{"report_id":"dce97892-cda9-4d81-80ba-efb25263d175","version":0,"status":"done","tags":[],"date":"2026-07-23T03:06:47Z","url":{"schema":"http","addr":"rainbetcasino-at.com","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetcasino-at.com/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"title":"Rainbet Online Casino in Österreich 2026 | Boni \u0026 Freispiele","dom":{"size":144744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3140)","md5":"5e7e5c9191d5b6901ca608e0ed50f00c","sha1":"bf7f0ad452dfaaeb1a61a7e72d71b709eef2a091","sha256":"1d15f6ff70b4f5b93a5a96a604849508a4897a81636aa2dbb1bebfb31d92dd5e","sha512":"f93a6b7423fb261207de171ab24ebb6a194a1ae6d5540000651d985b0d8830101e94e538469dfa1a578be81a78c6bbebf20445d31c91091bb589bb63750f2b37","ssdeep":"1536:mOUQr2lgW0eErwOKh0o0qUpcYz49dIbO/h4hrkVmiqQ7jlUQrJ:4lgK1H07qQjowWh4t4hqs","tlshash":"93e3f6aa20f122bb854783c63f115f263f85e727c14a1a00f2ec8be61f96d65ec5b54d","dom_hash":"domhash943b5b9e8eab202907c36786a0f917ac","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasino-at.com","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T03:06:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasino-at.com","ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-07-23T03:06:50.219494Z","last_seen":"2026-07-23T03:06:50.219494Z","alert_count":166,"request_count":166,"received_data":5551928,"sent_data":98944,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"api.ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":722664,"first_seen":"2025-03-06T23:55:29.726154Z","last_seen":"2026-07-18T02:56:35.574255Z","alert_count":0,"request_count":1,"received_data":479,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcasino-at.com/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cf637224a7627adaf7093adda846bb7","sha1":"d060ea147b5968894b00dbe34fef3916f6c69fd8","sha256":"32df1ff84cc9f1d4627ca9a9c54e534532c54380a173c267185747d66007d3fc","sha512":"ed468443d8380e5d39fb05c27cd17423bbd27fceae26496b5c2e1193fbd2951ab65bf1edff6c52d5cd3f59c94cc9a63c7ad5381eb736ab9c61489dab4b420273","ssdeep":"","tlshash":"9e80000800020e02200b2e8c2ceab8800a02000833228aa82b8fe088028a088c0c2808","size":27,"data":"","first_seen":"2026-06-08T00:51:55.735803Z","last_seen":"2026-07-23T03:06:57.266472Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T12:19:11.547957Z","times_seen":404320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/runtime.js","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-23T03:06:57.133867Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/app.js","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","size":46320,"data":"","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-23T03:06:57.134415Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbetcasino-at.com/build/frontend/app.js","line_number":2,"column_number":42616},{"level":"log","text":"de-AT","filename":"https://rainbetcasino-at.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"de-AT","filename":"https://rainbetcasino-at.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"de-AT","filename":"https://rainbetcasino-at.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"de-AT","filename":"https://rainbetcasino-at.com/build/frontend/app.js","line_number":2,"column_number":13046}]},"http":[{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/holiday-season.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.620Z","timestamp":1784775970620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/holiday-season.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/holiday-season.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7msf73lnxx\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTw2p2NjVotzqYvbxxrq93cII%2FevlLQG22wjOmioZA7oHQlrRvuicJgmDdgw5PJ58FTALjZbFPC6K%2BaY9DcJyCxJAyshZxQQIm8XLP3mxSxsxsqTZGxdhSEgA%2BOV3rOWZe5eQdy5xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b85f2d56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31029,"size_decoded":32055,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"47f78d156af657328f19a4ef69745c6a","sha1":"0547fe59cbf612d8ba8a25ae144181389588f7fa","sha256":"da5cd1d1b5e77c74af08854dd7142571d9bafd3d08fb4767145907b16c9b831b","sha512":"b065d6c2491f715d4a8e61c46fe4c8e793fbee8ce828021275af7197cc002cdd37feeead699697864597213afad0ab7c8aa590657430624ec20a3346a4491e3a","ssdeep":"768:/I/MhHYcR8gWE4DBTDKrIDnTDaA8B3XCtXVAPvm+8L0A:A/MhHHegWV4vA8AH5rLZ","tlshash":"61d2e1a2b36ff6a2913fa76b267bc24c40df4760a839f77904a7c514073743222a5628","first_seen":"2026-07-23T03:06:56.979405Z","last_seen":"2026-07-23T03:06:56.979405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/secret-of-the-stones.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.621Z","timestamp":1784775970621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/secret-of-the-stones.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/secret-of-the-stones.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7qan36xu1r\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUj3p3JwtNSsKf7LuQYSS9j0FLYdkY9fke%2BH8PFbdaK4ORCfkKRkaGpmrW789Eh1%2BqaY%2BVE8tWJXIdYc5e5RWH2b%2FXCYRMMXqjmN8x1UXpJDq%2BgmqHA7F9cxMsDiaanxFlurGd463g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b85f2e56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38943,"size_decoded":39979,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4b38eab7135fd604fc8bb42f2e25a9bd","sha1":"887ca83f2aabe4076438e3686349053a6fdce6c4","sha256":"07e9f996f2ab998fa14467235390566b2bdeeb052f4d2e32e186cb35ee67ddce","sha512":"4f9adcaf43058664b812b772df38b228b3d979af7e30353d1e22b7b4680816f200560d55f1a76c8695ddce8c6877f6d36ee5270c5045a89c6a25b176635d6bd2","ssdeep":"768:LRBM6ZGkQU4+Bqst25bjvwRYQ3mJpIB7Y0jG7ibrxmScpl:LjZQUEstk7e3Ow7r3pcpl","tlshash":"fc03f1790b8933c5306ee3aa01d09e56f5a7654ba31653bc26c51f3adf2e9c3f02584b","first_seen":"2025-12-15T02:33:05.814917Z","last_seen":"2026-07-23T03:06:56.980611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-5.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.660Z","timestamp":1784775970660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzezqcOABLVa6gMFqi%2BKgJFj15519BCyBN0GWKVl5dQ%2F%2BVa1%2FcTDizAJ4gbBJuPpskXac%2FIIDPy0xH%2FNnxpfuIYeZLRD4rTtKGlhmd6vFiNrqb1TSlrkWYlKXTCCToOZTnmQL7aVnw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3eianjlkdjdb\"\r\ncf-ray: a1f777b89f5356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":1295,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-23T03:06:56.981164Z","times_seen":73,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:17.014Z","timestamp":1784775977014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/build/frontend/app.css\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:50:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Hn6RDAgxwG8RXFmMfwxYBuaqDHkC%2B9Mrv2BP3F8ndD7kiaCuDRJh0Nuus0ipPYSmLLksslcTIGUnQhWg5Cb89eoo9U15bGdE5C%2Fx8zBICcOcZ11yfYVD%2BQWrZPO83Zlsx9uBYEYWw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3ekvgl2a8z5z\"\r\ncf-ray: a1f777e0584956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":1183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-23T03:06:56.981891Z","times_seen":129,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/ancient-egypt-classic.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:24.422Z","timestamp":1784775984422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/ancient-egypt-classic.