de3b7ad23338105d5c3d8effdb0c6ca93de279640e0641b1d8b9a21279a4008f67c8ee7ff3459b5ca7394eda75733a73e004e","ssdeep":"768:5VXVLn/aBFwfuU+OBR3mewHYZ0i4H8kDPGg1gylYJ8bR2Eoad:5tVLnyBCg01wHW/3kDuQgylYa928d","tlshash":"58f2e1389709cdb5f2a437b10de61beda65f0c278df863855a84876abd841e40068cf9","first_seen":"2026-07-08T12:11:18.038753Z","last_seen":"2026-07-08T12:11:18.038753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/azure-blackjack-live-casino.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.426Z","timestamp":1783512648426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/azure-blackjack-live-casino.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-7124\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDg%2FASaTI3cGsEcYbKxYRk9WRT49LjtY7Z2Z5RvWNoYVRbTFEukkOOFr084SM7FIfcXsrTry%2FfboTayC2dydqv%2FhhsnOcXa3g8GwAD68X7d1hm19HC5wgIrbnGA4MzkWiHpoahwo\"}]}\r\ncf-ray: a17efce4bf3323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28964,"size_decoded":29700,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b74ddb7635b0ada32711b8fdfe0ba43d","sha1":"cfb2298afd74d0aa9a50d29fe75d9ba392b30de1","sha256":"11db18cb84b59a91fce342825f09dec568e589c952aed1380e11515c8219782a","sha512":"6c839e2e069f7b17b095e38fc7739a721be54315d30731defb2341383bee2f68d6f9982c094330d250313fdca8561be9d18a35c53007e4649178b82fbbb7b1a7","ssdeep":"768:skVyWbhKqgPZTqF/Sa54u/t0f3wqaBZJ7NSJ:sqyghKXly34u/t0I/ZJ7NS","tlshash":"9cd2d0724b2896dbc66c4bb6b0d52fbc26da3431b7e1d092849d526c5fcc3518d283ca","first_seen":"2026-07-08T12:11:18.040909Z","last_seen":"2026-07-08T12:11:18.040909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/js/content.js","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.833Z","timestamp":1783512647833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /js/content.js HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 15 May 2026 07:39:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a06cdc9-b42\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6%2BlqN%2BhrrtUt4VXJZ4v%2B5mNKOGQDltKK4zamlJMiNiSeTM9KFd8HYDjxq7IaLYmUdkSPgQPRrD6piQzs%2Fx0%2FLOZ0UBTyYB%2FnGiTx%2BLVJZ4unrTzmylYbNYBe%2B5MCJIOmE8amdA%2F\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17efce0fea323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2882,"size_decoded":1819,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"329a3cc633e5323d4c108ca9bcb8fc28","sha1":"48fa3d3965389aa93ca6afebf8110fc7864ab797","sha256":"41d57bf923b062c6d4e07891f686810826cad68a2806e6693dc01d9b51de4cf0","sha512":"967d61e8e204db779a61f30aa1ec1de02ed96b5334fe7fdd9d85af47f10b22122dea551c4be7b1da9fccb5ccd9ffc124b1877bbed9a0a3fe93c0664ba59cd0db","ssdeep":"","tlshash":"d9511c55a0114036883363aacb5bd2a9f62c00e7b541c68ebd1dca093fb1d9565f3edd","first_seen":"2026-07-08T12:11:18.042596Z","last_seen":"2026-07-08T12:11:18.042596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/welcome-bonus-betting.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.842Z","timestamp":1783512647842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/welcome-bonus-betting.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:53 GMT\r\netag: \"6a06cdc9-247e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxGMxGGxJ8DCMsvSBDvAlhycTzdE6P2aqbPn94gTe%2B1LymW8hqCLeiS4DWmvoKXL0JmpouTJwUMZCo5O7DpcwiFP5C%2Bc%2BNNo606Udz1OqJnQ%2Fuq7TlgATQNHWSsdAFu3FZpgf%2B9O\"}]}\r\ncf-ray: a17efce10eaa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9342,"size_decoded":10081,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56c473c942623a35b45f2e483536c9f1","sha1":"badb17a32743932be548497ab5f1e9e4258afd41","sha256":"877d0a2d390c61666069c8d165b0cb48a6607f05dae85e28cc90089624d0c351","sha512":"d937353d5f0df1f581b869241c93cdcf7a7c38b1771b75cbdad72c74d46de743b5148f06f1828d45adae5a53e6153a8406b045d14dd6c24f7593b05852ccd9ca","ssdeep":"192:xg11oFWdwAktEdt1lQ8XlF7A3pUmxSRCjUSdMbqlav/:2IFW6tSlZzcRxSRCjEbqlan","tlshash":"3812afd6ea492245c44ec97c2dd76347a917f8a2d784e6bdf310223aa341fc2a64c0f6","first_seen":"2026-07-08T12:11:18.043715Z","last_seen":"2026-07-08T12:11:18.043715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/fonts/Roboto-Light.woff2","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.117Z","timestamp":1783512648117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /fonts/Roboto-Light.woff2 HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:50 GMT\r\netag: \"6a06cdc6-1007c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI%2FQHuc%2FjGsCMt%2F7K9zjIDN4PEX8ByKLW997ktlqjRMvQ8Eioy14jxB1qSh2jO4MTQhgsHe4Gwb1Vt7XLgb3UdfJyncHMUgjMtZzP1Bk4rTlODI5TW1u6lbqsod65EqzyB7IofVI\"}]}\r\ncf-ray: a17efce2bed823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65660,"size_decoded":66400,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65660, version 1.0","md5":"49b833cae4bced72556a9beae1475a8d","sha1":"4ad46b10ac5fe4cbe70161dacbb1564c1946c3e0","sha256":"aea70f4f9f8a6baabcdd94ad2769b1414ebd02425c459344d608d2b4f6bfcf39","sha512":"946300a3e092cfaeb20b775efc6f6cb4d83b768975f29d3369c74c0bd6944ebc976a0343a5ffd44a577aa042679a16ae20fee6523191f3809a55230444c33dd3","ssdeep":"1536:pO1U4IKbAW2RvC8bx5sYpP2VmEe9KC8Qj4rMxGeJV/CvPlgG4ej5:pO1dIc/0vZ5sIomEe9r8E/JV/igzej5","tlshash":"0d53021b7d0ee41ff29a91a1c8d7da2a3966bfa5099603b293131e9981dd706c810bf1","first_seen":"2023-04-17T18:13:34Z","last_seen":"2026-07-14T04:42:57.898623Z","times_seen":298,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/green-chilli-2-slot.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.128Z","timestamp":1783512648128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/green-chilli-2-slot.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-6570\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qFXVV959mOC4zUwF%2BTVomlzfhvXEcRR%2FWl13b0ORSKljjQ5ntrSkmpVL1JouDYKU6WP82xj%2B0X5i28Jw144747K3bXJegcgPOnPXilAXY9Y2MF75fJ7MSrt8SQk7w%2B6CwBK5huw\"}]}\r\ncf-ray: a17efce2cedb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25968\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25968,"size_decoded":26706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42fa43a75c762698ca79c9588e34b18a","sha1":"b4b1cd797493cd0988d9e228362cb38988f8cc31","sha256":"12fee8781555a5919f12f1ee93e710cbc5281a4ce4219b5070cb410f17f9e2b2","sha512":"46811b64d770a59997aa782555748d247946f63e2536ba65c534d31c6235498050e526589c0395367b8c8f0a8751084ed885ea99cac6508cb952301cd78221e0","ssdeep":"768:JH7VV5lGUtq9FycrCt1CgouTbVg5WYRq/jG:JH7VBGsgkcrCt1CRuTbVORq/jG","tlshash":"dec2e16b6c77b4154d6ee81b4f838a310c8bbc1dac62ac412b34ed021d1f9856bdced5","first_seen":"2026-01-13T05:33:42.106942Z","last_seen":"2026-07-08T12:11:18.045537Z","times_seen":6,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/cricketx-game.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.137Z","timestamp":1783512648137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/cricketx-game.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-5a14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bvbs8YvbkAdX4frTv%2F91pRierUnkEQPOqAV24vI6w8UhMUxrFn3XoOoErOXP3S8mAqanW%2B%2Fc8tFmPARgclfd3uUXkSfdV7T0o4UNPj7xSwqr9rSXwJcLbIsY81CBUIyOG6idvNX\"}]}\r\ncf-ray: a17efce2dee123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23060,"size_decoded":23796,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac83b59a302068d937f1bae32163f245","sha1":"fe54a3afb4bcbfce68a5cf3fa64031c59413adca","sha256":"42d003f68ef15f58228956f12fc42c32198537f56f440178b8a3e2236dd6c236","sha512":"a71b1c3e04ab7017c4619fcf6759a47bc0037009f40344f51b75c747b87f98da3b52c253318038682de7d4e6d6a99d99765b40e26b88cc88527327093daf7264","ssdeep":"384:w7ozt72BTjgJ9itNdDV7ZkzVe77ANfm6QpsDhVzojF4olkme9UMTTHgAL/8E:Gozt6gKJ7izVIANfmZeh8+CkJeqgGn","tlshash":"69a2e1e149c32c740b1e67b4b94187967bc13dba8314291bcab0c9d0d6fed7a13eae15","first_seen":"2026-01-13T05:33:42.055883Z","last_seen":"2026-07-08T12:11:18.046579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/favicon-rainbet.