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/ancient-egypt-classic.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:24 GMT\r\netag: \"dh3ei7iahar6n7m\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4CmzU0zFlwu1b5DdEwAJA53sPmzWv1xBspmhsXHNdZOkqvHFkq8L%2Fz%2FiylhjQboosfU66maAVEiiv%2FDYPHvtiSi1bf2ntn0YCOwq8x5QbFal%2FdksUjYAgXrYnWreGogJzLrLBwlcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7780ea8d556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30082,"size_decoded":31117,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"68bae68a7bebd9fdf47fd64c6c354e7e","sha1":"c7f3fa35030e147ae3c62b3c95bb8e1864dd7040","sha256":"98265ab0e22fffd0fa170102a90c34b15395a552e6c421974acea5431773c244","sha512":"e957f07787f5afcad5b3d132e2e6863f9ab296e3e5b5f00a388290527571c8b608cdbe2c4cc1731cc3183e677eaaebca2aed3f616b51c0a29ae5bad5d57278d3","ssdeep":"768:qN7tNwm3VyVb0DoDBGVyKaX55qHnqvHNRdYsNyFepBfQevRHX:gtNwmMopaFtR9WernRHX","tlshash":"9bd2f14836b9d568bc1e0473732a0104bf6672d2ab6d75ebe88113da637fa4b28d18c1","first_seen":"2026-07-23T03:06:56.982417Z","last_seen":"2026-07-23T03:06:56.982417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":272,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winner/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.035Z","timestamp":1784775992035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: de-AT\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"385\",\"250\",\"593\",\"454\",\"653\",\"746\",\"232\",\"392\",\"622\",\"143\",\"337\",\"306\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEQKDJ%2BK4qhoyR3KJQrMES9dtEOThEIPpqQTPndq5AzlPsyIKvzyvJUh%2FHZMHd3qdYkQjPvdIau%2Byx92VvBYWpLL1wAstTKzpB7gcQLfZRG7QtXaRqwHLNtErM%2BO1fhrLyvMBqRslA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f7783e395b56b9-OSL\r\ncontent-length: 207\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523,"size_decoded":1200,"mime_type":"application/json","magic":"JSON text data","md5":"7d30ef3372e1cdec719dc45d857e0c0e","sha1":"3658c93963fcb47b9010589496f537624ab8fc6a","sha256":"51091ab14a83632e3c28dd69cc6e9f33b0f963bc1e66b7aa1eb931b20b04b22d","sha512":"7e0c9ec993e8a0a46f3f9b542814b545254d10565354011d70991ead8deb1b4c18fdbd35e72f77e9659bca3f67c98ca16aa24d75aabdc4e412739303ae1e3e81","ssdeep":"","tlshash":"b4f01c626a61a63fa18310d0ccb7efce1855ec52542e4834fdbf1991d3325246ed8a0d","first_seen":"2026-07-23T03:06:56.983707Z","last_seen":"2026-07-23T03:06:56.983707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/glow.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.440Z","timestamp":1784775999440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/glow.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/glow.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7m6zlcjlnm\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGbwgs7sxs5X3xxibJvPX3yJYrL2bV5UstQ6WwoXDw1Q37RYTaxYmBGBpy%2FfEqUz%2FudbXRshA3N76xS%2FRGNL%2BFb%2FDE0kONcOyS4ywWgcT1WrUsvaBmMCubLPuK9S2g0qUflcOPYBlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c79ec56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28066,"size_decoded":29086,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"164f7f5140d7e8ab01e552d2f9fbd196","sha1":"101c320c78d57b5fa14b097f4eda1738e698d7fa","sha256":"860c137b03cc8a51b99821245e907f0308051bcf29c8f8d508db228aec5837dc","sha512":"1025f9c486528bf1be2545b86dec3ec2939eb60dfab0e236ff1717a777a4457a3548f34b494d5b54bb6bc721c4ac475f9ac1901fa4940c1e61761c879f582a10","ssdeep":"768:EE+3yUjXzwRV0hpOpcLhNy7YRd56uVFz3v8i+4I:pKvjXEkfLhNoerXz3UiHI","tlshash":"9fc2e1b72ba1a81ac6afec5f30261348ff9a4aa6fd8763513c99744623b8dcf4514025","first_seen":"2026-07-19T01:55:24.566314Z","last_seen":"2026-07-23T03:06:56.986947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/gothic-slacker.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.648Z","timestamp":1784775970648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/gothic-slacker.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/gothic-slacker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7fz4m5y4xc\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEaia3OGFMh55rPotW7HuHQHbGIR1BEFU%2FWKvDRH0zSFdzUVSOnrHDsQYwZ5CKpdHGhEE4UiPQ5bcpFisk1UE2KY7sGpdmat95lmQpD%2BZbXOBKd3%2Fn4S3wcaceOTzoaBsO7N4aogfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6384,"size_decoded":7414,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"701845ac849c2d6b60cd965829e0a558","sha1":"1b9c623b11d799e9a4c7f0308a1fdfe5e766b1ef","sha256":"8c3539dc2ff868322087112d3f2e2e8c19c59b4b269ca79b9ef9cff548a57fee","sha512":"1f63e78b799261a8cf0e1a31c615250ad81117bb24e6ba337fef6e27c0a809463d52291aec72acb07d8c7abd01c5e321c39b3a0e6a2ef960bbc4d08dc828d1bb","ssdeep":"96:S2RuzlNkt/mx4a8vTkE5SEVM8RscESOPe9Ot1utbqcJJvXNYJ84om8yC6oQ:/qimx41vTNwEOQE1Ph1ut2cJhN/fQ","tlshash":"b2d19d1916a40409ed6d0e3c07185e417b68cf119b8c77ae6cc0a40ccb3dcc9b36b9f8","first_seen":"2026-05-26T07:00:27.040683Z","last_seen":"2026-07-23T03:06:56.988376Z","times_seen":5,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/play_icon.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.654Z","timestamp":1784775970654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiao09paljl-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QsAMgq32Z6MWxo1lAsTJejRtUtO1WLaAWnveVEKCOfo7DsuLT4xGsnfhODPPeggiUl07CZtodSEY4Z3fUfXyXClPxkdQjyuYyxSZ3Df5UypW%2FQysgCm8EkUzwC4JiPZGGZScbFP79g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b89f4d56b9-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":1365,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1becf64ab38054f7190d96aa5e33ef3","sha1":"42850c0f349d3e2877ec33c7ea56c46a9da253d9","sha256":"fd83378fec0e980ea08347fbbda859be8c4bcec9268f42b8138b7378a3876891","sha512":"1c6ac795da14dfe35d644d8afd10f72e5d4088e54408e8bff9de13ebce425486b2102871ac979bdae345c8a2699a558ebe25fbdab506274b35e1fbc160490b97","ssdeep":"","tlshash":"3e017ba03136a239b6006864194a014d6f5e40e2760ba3d38e917e0278a305a9d394eb","first_seen":"2025-10-09T01:23:42.719096Z","last_seen":"2026-07-23T03:06:56.988925Z","times_seen":42,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-12.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.669Z","timestamp":1784775970669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiancgd4j2xs-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dcr8Q48GnVhqeuTgVc3wFfwODj5OzhIVix0UCO1fLZVSovOhlHBlYPpTE2C4Owan6EdZAtG%2BKQVhs5sUf5OiYJ33M4R%2FI2no95A%2F7KHV9t5AaPP3EJ%2FKTJZ1Gzfw7u1mH1QfG7sLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5a56b9-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3808,"size_decoded":2744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-23T03:06:56.989463Z","times_seen":73,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-0.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.655Z","timestamp":1784775970655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiana2mpj1bg-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PI%2BlpzVi1tJkQfGzAWy2K%2FO8WOBUm2Y25dZHwfLwzF8WvauI36CLDG0bbbT6kYnOoTTZY5qnOqmdNTJKuwu0bwCd5kRZkxXHURfi78hbbUeghiOIEakH3RVss8S2cYHIYLqNxi0Syg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b89f4e56b9-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1708,"size_decoded":1747,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-23T03:06:56.990954Z","times_seen":73,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/genii-bonus-poker-deluxe.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.421Z","timestamp":1784775985421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/genii-bonus-poker-deluxe.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/genii-bonus-poker-deluxe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7m4luxjgm9\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRpxtN1eRu8sDgziKQH5hO1xf8Bi0uBP5d%2FceHs8wDrzTw%2Fao8%2BQHT4ZCMlfqEwLawGVudDOVzJCeyxgNY0bxkWeUQmIHEsRImtV3ORDLP%2FBy6YA8c40YRNP0SzIBuUNohDK0pQq1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814d8f856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21537,"size_decoded":22575,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b175157173e6c743780865c210069d31","sha1":"38cc3f7266789b4dfb0cb78f7b333478ab56d363","sha256":"1d8df456cf6e0f11d31eef40861e712308b8dfb2f26e9468f3098781f0767634","sha512":"7c52e3c0e0812acee81fe392ea62ddc0afa835f1b5b1b5cddaa78b1a7c9234afe75f15454f2fb3ba8868d80a63a1e0132635d6c10dc272a822c74a3e2749dad3","ssdeep":"384:LRlio1hnro/mzyWy0U9dtiqQ7Zye6cnd9/YLy9OFhzp/8iyPqdZhs:LRzfro/GfUiB7ZD6cdVYLyozt0i0qdns","tlshash":"1ba2e01a7bc45c64f06e037182ac6e530187b5b2f5569c162ead92a6634a3bf5f0c513","first_seen":"2026-02-02T10:45:14.558814Z","last_seen":"2026-07-23T03:06:56.991439Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winner/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.036Z","timestamp":1784775999036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: de-AT\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"624\",\"385\",\"250\",\"593\",\"454\",\"653\",\"746\",\"232\",\"392\",\"622\",\"143\",\"337\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BavqZeTPv8ABLSmeXZL2yJgVkJtKzJjyOiyPha2fzsdkSu9V9%2FlJApG45CTJm857Chs53vKm220EDJTRKW0Iwuj1x07Ck4kLPVQLdOBNOSutQFJzDyuPef%2FAZie0qTixMWMTp%2BoPcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f77869f9db56b9-OSL\r\ncontent-length: 207\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522,"size_decoded":1198,"mime_type":"application/json","magic":"JSON text data","md5":"9ba50e6da0288d9cd7aedce5fe35ce19","sha1":"c002fa8e8a3d485ba9d83e623aec24c24b0096b8","sha256":"aaf5c6120a95492263ac0d4042554297748665af9d70f4f94ce74f197f1f5957","sha512":"c34b9e3914b63a323577d0ede06b1c9abcc5d28f9d9a221e56cb315b3ef69749d7176100958f67a43f3cf866d75cca8468a954fd61fbf7d6c23ecea1e1d7bff9","ssdeep":"","tlshash":"a0f03052aa21f73fa18310d4dc77efcd1444ed52512d8834bdbf19a1d3365146e9860d","first_seen":"2026-07-23T03:06:56.992599Z","last_seen":"2026-07-23T03:06:56.992599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-6.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.662Z","timestamp":1784775970662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianjlkdj15o-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jwqx2oG86p7Uw78EbzGO20pkMaZQ74jCE%2BaDpgYcDvMmiibdyJIzRwVCeX%2B7Si7mqalVEUu6ARMQ0cYHTOgNUnte7RisXUoC0Fe53ySc46DH9r9%2FZlf5P1Xd1D8lHm6PMmYY9Y58HA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b89f5456b9-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1500,"size_decoded":1709,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-23T03:06:56.993466Z","times_seen":73,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-16.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.674Z","timestamp":1784775970674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianeu3jj18e-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZI35nYxBEdb5PWNbxHubM94dXKOBpKuBhwohrU9nSG127XN316jmN0Ppi3sr6CXLdSxe1yqKQCCMVR0LvFauAKVJxpQGbi8wtBKUbGriB9tP%2BTIbQaHgwSjnaZmxiAIKC9vUmcH4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5e56b9-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1598,"size_decoded":1782,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-23T03:06:57.000239Z","times_seen":73,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.065Z","timestamp":1784775971065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"dh3ekvgng0o3eb-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:50:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EjKusENsBnKhlqDZjc%2BXdMtLz%2BxEFF7y42A82OGQqlb%2BeXnHqGXeh7QIPayFF5m9Eq8BLNcFRBAFdN3qLxLUH4AZfP4YUdbHG8R0fVUKeTrQ19U5mLKAbV%2FDBxhlQN7BnZvuQeQ4xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f777bb2f7756b9-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":515,"size_decoded":1299,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-23T03:06:57.003198Z","times_seen":79,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/hot-5-deluxe.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.427Z","timestamp":1784775978427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/hot-5-deluxe.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/hot-5-deluxe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7musxildud\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4cxmQTJO1Zz5r2xtLPgtGyDOqumSyijgs%2B6K1SmMjDEfXJwSwjgVcAm6mpCCKKP2zNeWAWoRHn4t6aL3Dl3P9uo1RS4ILRKKy8axw%2Flcx2IEWbQsec%2F9ka%2Bsg%2BjbnDjJsDgS9Lbxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9286e56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17941,"size_decoded":18969,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"6eb669f22497b7d15e37946f006047ac","sha1":"33b0e8b4747eb4d61d946f10dbc289c9565ee893","sha256":"5d83dce4a7e7e6b024fc2ca649ec7f6b4a964f0ec38a6dfba18ee35d7bf33053","sha512":"364385aa82bb596f93d35a79b8182223b6d1923cf1ed7e99091b499d2aeeb0733b9b4d3a5b2b297c51dc666a50f3efd228492908252120cc1bda93d96f1b0864","ssdeep":"384:zdro+uEtx2RImDf4fIgfjhuxeLGK145xVO0nGok:zlxGfoTfjhuxey3VnnDk","tlshash":"7582c0281b184bf9e73c9cbec6a5af7f9e189c002f881fbe1638594157943a44f1495e","first_seen":"2026-07-12T15:18:43.837161Z","last_seen":"2026-07-23T03:06:57.003936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/enchantress.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.380Z","timestamp":1784775985380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/enchantress.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/enchantress.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7fud5bx513\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMLJmhlcXLELPU4jLGFCHx0jKskSmKjLatSA0WQ84G9RsgonnLt37N5ffJh7mEhTJgqxS9neArijb%2Fe6dhQ%2BJUP5rK20sNAFeGNKAn%2BCcQDLkF9zvyMUlcIhE30HS2kERGVGhBk3pA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7781498ea56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6519,"size_decoded":7544,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"8573c19655110429b529bdf8ee2ede02","sha1":"0f6b3aac42d8b3d36a04c89eab4a5c1eec9cecc0","sha256":"a96ec047c94320411df110c97b3d577315c58e4c12d02b61d37fb2ccc29071a7","sha512":"7b66c3b35aa66b7b89d164227c30435a7df547c98ced5c6843ca4edea49615d3ab8219fba490d9af51d4e925baf709e810a110299975c9a3f7f724ff50590dcf","ssdeep":"192:oFYwuPCdtgFbCL1ujm4KYRwXS5uVSlWiin:kYwuPYKaAjmxYRwXS5uuon","tlshash":"80d18e5adb6f481dd9fd88776298c62b76c45d018119483ea2e6ac1c7f3e482aa4d2c1","first_seen":"2025-11-17T14:10:19.12265Z","last_seen":"2026-07-23T03:06:57.006497Z","times_seen":3,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/andre-the-giant.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.428Z","timestamp":1784775999428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/andre-the-giant.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/andre-the-giant.