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.371Z","timestamp":1783512648371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/favicon-rainbet.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-802\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NANWCxKa5XPz2tpb4Q%2FOTtfZG12ZfPsadeuy62HwjEEdOqytQeD%2FectVTvTj0nduOf8E4Z7v%2B%2ByKtbFrYSnl0pMoPXXLTo%2B7XqylDG30w1FJyf%2FwcAJBq%2FfbKDKCJmR3sds0VZYM\"}]}\r\ncf-ray: a17efce45f2923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2050,"size_decoded":2795,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbcdbe9f0bacd582b40e9c6a4cbf0173","sha1":"58b4118a88af7bf36230a130837d1ab603da355d","sha256":"6c6875ded1b1cf515f3700a256c68b18f045a71123eb07d50bffc0b1abd58c93","sha512":"50b298c150701da685cc604c7b409dcae96dc751f18c6e546a463c06a7f6acd57c5f5fd96ec6e7ae73355fe220329f912f7bbcf56189b3b56a92a9ca89cf0ce0","ssdeep":"","tlshash":"2b4108f5d71c1b4ac7c537b034c1a3a5f35eb832340997b5838801252790bc18171a6e","first_seen":"2026-07-08T12:11:18.018096Z","last_seen":"2026-07-08T12:11:18.018096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/emerald-blackjack-live-casino.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.412Z","timestamp":1783512648412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/emerald-blackjack-live-casino.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-5bb2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKMG48TFYZxx8lClgLJk3qIalUL856YtlI3iko2AJ%2Fn3tyVnBhoHn3ZdnwK6qqs5CgJGUoqlrAkKVzuJ6YCOCPQZmJf8sxMzxQtykBTY0YDoUpbMMrxWiXZWgNm93tZS15KOw2sW\"}]}\r\ncf-ray: a17efce49f2d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23474,"size_decoded":24206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"993a199cb8793c587e74527176c73f7c","sha1":"848889f974e9d71ecc8bbed2e89d97ae87c6f030","sha256":"ebea2d93db57d9d43fc786498dddb95f60b3c05d0501287d040d0c9bb897d249","sha512":"5ff47551ef0c9ab3f551e6fe3957d5d1349b8f466c0ebfe5d8487efcde5da99227a7c2a6cec2f1ffe35084f821c00bfa16a29bf4c2006a0ee93e61d226656883","ssdeep":"384:hDxGBAEGS4O8tLv2bYNx4HefXM3blQGGz8ZFXYATHCjLUMqjlMWTObCnfAg8kq6:5xIGjr5VkHefcLlQGGzmXYATHlMMuFbq","tlshash":"adb2d0f2a8b64decd1a5f8f0a8589257fb416a45f69c05e4e30cc08f918b3e11d09fe2","first_seen":"2026-07-08T12:11:18.047914Z","last_seen":"2026-07-08T12:11:18.047914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/js/swiper-bundle.min.js","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.831Z","timestamp":1783512647831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /js/swiper-bundle.min.js HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 15 May 2026 07:39:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a06cdc9-24ba7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLI2nhQF5Fy7iWXhCgWAyAnj7%2BA15JbJowqnT4i6qk5iNmbniY0Bc1cYf2CpVi9%2FYHUUZjpbRkObwziJRRIOTVpILMxVumyFstjQ49%2BB0QBJFbFbbZVbbBB0XSU6bmzj6Cf7vSei\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17efce0fea123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150439,"size_decoded":42583,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"a19ab44fcf7bfa47d1f33869f9f0b53a","sha1":"39c57c2e3cc89139125b7e69df27198676bf211a","sha256":"1b0a0b2a2c9b029dbfef2eb9ff043e2d03e3e1b07e674ce6183965769538edcd","sha512":"5f11b67534a86ec18dd481a00533bf90fb3968a3df30f97f4b8bbfc1f49834dbff516984b46965dd2e5a1fd41b98b9b7b8df292967e1892f9dafcf1dcfcbb8e9","ssdeep":"1536:9KJrfGm4FZE8N01mSl43Oa/BlxvHzEwkEG+jVN3/gCjPQ/BnTElysyM3wMj3AbMU:oJRqZNLowEwkESbBnnsyM3p3KMRVfiD","tlshash":"dce3e889a220b57646e3169b93e4c221b3b54540b80ac4f470fd4c9f597ec9813feefa","first_seen":"2026-07-08T12:11:18.048892Z","last_seen":"2026-07-08T12:11:18.048892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/money-minter-slot.