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7iahar6im0\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYCJq6x%2BWhHW%2BckkJJaTa3FQ8Z8TRZLYzPQObUAx7bia0ga4usXYwhdP2oC8dViRDMzpllS6TtBaTP18BiXatLDTwRnqHxRP8LSAQHCXVmRxO1Q6Ms1u%2FpZL5E8ZnD6p5NKd9CGY9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c69e656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24120,"size_decoded":25147,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2b52bcab359ab1760c3237d560259862","sha1":"89ffe8882a89740e350e580cc7937534b77e28b7","sha256":"4f54302344183c648e5b6b15caad6ff68c5aabee5e0058a77966d19305d2c7a9","sha512":"d0a38a633b8e4e136db304c16de5533aa27bcf9f06cc7b44408de52ebf49f3e9348e0e146a3d4bfccb0cfad0381604f02c605591ad4409b0746babbd5311c517","ssdeep":"384:Aw1GmB0Wh/Cj/Smu94zqCjVSEPurE/3zDuztEcwUyhDsRbFP66FDCmRoXSwSQ/q:ashKPuKarKWhpwnhoRpPpUn/q","tlshash":"80b2e0286e001eaef43d01b6028806db4aa6f9d64db8b5853cdad7fcdb335844e3244a","first_seen":"2026-01-03T05:05:42.459609Z","last_seen":"2026-07-23T03:06:57.008432Z","times_seen":4,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/close_icon.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.683Z","timestamp":1784775970683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian2xfgi1ih-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcDYcOSYWO6FM2Y7ZehhQ23pfOxJ1INbaMt4DJ7yX4lbLgMcks%2B%2BrP5k2ZgtFcEYnyrt0xp5TbNY1JNYg%2BcSrSp2lU%2FzgWjoyJVNK5Y38OdYxipMKBUJoE%2F7ZGMp6IJydJaf4whS0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf6656b9-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1961,"size_decoded":1881,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-23T03:06:57.015081Z","times_seen":86,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/money-game.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.425Z","timestamp":1784775978425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/money-game.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/money-game.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7on3qrrhki\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFWH7xtuehjT9FSzAbodYGnlMFaaXsK0aKp7c2QV0bgS0anrQAOqBkUdvAxFRC1E1J4LMVLru4VmdOygJ0pOYuse81V4Dv2udJ9ouNn4KGHTVd78DLdJGN2K9j2vI%2BgHJDmsBzJwbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9286c56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22770,"size_decoded":23788,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"ee6db99fd3ad23d42dee5a8b9d8eb0c1","sha1":"bc55b29ac699df5c258507cd283f5de00cebb24b","sha256":"f1bfd3211226b7c6aa221d6d85781a32e7684a2eaf598d1501a5ceac39c3292c","sha512":"d8c1700308e43dedeb43799db0f84695e92af97d6b401ccddfba98f48fed5e4e74cdc240c7e58c1e79a0fb1814ddfd0955c628bb269d1d0f045f890079e37c95","ssdeep":"384:15gwcLA7SDYrG7bNmAb6OF1vw+XYpVsrWt0MmycImygwj3I4ja1bG14nkBLNysH:JcISOG7BmAb6OF1TXCN0Ijgwxaw1jgsH","tlshash":"09a2e16c7b68cf17c4aedd16ecddd1832782365be0492287a050a84c3f0f152a7fc599","first_seen":"2026-07-23T03:06:57.016454Z","last_seen":"2026-07-23T03:06:57.016454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:29.087Z","timestamp":1784775989087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:29 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bj6zfSTVdW4E5GVwi2URVUV7FocPT6KXusPofYTD0R4YI2VaozbVSRgCHPUvZC2t2AAzILL7VcpIZ%2FPq8qzFv14sR30RBOOxcy3TWupOmZSUqYqMYwDN3n%2FUER7JTEkmoGtvG4Fo0w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f7782bc92a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":1038,"mime_type":"application/json","magic":"JSON text data","md5":"27f778d3a26a087317cb68f8f7ca8cdd","sha1":"7ea20cf43ecc117913369410ce5f7f9aaf848104","sha256":"39b1fc9a73ff36181a5571a26286a924cf433b1bcbea09139382ce0d3c1def59","sha512":"4174b4337a90684dce50e9d4f706d1de0c16d59d2217ae2205618d4f04fb3c3d99945635b0920a8ba6223d7954e7ec61cb1958b455d9c71d517bc74e264e8008","ssdeep":"","tlshash":"33a022fa800f0c3fb23f2888288f32e833ac0f0300f3cc202b80acc08a2020a0003e80","first_seen":"2026-07-23T03:06:57.017585Z","last_seen":"2026-07-23T03:06:57.017585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/immortal-romance.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.398Z","timestamp":1784775999398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/immortal-romance.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/immortal-romance.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7mzkecmihg\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jKwkd2lUeUWJ%2F%2FQZ3qbUOHwYY30XLKxtTWtMWJCvW%2FMp%2FCiVvYEuk2HelSr%2BhhCSUC%2FiW%2FUrMj28ZfHKJPrzTpPRHf%2Ft3xoiHFMB7OfLE%2Fuh0SJW0unkJ%2BcpWxPE2STjwa0ZPkpIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c39e156b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23956,"size_decoded":24998,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"1c232ced67c0fb95c5fe4e39cbd1531b","sha1":"30514e392b787a06ca907f75d98d3d23550e7e28","sha256":"467972e717abd1f1f39832ab6f9ae6ac3e702a54a1c6490d5edd18319709a8b0","sha512":"d9784dbb99eb8373d67047f6919b680070467e3e119fde0f3873913c663fa8ca0b5b6dcc4f5c44ceb714932bdd7a57a6d360ef60b5a210bb0971dccbb963b060","ssdeep":"384:Mb86fjbGoNDRoHxxM0rwA0vStIv0NgFO+7RquPvs8apDY3teLQZv1nOH0M0EMBHI:y8KjSoNDRoYhqk0NM7/Pvs8QYMsQMBmR","tlshash":"19b2e08aa1b0c5388d1f3ffc026c3d113de8959e3dd2ab9acf98165597c13f1a05131a","first_seen":"2026-01-04T02:47:04.091306Z","last_seen":"2026-07-23T03:06:57.01854Z","times_seen":4,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/next-arrow.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.640Z","timestamp":1784775970640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwjKBLltIMQHDbNBkzVXde3ZsyyKs6dMvZzY%2FCLnWei3CCm8qoJarCMGtAiK4b49nVx4QAnti53gyQHXGgiCTBDy3929djG7lSwvfshXbbw8mW7FXjUJWD2HlyeCs2MdVwZKDHJeaw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3eianxvyvl6t\"\r\ncf-ray: a1f777b87f3f56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":1168,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-23T03:06:57.019279Z","times_seen":96,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/la-cucaracha.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.637Z","timestamp":1784775970637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/la-cucaracha.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/la-cucaracha.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7nndqiogqk\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bjv97cEtUTLR%2F1FFxTltqNr8vKnz%2BdYKPaOl9GuhaS1N8%2FUadpeXfxiBZ%2F1hJvkJ6frSwOYx68N7Tz3%2FAIwTrR0joBFJmPHEZrytJsnBc8ezzvneUfpDwHeMlJGXIYsoqdQRIvyYAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b87f3c56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21692,"size_decoded":22720,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"23ada71ef9cf22dfb0bed86afb381613","sha1":"611310fb9e37b2520515ea3f4582f90ae8166987","sha256":"a208dc6aa20864596f4c800e0a92a2af0443d7cd5c30724b35e216cfcdcffa46","sha512":"230836631eb0a28133676d03cd59ff232930fb255d0d922bfc8f63daa885034ed72c6f856007aa15a7bc2e617d44bfc286e440dfac453f78925da916f131c5c0","ssdeep":"384:8NpOpI6c+rqBzuH458dxvTt34JLHsE0v82+JVlRpkqIcB92PVmiO4AWUfLpG:WGI6lrq9uH9dxvTYLHsE0v82QRpIggPh","tlshash":"88a2e0456317940ff42eb4aca4b7ec622c0ac45c636c90b909d81eae67465b01f66fbe","first_seen":"2026-06-02T00:44:56.626444Z","last_seen":"2026-07-23T03:06:57.019935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/winning-wizards.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.634Z","timestamp":1784775970634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/winning-wizards.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/winning-wizards.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7rr18d2gld\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90vZc%2B7bbb4Zm%2BvE4HqlJkAA7%2FQy2lwm4guGVMlwaCrpFQPaLOYaxC4NiR2unuQSNe8rthUknfV7BRe0BklggOWi8FHDGjCH19vsKKeuG%2BSq%2Bs31G9e6lXPhiQMHqhH3nWR834fJKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b87f3a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21505,"size_decoded":22536,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2e2e253742a4750f3d545558e61adbfd","sha1":"07cd7c00fba2f534f46a98d724ab80919fa62936","sha256":"1c7b177fa7865487dd75032b7a02fda650d40a838474b53f4160c59fa05b803d","sha512":"eb0bf72b12408d24022761b207579d883709235e5d89def406aed01b681414883002ccfd033f1d8bb2afd6002d53076b977451842712980094efc092a02407ff","ssdeep":"384:fINZtzd/kP9Yy0o2oqkgvddO4e8HvbRWLJvCD/jd9lAdWzxNsJ4BPKSs:fIN3zd/kP9X2oqk2O4eUbR0YAdLJ4dts","tlshash":"51a2d0a617ea05b3b52ffcbd978a639282cf7d189d572e531016c22c46f30c428da769","first_seen":"2025-10-09T01:23:42.767495Z","last_seen":"2026-07-23T03:06:57.022483Z","times_seen":6,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winner/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.035Z","timestamp":1784775985035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: de-AT\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"250\",\"593\",\"454\",\"653\",\"746\",\"232\",\"392\",\"622\",\"143\",\"337\",\"306\",\"812\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBqyA5qmaZdWaOc8mLgbXo4M%2FRGy9xVGDRSQdqvxsnOItIbYZ1qQ4vViNzynIQRjE3yrgDdh%2Bl3GSLjXgcnj%2BF3I295qobR%2BlFfcQ4MQWTV0THjZbCBEUgVBT1WTa3YIHL2lhGwpZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f7781278e956b9-OSL\r\ncontent-length: 211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":538,"size_decoded":1204,"mime_type":"application/json","magic":"JSON text data","md5":"e5cceeb11ca88df994b7a190860ce9b9","sha1":"d73a769dfaeb4c1d8d53a19b3cfb02892c3b8f26","sha256":"e9b4b94fec3e3a0f2b87f9716cd99a18b3be45e927b19e9ea9e2f45981ad778a","sha512":"801f3503f0878716a57ea21972096987af235526d76aedd5cdb86de4febe70ff11a9296ff3b73cb3314103c369f5cc7d0334cc86aa3d5e91a853c0c807e93caf","ssdeep":"","tlshash":"cdf0a752ea21e73fa18310d0ccb7efdd1448dd52602d4834fd7f59a1c3355202e94a0d","first_seen":"2026-07-23T03:06:57.02306Z","last_seen":"2026-07-23T03:06:57.02306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/fortune-teller.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.416Z","timestamp":1784775992416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/fortune-teller.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/fortune-teller.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7lqbgfiohg\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2B3X3wrtrQFj5AqlxWaxKDNB2QM9qc1oQZzPq7vOAsU7zo9HErEBuaeBej%2F1C4D1cuftgaJGerqyBRw35LcmZec4JAbp8EtGV0G%2BfcRkw5vU4fPtxtETEDsdHtVW4RJutdZB%2Bg31vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840996356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31732,"size_decoded":32760,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f4f78e42041d2dd6544c9f3e7fcf2a0c","sha1":"8fbc00074cae3fa449d0cb1ec074591af175c5dd","sha256":"03c55a9401502524ee84880be17e88839f3fc2940a8b2aba87bf825939c00062","sha512":"07659e35585bd994dd741f0bed8416608e0e66a5a7f72aa25b630036bda6d63dafa29a685a5540f075daf9089f22015ac4b204d136e487af379cde4be654be9c","ssdeep":"768:3hc4QKOQeDMmv197moxdy9GdKTvthxqbuEz+E0m+kvfIH:3NeBtwMdsv7Wum+kvfM","tlshash":"99e2f0ac4e6dad55c20fe7228f1660557bd69824b0e82b1647432c80776f26fd1ba01a","first_seen":"2026-03-16T14:22:50.873221Z","last_seen":"2026-07-23T03:06:57.024131Z","times_seen":3,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winning/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.032Z","timestamp":1784775999032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 106\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"{\"exclude\":[\"1679\",\"2067\",\"2333\",\"1836\",\"968\",\"1817\",\"71\",\"782\",\"1588\",\"86\",\"837\",\"459\"],\"locale\":\"de-AT\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocdHSi3tjmplwq1fFaUxYL1Cw2jL8VlvKJ9fZCMyYftyWG8jjVmT%2Benqe3QyxxGRrY%2FhcS5EIDB%2FAuDF9D%2Bb1%2BWla7f1s4w9VzPH%2Fe8ctBVGwMGVk8U%2FHrIYFcHgX%2FvtsRLIogVkcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f77869e9da56b9-OSL\r\ncontent-length: 614\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8692,"size_decoded":1615,"mime_type":"application/json","magic":"JSON text data","md5":"f84a7ff230127eb5543c3f7ca4a86c24","sha1":"38f1a7b33f494bbd2fc4ab5061d8d57f6c44d0c3","sha256":"cdc0b3d6ab1e6f07fdd572488601f37bfd7e18e9856ce2c2f7a6997b07a5b15b","sha512":"0dcfd060597f2eba7bfe9cf447163a62610c7e74c7a50120557a750864b0128c05333e2e931b3781814aaf6fd42871e9fd9e16d6b4da6037be54cf18059058a9","ssdeep":"96:DKfIfTszHKf3fAsPeKf3fzsSOKfMQlflsk6Kfefhs/lKfBfkMssRKfcfas/GKfxY:DuzhUK+QWyXJ38","tlshash":"0602b265aa62d73f75d360e0ccb3ffdd1464daa5902c8428bcbf19a2d3224286f9475c","first_seen":"2026-07-23T03:06:57.026882Z","last_seen":"2026-07-23T03:06:57.026882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/arrow_right_icon_v2.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.612Z","timestamp":1784775970612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fCVRmVi7Z9PwI8dTbTHukSV4pkY3x8BJMAO9k%2FyFxy7FyFH1HVIieD9bdQfBzqMQXye2CDsqtEtYIUtZBUqVbTtJvF0dpSFk%2BG884yIP8IcUKcgHJk%2F06ASaQ5qSkMQQewF9CXzbg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3eian0jp1i9v\"\r\ncf-ray: a1f777b84f2756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":1188,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-23T03:06:57.029736Z","times_seen":56,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/3.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.679Z","timestamp":1784775970679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian7owai11l-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmLY1qbv3naM9QG98LF4PFvQFKXajgFvbeVVQPGktJWIn9N9ZWn9oyS8WGcKZTZaUkxm16BdytlPZo%2F1BgYrbAVTJnCQmdQRd0maEbuTGIkFtNftJlZgVLPJPL%2BJPUhkPj9t6hNTPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf6256b9-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1353,"size_decoded":1714,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-23T03:06:57.030468Z","times_seen":77,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/18.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.687Z","timestamp":1784775970687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiamy5ymi2u3-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vguODz5CbTB2gh6DoDkeNmK4Q0Mk3lypA%2BT%2F36DSRew9OuxFIrVkwUH1Uoox8tJQkkzjmyEwrnSJdbZJmoIb8e9VxdLTkpkE4ZIcuV1qFuBYLWlGPkCF%2B%2FCv1m39cHHT6hiw1CbZlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8cf6a56b9-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3675,"size_decoded":2248,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-23T03:06:57.032638Z","times_seen":84,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/dmca.