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.130Z","timestamp":1783512648130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/money-minter-slot.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-4b5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2BpKY%2B86nLNqxagLl0PWCnx5zGOSLhWJWFztLR8xGAbW08%2ByV8QuiN7a7JwXaeLQj209F88vXic6CUFvN0sdLA2aHcmwvyWmIj6PDGjZdnUEk7z5rpj7Jt%2FqFtkXg7TPlwc7IW63\"}]}\r\ncf-ray: a17efce2dedd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19290,"size_decoded":20028,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14c1fe91fbb4c0437d857ad68976ac42","sha1":"7512fea3ff1d5795336fa440be909ae9af537358","sha256":"d0eaab2df3c96b3b8e034c973cf9207cbecd535fc2f4f5fd29de5408b36c877a","sha512":"702086c5c41ff776a754acd38b07626d8c4691e6ff503b214cb219ebcb779a9c28dff78ae0b37c1bc147fc058feb2bb7af8cad8a538d34f6b7986efb3bea107a","ssdeep":"384:K2lpZ03OvW8FFAk2xIQgUijYXi4/CneMV3QiUcaONN6SFYY+sb:5BOFk2mQRcneMg/cGSFYTg","tlshash":"9082b09157abaf72534f841c9cabefe5257f476254a06d4407204a3829b635cf260eb8","first_seen":"2026-01-13T05:33:42.089169Z","last_seen":"2026-07-08T12:11:18.049859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/mega-greatest-catch-png.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.132Z","timestamp":1783512648132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/mega-greatest-catch-png.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-8112\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6TP4rLBVurGRM7D3YWBubK3H45NvxtUFkhMvl3%2Fd1qg3VbGD%2BaoBKyuGG5QwHDZZkN%2Bl8NY4bH%2FUcWl%2B781U9aBKcQMz4iTrpJCsY%2BDbK3P4mle7mWN7g3u60ZZpaR%2BGuRox%2FDW\"}]}\r\ncf-ray: a17efce2dede23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33042,"size_decoded":33788,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a30ffc97ae9ca800b873b252655e29ea","sha1":"4cc829b2545a66a653d508f5cf4c92982678157c","sha256":"765534d8a5e9777237efbf48207d8c76bedc44f8627edb66bb3e3ef3e6c220eb","sha512":"653645a7b475e599190403b7ce9cd3ee8ff75a5f0172a1891238a4c0d43707ef42c96a8e846d0504401432f9a54eebb4e07eeca45bc230525cc9d23f2be38359","ssdeep":"768:2T1ufOBgNEU0HA4CLFP+F5XeAogtyrZ/zJjssAdUJP:wuGmi15NRFyrZ/1jssii","tlshash":"1ee2e11b4d02279f2ee0c8881ddfb4c325cc452a6a751bec6d85fa0779d5dd38068de9","first_seen":"2026-01-13T05:33:42.077941Z","last_seen":"2026-07-08T12:11:18.051092Z","times_seen":5,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/css/main.min.css","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.822Z","timestamp":1783512647822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /css/main.min.css HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 15 May 2026 07:39:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a06cdc6-164e2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP%2BxPFqBhXzcdLulEDWnMhO%2F6yRflilfeQJt5sc%2BEXS0P5T03vrJRehdOtr09ftT3xq6QzXz0aeNR60SscJAANCsev9yIJc3K0AUgeGyS8yQ2PNEAkeFWURFfAv77XO88ZtBcpI9\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17efce0ee9d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91362,"size_decoded":13053,"mime_type":"text/css","magic":"ASCII text, with very long lines (1084)","md5":"f8eb1e34e35497debb5259b2b77d2539","sha1":"9bc3d923c5720c26b2e80ed3f4c20dd362e188b5","sha256":"3ff5c3f0fe554ea340367e2170793e45ef764e90e8989cfbca29c6a331ce45b6","sha512":"2df874c9e30cb118e086a36779ad73126fe3a7fcfcfc543eccea01c8d93ac8f253c49a4fd61405f07e9427899ddb2bbff79a93a40ebe3d59e116f698d819a4d1","ssdeep":"768:fLw0IU7FZS7FZXFMJSSFfFlsHD1UFzOxg3tFbxNJimi8/SH6K3T5q1j+vTpbXTRt:xcPFMJrFvI1Ukxg9SRjKwis","tlshash":"5b9352664563164478179c185bdb1b52a2bcc013960be9f93fcfb24c8fc76c896e278e","first_seen":"2026-07-08T12:11:18.052047Z","last_seen":"2026-07-08T12:11:18.052047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/rainbet-main.