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.687Z","timestamp":1784775970687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian2xfgi6v2-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpVWRSR8lIRveUBxvVAv9LTBqx%2BfheLDrv5jMgVSkfhogxWiJa%2BacmBNFDnLDiJ8r8Np65OlOmuISXMNXYlyEVR910cCGYeIO38DqE%2Ftv7ee6UZmZRzSTV3IKfzoReQH0EgY8%2Fxo6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8cf6b56b9-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8894,"size_decoded":4581,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-23T03:06:57.033306Z","times_seen":84,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/2026/03/banner-square-69b6b8b6f38593.56905389.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.056Z","timestamp":1784775971056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69b6b8b6f38593.56905389.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/2026/03/banner-square-69b6b8b6f38593.56905389.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"dh3gzzx7e9s02l4p\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljFKo%2BKqbh%2B1hm9f%2FGz3V%2B0a1gop603JaS2RXIvd8DfQWfOY2UWRWPaaq9b6WK88bnzJqQq5qS9%2BamQg0BMeWM9EZGvb12hkbVF%2BZEyUal7xioNdHYdxvPVuCehyiUZSJhWvAH%2FJRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777bb1f7356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120697,"size_decoded":121762,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"5014094846a5c8ceccb2847ef5c5d928","sha1":"7124b53ff5be8bd5d21d50e194d0d8f1686fd278","sha256":"885cfd4c198efb676fb001342c26ad37a1861529987e09f074ef5b6d8f2bb97c","sha512":"7f48ab3261311a4d8782079f7009a24bc0d89c6e4a3d3f29fdd5b4aefa185bff0ba2ccfdcfca362789295af64f10bc199c78bcbb02763531fc7f5208a99ee611","ssdeep":"3072:rEvgrrlQyb5RatieLW2eplxQzFjLTgwBu0XDxigYPQS1nknDVcn:0oatiT7lQB5Bv479kJy","tlshash":"dfc312a0fd86067f0eb5c34405f6ac052556abc4a1767ec328bd28aede13a45f344d3e","first_seen":"2026-07-23T03:06:57.034935Z","last_seen":"2026-07-23T03:06:57.034935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/juicy-booty.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:42.425Z","timestamp":1784776002425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/juicy-booty.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/juicy-booty.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:42 GMT\r\netag: \"dh3ei7ndusunktv\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zS85v%2B8CT9NhN3qdOnZb2yGeL%2FTJSCttcefNOLgpOwpvESzcTqubxxUmPDb1K9Y1HZW6gDMlPUgbHuDLd9zGGxd3s3%2BeRw4sKr2jvotsN3jLZ1Bo2G4YQ%2BZddy9%2Floxhm3PQKhXqEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7787f2a4156b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26995,"size_decoded":28022,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b5e65c48b7caa8224b25a34efa6ed145","sha1":"4a2da0f787be4e8f2c3cbd54a294e70064c7fc44","sha256":"d7576bff64b2f262a0a5cb83f81c0a83f889ac342816fc369c1addd5963992e4","sha512":"039362514c89d3431d12afedc70001396c386221016c0ea251d63d0e2a3ece1bdbf4fdd6a58b2fcdd1fb2330dcaec96633c52b863413b92882add625a00fe43c","ssdeep":"768:a5YuHy9aXoN80fzJIX4EGnEhU/2CKNXvQt/QALYQEjA:lumj8gFZEGnEhtfvKQA/Ec","tlshash":"b9c2e06227b99292a25cfcf4ccfd9f206b3cee639a18a061557cd31baf996043dc5071","first_seen":"2026-02-14T15:47:19.0413Z","last_seen":"2026-07-23T03:06:57.039362Z","times_seen":4,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/second-strike.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.624Z","timestamp":1784775970624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/second-strike.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/second-strike.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7q89crwdiv\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmc1psGQNV52O3YeUVE88Q3naXY%2FwcmVW7weDNOrhESoUFDMtBXy5rXzA0q3QKTNL0JyLGZzGVL%2BmvtI8BZ2pQn7v53vCr9kRgQs6VuvgHXCnaWvGUqKXjKz8Ld%2FkhJyP1G8x7s%2FpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3156b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17527,"size_decoded":18554,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"edccb611f960a1d6a632b3d1ca720803","sha1":"f34cd7f5e8fcd8ff0313cf1d217632479fc7b55d","sha256":"25be772bdd8f997fd187a4430aba44128740c410d5071ddb1318dbc528f90483","sha512":"8d8e867b52e8eac039420c7e19ff47341e3553522fa0c7511edd4f3a5cb66f75e8b0f01a48ba0bbec463ba8184e79ee9c4d9d3e8a6c8d09ba48576f6c44114f3","ssdeep":"384:V5UCczbDVZbB2MAFQBG3CfMy21L/h+pljWztS:jUCc7zbBxAFQIEMNx8plK4","tlshash":"2d72cf3d3d01ee58c47e3e37182a9a318301d2272574b4bdd96f486b1fbd18a2a8d17e","first_seen":"2026-06-07T21:45:09.948542Z","last_seen":"2026-07-23T03:06:57.040984Z","times_seen":3,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/hannibal.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.645Z","timestamp":1784775970645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/hannibal.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/hannibal.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7g1icky7r2\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tf4HuE3O1rxgXbhlAMuVTEY4fUg20kaylof7JREsYMXcbEAMuxCdYMCmlS32wHM03kva8%2B%2BbsdaqRdOWzkUaN0Dvh1I8%2FzQyUsij%2FOexuO%2FVSMJexzZgsQVUQPUf2k4A57UwwL3VEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10046,"size_decoded":11072,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"1e175ea02e30b92da30ae26dbb635e62","sha1":"d0efd43c7ce441ad8a9fa1d5bb16c904c2c8228a","sha256":"371be8e619295472f016998da1791ff02cf6f6d652ce61ca062f6eb02b72857b","sha512":"ebc099085e5e45871db3ef6a970b849ce134d4d1d3dbcf33bae11dac78e19ca3aa62d2de448b12994d0b13e799ba546399d13a8f3653f928cc7ac14464835108","ssdeep":"192:xCexFLeUYNOSTw62E+jUamW0vKFrUnAQ7oGljh60V6Sx7F7QE+TRNwVwCUuIS:dLMxTGggRrnQ7oG760VPzsE+Tn05n","tlshash":"0822a0891fbf9519f65e16348a058196c78cfd010614563339ba7c140bb3ee789faf2e","first_seen":"2026-07-23T03:06:57.041693Z","last_seen":"2026-07-23T03:06:57.041693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/stunning-hot.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.420Z","timestamp":1784775978420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/stunning-hot.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/stunning-hot.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7qoxhoyo3h\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QodoctsIeyEyW5t7AZ6vn3u8B4ac9o8u%2BQdt6uBI01Rs4iqGtUsNyYnxGfCPu8wWKt3Z7uo0nKUXAiZay94rLxPq0%2Bbzxpa9MP4zMeaZn8zfPvcvTWikezoQhEO4Hm%2FRcIQmr%2FdxMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9186856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31229,"size_decoded":32255,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f8ad19a3dd554f0d3897889291ae03fb","sha1":"0ed65700ce3fdd9b800f39d714918d07f467f2a8","sha256":"81eeb35d0a92f5d1ed363c0c1d2f3a111c7072ff283f31933ec6379db6adc89f","sha512":"41ea5f862eeee70cf0c2068c1f3394efc6938f60e32b396b5fce20552a97f53688052909040451bed94b79c8c5db726920ca83338bb6b2e069459e8996c38f4a","ssdeep":"768:5r+RRH1y7daqM+F+HyLqLGQT7p8+zrH0V:5r+RRVy7dazIeL1rrU","tlshash":"2fe2f10c87888517827950e7677187a8c7d064fd2b2e7696b910cf20a21fefb55e4bc9","first_seen":"2026-06-14T07:59:02.181088Z","last_seen":"2026-07-23T03:06:57.043462Z","times_seen":6,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/sun-and-moon.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.422Z","timestamp":1784775978422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/sun-and-moon.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/sun-and-moon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7qoxhoyump\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4U2rRwH0LFhTeJyKWMhF9WZTNew8XMmIZxdd6zY0Z11l%2FACvIwNTh0i%2Ba%2BRmVNjYMVYYKhxF6CRF9Ci75WimQLterKQVgCa4pBXUJp9XtAdAuq0Pzylwb4gtC1Z0mjnxjZl7CA7Xag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9186a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39697,"size_decoded":40721,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"e7c8d9c77b393a802dd176dd8b0d7dc3","sha1":"2b2aca61cd4f69118650a94aef415e249bd9d113","sha256":"8d1554deaa433639ad4344b03ea2148baff1466dedbfbf6a1d6c91e2fed18281","sha512":"51bda9ab96d67b397d9f69eaa28525a91b42c4fd4521852f64305fb275e0d3d53475ca43c5b3221db9a43475ca920b52f04ef0cf86887898f8eb6c6e5703a31a","ssdeep":"768:eux8FPFL2XjaOHXt5wGe9Pa/jJe5D0BpMMJ3jkwDxflbW90nFCxn/i:eueF9L0XcGew98DYRrF96ansxn6","tlshash":"b003f1949dd349c26d4d549a77bab323f10cf304a44a8da2873f36e98f5a5d36e8c0e0","first_seen":"2026-04-10T09:54:21.387545Z","last_seen":"2026-07-23T03:06:57.044567Z","times_seen":4,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/apollo-rising.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.426Z","timestamp":1784775978426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/apollo-rising.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/apollo-rising.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7icv166qm6\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1foN75fJT69e%2FpHH4FPlcOnFirJTZHQNutSruT0Yey0o6gy%2FXPR2IziXaYJeNT6vTAGFvfT6mkT6byewlKM7c5%2FNiuwIiFiEB7XG%2BLVYpTwGHNio4O28fvAkUZmiSb0wX9F3wTypYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9286d56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34494,"size_decoded":35521,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"bfaaf6599544338fca636630b622fdc5","sha1":"6cdade3a68ba78e464189eb982cda31a1d6d5df7","sha256":"ee12b052d4fd9be981ddcedd9f61653f07cbdd0f63826ffaf3756b1118d83be7","sha512":"117729b16a45243a6971324a865cea30a62835e494cfa32d7b8096525781b2efaea8372f841d3f9105ac78474be28a760821d8e8654e9c18af8bba6f310e31e3","ssdeep":"768:Fqhq8A/l2uKfgk6uEEtCbGtq1vYPz4h7FuunaMO:Fq0L/IV6uEEsbGtkvYPUh7Ry","tlshash":"37f2f1a3a94bdde5c38e693a227b16143d81ce242274a7811ae42c32e77e5cdf91b047","first_seen":"2026-06-24T10:21:12.922079Z","last_seen":"2026-07-23T03:06:57.04523Z","times_seen":3,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:20.086Z","timestamp":1784775980086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:20 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:20 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MftG56nqTfKLN1iDcyAd3HWA3IazJms%2BfalQJ%2FrTYEd%2BecmXRq1G9ZoUj1Bjz13JF%2BXybXuYULQZi05K5eBpVh98MYgfDyRa%2B3tM31c5iGzJJC%2BXKFAXIMuLDtCNlo4MWC4PNZcTlQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f777f3887c56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78,"size_decoded":1043,"mime_type":"application/json","magic":"JSON text data","md5":"729aa3de74b79782d1f613669ccdd73e","sha1":"a13dc8ea1982ec14f121f13a96c3b1ff27b77582","sha256":"c1c9119b35d5987350db71980d82cd24b332fa61a2e4c9842e38d2b85532355b","sha512":"73b4867da262932791af3becdffc69e636309fb70d1a15149d27375b3ce299f4fcad501afddc9ce1e04c0eaa691a186c809e05385fd35d805a1044ecc497238b","ssdeep":"","tlshash":"7ba022ef8008a8cf8333808a08ff32c020a00e0300a00f20abc88c808ba000e0023c00","first_seen":"2026-07-23T03:06:57.046615Z","last_seen":"2026-07-23T03:06:57.046615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/nords-war.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:21.398Z","timestamp":1784775981398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/nords-war.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/nords-war.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:21 GMT\r\netag: \"dh3ei7oz0eusl54\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rYGy9MMqkWrAF0T5KGN1V0HTOG8E9zTl%2Fuask7IFgZJPAB%2Ftzquh%2Fv7ODwYcMCf3ZIZJgGebjZu0xNxJ3p9fwyYYvIpL9LLaEwPyStjy8lu1SjyUs7lvOqh21jyXWTAURN4BfYblg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777fbb88e56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27400,"size_decoded":28421,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8ca42710d1cb9bccc25fa465ff5a20e4","sha1":"a68d054e0af7eb5a39c747aac97b23bdcfc15538","sha256":"92e8bc4dd507d806cce065d1972d37fa90c80a07f3e7765b7792f64e2389545d","sha512":"872c84a25636f1d1f0bde367c437dc7c9e2040a5a6f98c13ae80c6e1064d5c51add4606b0016c0a93785eb3bc92c828660a6e05a417b73478bddee6c9b9e83dd","ssdeep":"768:1yfTkEKfpIOJFdVBDyUAds7h1Rnx17IYK3qXp+06J/H:ITU64jvN1R37IYK30+B/H","tlshash":"bac2e18763f5d410ce2c437abb1975b26bacdb3c10ace26e3c2459607b11d1daae7680","first_seen":"2026-05-04T13:03:58.836407Z","last_seen":"2026-07-23T03:06:57.047547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winning/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.032Z","timestamp":1784775985032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 110\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"exclude\":[\"1631\",\"1932\",\"231\",\"2597\",\"575\",\"716\",\"1661\",\"2304\",\"1730\",\"529\",\"2459\",\"1237\"],\"locale\":\"de-AT\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HEauuO%2BmVPEc0V%2BV%2Fg8PhUJlooBpP%2F%2FasWLfaxy4TWEq2LW05DiHprLAVZWEAvnkZorc1vZH3xkm8sTnM2ZZVD5kNCyaKGo0xGD8X%2FfAH7Z7%2BNKwKpb8%2FocM%2B%2BxGjPZpJtdHpXw4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f7781268e856b9-OSL\r\ncontent-length: 612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8712,"size_decoded":1617,"mime_type":"application/json","magic":"JSON text data","md5":"f30a5a284fe7fe79333aeba84661ebb0","sha1":"66c5e756e6a9bd1711c8db310cb075aaf6cf3e9e","sha256":"da138bf453f759690ef512ee2acb7693d8823b2dba6b4e11045b4db27be904cd","sha512":"427a818b3b6de7e1cd56cfd91e157793374bc1dd8be30508fe3472df241e2aa16b1491ba90dba92c3384db0d24ded5bd13d963bdfe7a57a1f015afd1a0dc7eac","ssdeep":"96:qKflfastNKfdf5lsUOKfof+sWBKf+fgsciKfMK7fNvEHsGiKfMOfasTtKfdfpGsm:qmx6LGxc4AihzNuuPWN","tlshash":"3402a065aa62d73f75d350e0ccb3fedd1064da61a02c8438bcbf19a2d7224286f9475c","first_seen":"2026-07-23T03:06:57.048164Z","last_seen":"2026-07-23T03:06:57.048164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/french-roulette-high-limit.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.633Z","timestamp":1784775970633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/french-roulette-high-limit.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/french-roulette-high-limit.