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.828Z","timestamp":1783512647828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/rainbet-main.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-e6ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rL4ySpUGitqOMnE8aP9QyH0qltA7uDcL487qHAYnOivADDW9vYT3JiZFWhkzbYCRkSl6l717FJzOwir%2Fj6%2Bqvz7ga70gGdYMTBxPjaiVVfXZ5hjRtnLtiNfld8ltBnk%2Bxwu9fvV8\"}]}\r\ncf-ray: a17efce0fe9f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59114,"size_decoded":59850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41c15dd4c48a49901370568a8acf91d2","sha1":"83590ae526508bc94b954d33ebe1f81a93fddf46","sha256":"4468ebc31fb9456722ca26f622840c4a44b3f482557b49b7b7e309182ead2e36","sha512":"0ec5e8ff0574ead71b69fee18fbded56dd864d40671a55728c4be791784b603c08efd26d00bc39c8bf4018c18fa0cbf2ed3c4813a86dfb11fa4abc7551894e0e","ssdeep":"1536:7YzN4Wsemjay0IxCSa5v5nckSa7bBzGoIXgWIUl:q9mjayj6R5c7IbN8XVl","tlshash":"e9430226046d2ec1c01e9e3522eeb77ed6b75b172a636b41540cb0bfe309f88d2e454e","first_seen":"2026-07-08T12:11:18.053049Z","last_seen":"2026-07-08T12:11:18.053049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/fonts/Roboto-Bold.woff2","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.109Z","timestamp":1783512648109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /fonts/Roboto-Bold.woff2 HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:50 GMT\r\netag: \"6a06cdc6-101d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fL%2ByGUcEE5g9hUZP4ma8UN5CRt6VbjWSExO6DPUsT8WD3GUd8olybXZr3zQenA98qI5Xedr0RwYRRG5nwwFIWDboqb1uPTdXmxOjApldMDvMMoHNuJ5maDp%2BgAuEzgMCqGXFRaML\"}]}\r\ncf-ray: a17efce2bed223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66004,"size_decoded":66742,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66004, version 1.0","md5":"ba18ba6bb49f6fb83b70d5ccbc7b4e41","sha1":"59f3738e0d3597ef128c6e91fc5a78dfc3986d4b","sha256":"195a79c3a4ad21e1b897dd21799f8432e4431a719b8cdc6931f92a6a7ab4c167","sha512":"7777fd0e56ae83ca8acfaa276ca61d21bff40af5d088358fb26cb8774ceb9bf47002433ef995b4afa053caec89278152a9a727926defb4e47da383ee406dc5c2","ssdeep":"1536:BHb22F6p/tdXoY8QR1dIhXX30u68jU036rJ3u:BV4p/teY3VIhH308U0K93u","tlshash":"545312c1929f7b65776723c3c83eb545f046ee53623b11b6881eb613b8dd025a0cde26","first_seen":"2023-04-10T05:47:32Z","last_seen":"2026-07-14T05:54:01.598973Z","times_seen":4954,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/fonts/Roboto-Black.woff2","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.112Z","timestamp":1783512648112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /fonts/Roboto-Black.woff2 HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:50 GMT\r\netag: \"6a06cdc6-102c4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUWXPMZfv3q4gH30p2Soq7QUoB7OgEuUwZDyzHxARbRQTnkBp9HP0B4qAtTnVq%2FEoL7MYu6xKp9xCkC8v7Kx1JIVKKxiYLsWDSPYif5ZssZjsxAx70ILK2SlJVKyWAwzw7ioIjXH\"}]}\r\ncf-ray: a17efce2bed323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66244,"size_decoded":66980,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66244, version 1.0","md5":"b1ab8f3331cd9e60c44885e16d210203","sha1":"d24583e0588a6c4e55d99afb3af2e75fdaa5bfaa","sha256":"2623bba21fe00b50f471a04e16cf20872e36776d82f25c83b319c0cb2bdbcee7","sha512":"c13ae181590fb7aabb7bd72899caab6a45703a3bfcf94f3c3c77b34d2589cdcb7e8ba11dcd88e623c2db199406dcfec6bc17c4b1a984c2bd1354d07b556fe175","ssdeep":"1536:1YNS5U/XmbKbMOYbv6ppb2aQ2mLuxKa8CADz:1YN2GgOs6uBxiP8Cu","tlshash":"8653126d07ee6728c395c5ea83935ec035a203718df306db81e8b13bd66f79819f461a","first_seen":"2023-05-09T20:10:31Z","last_seen":"2026-07-14T05:54:01.730579Z","times_seen":406,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/black-wolf-2-slot.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.133Z","timestamp":1783512648133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/black-wolf-2-slot.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-7254\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYo5dhIF%2F9LGZjEfgsV5RtOpSBZ0IJhgwmAP8zGScAV8%2BCfVdFscqWKmjEJ4QRtxdcw3tRBIJ7Vda2UBKzU9oK5Ywyan1Nzc5ECS%2FLBOD5VgWKUg3FyRKx9FcgdbiuTT2fym9Ehf\"}]}\r\ncf-ray: a17efce2dedf23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29268,"size_decoded":30004,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3238caae9ac1589e09a763b6cc4e508d","sha1":"4783170087182273ae615a52977dd40289a506cd","sha256":"cf89eba493958654a5c300314d5a128c28bf18a13010f608119813f6f6348a47","sha512":"60c92fba85368e7a371588c57af319aca799718e7a0994ed21b8dc29c370c154f0139673b5cb42c61d4eb91f2ed24566c29f301a85e99ed269eea47a9e528b4b","ssdeep":"768:XXg/7SM6BcDaZfvaJz3VeKtAIPht4B7C8vYQ3AFWsiUt:vMIIaRWplto24PS","tlshash":"d6d2e1d25d1cd513096aa068d2c6ede4a557320ef8f371f83eb04eb0475724ed51ca5e","first_seen":"2026-01-13T05:33:42.127395Z","last_seen":"2026-07-08T12:11:18.0551Z","times_seen":5,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/jetx-crash-game.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.140Z","timestamp":1783512648140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/jetx-crash-game.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-30cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wz%2BtvBgwphbMw2RaGCsA3tFLq3BgMtL0fkZOAuXmBMZEqTeRF5KP4bv9a0fXahvvvkxSg6oQk7lz2aWX6A7%2BT4NkYfO%2FUzlBR%2Fqh%2BrCbY5%2Fo2TxzgltNBrywpk0QRKQXPx9xYZXu\"}]}\r\ncf-ray: a17efce2eee523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12492,"size_decoded":13234,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0fcc0a4023a4576dc3f548fe2279b917","sha1":"2a57558bf50cbb9c16acb6c4b444b70b76921d2b","sha256":"fda1dfd051ef262337c2bc4c84971f27d0c7ed08bf076b23cd138c76de720cf4","sha512":"0d779d0205e9352f93fa1fec2f6c1955714f0bb01e22e556b6a1c657412dd6d5af060ca1583e6b74cc6b62bb92dcba8c28b95332a5779cbb823597488aae59c6","ssdeep":"384:Psz0OfrwkbSB2xSqANm6160UuxXW+/UzV18YYY2p:EokhCkXArvf/UZqYW","tlshash":"f342bf20d1d76587ba4d210828396f3a2b58c28b84abd1e0b7eb65f38c8278d753c249","first_seen":"2026-01-13T05:33:42.138889Z","last_seen":"2026-07-08T12:11:18.055595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/js/main.js","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.830Z","timestamp":1783512647830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 15 May 2026 07:39:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a06cdc9-25a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFfpfQXzyLWYJg937cOGNiDlLRWV3zFFvJtybzTvvaJZ4jQNUZ4uriPecEKgAe26c%2B%2B2gmkdPfCIqxolQ9kGwCiRi%2Fkz0PIf9%2BZXkQdHM1Y2ZkKK1DWfg8SW84B1ecL8lhLytJm4\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17efce0fea023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9633,"size_decoded":3048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"8f3add2b3a5b26c4c954bfa8397a8aea","sha1":"98f57c5c5aa918f3291a9e577e5153827e884352","sha256":"4298cf1328077c79a37a397620b18bcebd428b097eb32799c7dbf9c0bfc887f5","sha512":"2ef48380cd6b34479c6ee0e311c8ca0e1d05d7018c135b6fa6ea53a3e11a3acbfeae198b2752526380db8aafd8233f2ef8bc5b75e21b8ea657cd6b1a10cdc363","ssdeep":"192:tjx3F73qWBexlg6SXXvCx6IIlf1UIRytW9qB0CTSNB+/P:xxhqWeXPGXvAYCgFDi","tlshash":"d412429a23181536807b637bdbc79689f26260bf758145283c1c86c90ff0d9556f2ffa","first_seen":"2026-07-08T12:11:18.056734Z","last_seen":"2026-07-08T12:11:18.056734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/rainbet-logo.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.838Z","timestamp":1783512647838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/rainbet-logo.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-3648\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzZVR7OUbl9Ab81p6Kue0LuvZz9GQVdImuBA9E%2Fp2BcyojXxGzwTStYGgUg6mX2u7elAd5cGWtedMvPEv9S%2FuHKTxVYQKHRxc4Sr4t%2BuQ%2Blv7npUqcdnkTk2vZTbrosMdyJLlj8d\"}]}\r\ncf-ray: a17efce10ea623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13896,"size_decoded":14634,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ed23d2318b9c5ab6a3302065928b62a","sha1":"d287133a2ea16a1676e9d2be92ac7a944708bef1","sha256":"0d6075fa235556b301bcfd0c02a5f053904924f266ecd944d1b3cf0240b31357","sha512":"8a7d5a2193a4b4cc04e13ed0563ccbb7753906deaceaf23c2ebfb8c92e00ec07e16c6e9cc578dafd6822d009cd15e90a17a52cd8153cb71e49f8f6a767144696","ssdeep":"192:FcLVeAEReygzTKmUhkog0R4G/FRa5ABWlYtxwlkCqcVjlQCr3B167mBF2HL3t:FNtgnjLKhkABWlaCqiZ5336yBFU7t","tlshash":"2352bf5cfdc85247a90634f10f9891a814607bdbce662f0c5f2d8f55f685a63b68231c","first_seen":"2025-12-26T19:45:32.810342Z","last_seen":"2026-07-08T12:11:18.057738Z","times_seen":4,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/coin-volcano-slot.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.126Z","timestamp":1783512648126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/coin-volcano-slot.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:51 GMT\r\netag: \"6a06cdc7-5930\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1nfwRezEV2pxeD7yEwqT5ZS%2BpeelkfKFzadB1Ecw0NVOB%2Bh34x8rLvx5LeFoRi%2BtUGMgoMJVv93L%2BCvD7DfrH5dJEBJWNW%2BrH5WlrTkmV2OoqIoXyMja7KW5Mdf%2Fe2gzPS4sUkl\"}]}\r\ncf-ray: a17efce2ceda23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22832,"size_decoded":23574,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 334x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9830f3cc256eed65ed15f55ca5921081","sha1":"e087244d925b1e69401043ee74f899c3ae4b00e7","sha256":"88d74e454cd4aba6e918cdcbca923d08a7dab668ff44466bb021e2d211e856ca","sha512":"4cdba1cb60920df7baf61ac7c2734b3757a97facaa502f758fa68f0f1db76f43ab0a5d95c6059caa6bde0ce758f652ecf5b7b82f05607e8cb7f1d598c3c9c74b","ssdeep":"384:Nd9XrCbHGWGffCwjGx7rvly8Dh9qMJYrNK4XwdxwfXi:H9XrfWxT1xxV9qXsCfS","tlshash":"0fa2d1968dc622d9253a495e37f7ef7a036206f7487d5b0031889d0eb542f1c52f772a","first_seen":"2026-01-13T05:33:42.117243Z","last_seen":"2026-07-08T12:11:18.058518Z","times_seen":6,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/roulette-las-vegas-live-casino.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.413Z","timestamp":1783512648413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/roulette-las-vegas-live-casino.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:52 GMT\r\netag: \"6a06cdc8-811c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQX8CdHS4tQnR2qOtuZyguOodcT8drXZy2rVIWQ%2F0Mcshwruo7idR1WsQRcy9CWSIYPEppe7R6DWsE0DusvqYnatosJ4TmVBUJVNgfQzkPkeGUlncDGoLXE5soQ42GqjlD9iMsej\"}]}\r\ncf-ray: a17efce49f2e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33052\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33052,"size_decoded":33784,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a74b815c8b30523509a648cca4c045d","sha1":"c9ac3e98b9f61360bf7ab9822cad0357add3886c","sha256":"9e5fdac6e176bbff1b57b72b0dc963b25b6ee9222a66a20b67ba2e3b9e4e4186","sha512":"9642d9c7f41407a83ad81298e296b155bca846247bc0d1450ea66fb6701c119958284141106cbef57321111c94f4fdf08239652d72d01fb956c78898bd482121","ssdeep":"768:Zs7cSs9jt6kFz+dPAIt0nwGqD6d6U9Bg8hw/7PYnnR:u7pbRBU9BgHzPYnR","tlshash":"34e2e1268e3c8e40cfad967601bde68d6da7e11427df6d8294473428df601b098fc88f","first_seen":"2026-07-08T12:11:18.059071Z","last_seen":"2026-07-08T12:11:18.059071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/images/welcome-bonus-casino.webp","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:47.840Z","timestamp":1783512647840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /images/welcome-bonus-casino.webp HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:53 GMT\r\netag: \"6a06cdc9-1ede\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERUUHyxYmS2yTk94w5dtaMkebx%2Buhlu8AVygeljkhgCaLPTSDP6EDq0I7cpHh6k1hBfJFSz0OcPZdbRkXr0o37x2eRcKFRKETh28tlOcvJpd%2B%2BEUJ6ftBS4iKo3efvadwscEZ2bh\"}]}\r\ncf-ray: a17efce10ea923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7902\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7902,"size_decoded":8637,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af4cbf885037dc07ed72ce39ac8a4d2e","sha1":"1cc3bf99e491b6cd263991a6755b1f4d2a03d51b","sha256":"48865ff4095dd1a65919e02ba8763d2e78d96cf6774f9314fa4d62104e9a2dfd","sha512":"9af2143e98a381be7d39eae06a0261664351c7526a16f0d37c6e6b4b8d3bdede543b80d87edf9f3817d246c0cabc2d28decc17705980c6b715772fc71f73dd3a","ssdeep":"96:llg11VHAU+80nDE6wP9s4gP6in4VfDJLGSQZPFE7n1JElCa1IJMa2egPBo2XeugM:3g11BGTMin41DJKlu7n1c1ISa2eubgTo","tlshash":"55f19ef8362b0788d4891334a6ff5f6b93622a5b25cb4aecdd4091121b587c0370e8e6","first_seen":"2026-07-08T12:11:18.06033Z","last_seen":"2026-07-08T12:11:18.06033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlogin-nz.com/fonts/Roboto-Medium.woff2","fqdn":"rainbetlogin-nz.com","domain":"rainbetlogin-nz.com","tld":"com"},"ip":{"addr":"104.21.57.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlogin-nz.com/","date":"2026-07-08T12:10:48.114Z","timestamp":1783512648114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlogin-nz.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 00:24:55 GMT","end":"Wed, 02 Sep 2026 00:24:54 GMT"},"fingerprint":{"sha1":"57:FC:93:8D:E1:AD:08:4C:DD:D7:F8:4C:AA:38:DC:47:1D:89:26:2F","sha256":"E7:76:23:48:F4:51:F2:4B:2B:84:FB:D0:F8:5D:E4:A5:C4:71:DC:73:B7:DA:50:CF:8D:00:EE:EF:5E:08:3C:2E"}}},"request":{"raw":"GET /fonts/Roboto-Medium.woff2 HTTP/1.1\r\nHost: rainbetlogin-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlogin-nz.com/css/main.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:10:48 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 15 May 2026 07:39:50 GMT\r\netag: \"6a06cdc6-10494\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8w4vN0WN37b6qBZepfozYwHAVOBtdKUmNqYGnekXf2Koi77YJTbLLWDZ4ZxYUZJMM0LE6B0YdynmQ0mKSgmmCjmyR9mBiI7iKU2MYMRcIRVPFbreDkfb2WlGhAmmJTPTN0NuOjwQ\"}]}\r\ncf-ray: a17efce2bed623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66708,"size_decoded":67442,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66708, version 1.0","md5":"c19c88ee38f87fac98a8e366265d5bba","sha1":"4a1f2cb473c57441f5370154839e7c38a1a8a7a9","sha256":"2571d35a7c5f55783fcc3445e285fd22a2f01c48acc93b98b9860547e43b6942","sha512":"9afcefe7299498b7f474f0f1604d38d1955e5a629ff01be29855e4d334deba3e817593ead6956ab4d43be2f3562812aad390e3ed2b68ee14981d31a7af548baf","ssdeep":"1536:NxNEa+QpZ56veWMsmwJC+ggy01z9utRa4am:BOQn56vwspVFz9utRFam","tlshash":"dc5301d0ef291feb928590116c19b4e80827b7772bbf9b7714f8ddb703e21016a92467","first_seen":"2023-04-06T20:04:33Z","last_seen":"2026-07-14T05:54:01.484217Z","times_seen":1252,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlogin-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}