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7lv2x9ij3n\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9oUx2ZAuOJGJWTgAAgBgkUvLJCo5vBS3XEmCdU6xiMExOJ5xys03PN1EMYMG9zRv3bzM6Ll6bF4cozU0xDQgf4qiLrAwlSiH%2B4KLFsX94T4e%2Bb3ktKf7dzYFeZdSqwOGK%2Fa8tmK4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24755,"size_decoded":25793,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3a393d852728f53ffe79501e6e61c7ab","sha1":"4b966374c3b71be7fadef40b02025f58385dbdaa","sha256":"c27629ccd31c150fde80ef2eb1a07c5e5e478a9d29f12a1662edc805117519e4","sha512":"52bc5cfa0de074e76f60bf953a27b9ff714a46c1f1ab0f13b4ed1b03d3d092cfc907c064c8f4f7103f078ddc6c737128354a2e340f1ced1e6c5ec49a9332b1fb","ssdeep":"768:JaJ4xDkM8OXTwe5RSUl8oeZ4WkuteoT4jw:Jq41j8WwHUWpZNzT4jw","tlshash":"18b2d1ad31013651fb6da67325eae1234f02fe14cace1acacb90d9d40b545573fac4ae","first_seen":"2025-12-21T05:00:13.817554Z","last_seen":"2026-07-23T03:06:57.049266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:23.086Z","timestamp":1784775983086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:23 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DF2HRcJo7ZCevv65m%2F67FV%2BjAyYV8aigQ55cqnDm7PzCgX1qqDziVIA4IhOW0c8fZcRR3kJKwMPDb%2FC%2BF5zLx1JQ1sl6gm3l7mvOJ9vtwmZYwi1yjRn7A%2FNCSmSq%2FwWT0h1DnTm8Og%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f77806489c56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":1057,"mime_type":"application/json","magic":"JSON text data","md5":"e5bf4fc2263b64c5fc27f26e8d08bea3","sha1":"b5ac28b0d6c283cbd9c0d19262662d24ca028c49","sha256":"d14387cf8fe4d61cc18660319d0f26b5a13fdf839c99686e14c9b4de64259bcf","sha512":"0b1826746f24e32813da13c555ec079b6e38fac2d89f818fcc24c01b3c821681871e95e4d81696e7c9b9ecef8b561692c0333162d12bafed60444e1fcac9e28f","ssdeep":"","tlshash":"adb012ea80cc5c6733332588cc1639c0b0230943a29c2b40b6e4995d8675522002ac40","first_seen":"2026-07-23T03:06:57.050857Z","last_seen":"2026-07-23T03:06:57.050857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/aztec-secrets.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.404Z","timestamp":1784775985404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/aztec-secrets.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/aztec-secrets.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7ik08f7o2y\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oCZo4iaStVXiLN7LsmACDvLg%2FiXlZy7UqjYy5fNN2G30kdK1wP3MVfoZazNx4m4BsP2Ute5t1o1veHlX%2FD9XKo7%2B2nrtTnh%2Fe0NQP1PrBzgiZVi7Oy7AZ%2BBNDAOUniI7ou49pMbIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814c8ed56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31210,"size_decoded":32239,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6145664d4d219e2abb0bea64e440c26c","sha1":"c04e40b3c30d90df5504ef25846a37d293e7dca6","sha256":"7ed3f40ba8779361d3682f146fc4ea2a55796133d01b2ef497837850fab7674f","sha512":"57a650a4e3d8be48a2d5176cecee638df06d503ef2d48b13984e98d17216fad5d485a5b55d9d44f6ee8960df7c37b3679419f5ee4b3288e92c554d5e9dd3cf70","ssdeep":"768:O2lBe7jnbSKeRYJ5xU1bFS6xO8EoqoEwez05XvIEeS:ONnSTIubFS6JVEm5fITS","tlshash":"68e2f2e76710fe05f67d245c0c067a21e2ae939a2e41891736f3f990a37f151a38173b","first_seen":"2026-04-10T09:55:29.760266Z","last_seen":"2026-07-23T03:06:57.063327Z","times_seen":4,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/lunaris.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.420Z","timestamp":1784775985420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/lunaris.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/lunaris.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7o6fluqlfo\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRSv3TsvuTM6bGftDDrnbohuHsEy42IQg%2F8xdUw02O17cUpDK4szhizU%2Bn11uUHxgF3rKOueiJE7QBCfuDAA1g%2FcfiT1MuVqzgb5CcKO0VAPw0tWG2QYupn9xcZ%2FGvkZ3eaRnVSprw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814d8f756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27780,"size_decoded":28801,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"1ec3fc60f90ca8d4eb47e63952f9ce64","sha1":"885854533fb509351e164f4aebe58b596f50c4dc","sha256":"619ec484ab5e1a4c531813fd0282b906b63bff14b0103b628f7f63474793fa13","sha512":"40ef080dc2f5323be713add6db5c1249e9a9d3fc17d3880ba11b115d2bdf37d5244f4206e3fd23b81aa1f1bb81973a20c372246592c38ef5cda0d980ce0523df","ssdeep":"768:xee8nV87QcdOL7loaqKk0roiGkn5MpCFNjbt:weqVzcdOL7l9AaMcl5","tlshash":"97c2d097db096157fcbc1cf388950c7ee930ef88523cf42468a51a0a734ea5dcac6a17","first_seen":"2025-11-17T14:16:40.630474Z","last_seen":"2026-07-23T03:06:57.064908Z","times_seen":3,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/schlagermillions.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.407Z","timestamp":1784775992407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/schlagermillions.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/schlagermillions.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7q89crwkjv\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7TNO8p9qWQdO9il0D%2FAsBzPelN6FE%2FaEikooQTCru3qWRwIvU7TJ4KBCk1aRkLsFwypxBNjJ%2FIBJqAkI2v2%2BHPP8pzMRRBkKnBUWvB%2FDmIFUNkyOjzxUrcR7cCs3j5J8h3lvF4lOcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840896056b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26635,"size_decoded":27667,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8a97520de554c0c629d92b99d048def6","sha1":"d14682ba5725edfdfaad2bb13fe4d0b72939a97e","sha256":"026ae7a148acb52ee24c4f6d0374cba47be0d4ea92810b4653eaa23c1f63965f","sha512":"a015ee684cb0dbf54bb82e17ce24b1e92000e313b749e7b0b3bba4bcc33d6496aff42fb44cacb60057764d8359622c2e8132264233f7f6da36b26e6d9f682132","ssdeep":"768:CaKnX9DRVALzca7+ciuUPwKurE4g2ZDqjVJ:/aXPVAB+cLl292cT","tlshash":"31c2e12a62542903f55e7174825c3e7010ab8c04b766b97f3863ef3a7399cd669ede03","first_seen":"2026-04-10T09:55:29.777819Z","last_seen":"2026-07-23T03:06:57.06731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/boomerang-bonanza.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.419Z","timestamp":1784775992419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/boomerang-bonanza.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/boomerang-bonanza.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7j7tkl9p9k\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5AHFh6kj6OFl2C%2BrPEwMx0UmR9edP7mUHj%2FhxHHFpWYeECuzxGvDzpq2Bfb7gf52NmZ7nLCS%2F6bb7WVGZtpf9Xx2zdlrSN80L0lIDpHr9tbT77YoM%2BdoX7%2FhXHG6aUqFHDTKcAqrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840996556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32744,"size_decoded":33777,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0579e4e2d3d714dccab9102cb242fb30","sha1":"565a2b2f1cf7b4a9d4ab269d04ee92a01e6a9b0c","sha256":"f828247e6d529c94a73ee48b1c12c8615b7f5964f1c4c7caab178941fa22c6c6","sha512":"e209ce0c80cf073f25dc0b8f01b911f51f3325c2681633045e40ab776e5206eb857d04b0904b3db8826e6deee447f15c93e0824b4b2b93a51f1ed5400dfb4e72","ssdeep":"768:H3Y273NxxWPst8nabWxIlQdMOEvju8tN6tlDnaQRl9:IQ3rxht8a69avjl7eDnR9","tlshash":"f7e2f1028b074dd2fa3ea1ab57caabe776c54704f6b03f1611010d8b8f2a14352f9e78","first_seen":"2026-07-23T03:06:57.070977Z","last_seen":"2026-07-23T03:06:57.070977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/fortune-hill.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.425Z","timestamp":1784775999425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/fortune-hill.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/fortune-hill.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7lqbgfinmv\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLRwDRGdSRY%2BWRb3B4lyhWkjQ2puOO%2BbddwU3DO%2FM5xk4kV09Bb%2FUugNuB69DdukpaBuqI1aaE2Y2IbjZeoaAJd822i62EM2gKS6zLFh2EFPYSgqPcDT6aBkNq4OUJUtV9ZNrDemTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c69e456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30631,"size_decoded":31659,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"9ae304683670a404f39f716b5691e392","sha1":"253f990bde66a5ef974429d97867a855263f9a19","sha256":"3a923275562d675252a30a737fc3aa196942dab6adcce751b0dfa881fb506ca1","sha512":"79cbae3c120a3a668b6a326e8fcbc59991ddcdf30165c981edc21b0ebaac12cf455236ef2855f7fa6545464f77ed49d8bfe17c3d304a859e52db2518c120ed4c","ssdeep":"768:U1P5XvMiR78oU+1cotrenmr+Eliz8S4+mT2gIk+lRLwF:UEiR4orttr2mHl5GmSgIk+lRE","tlshash":"75d2e1960f4ffc1fd17ee0668c868985e26b5c19f3ef18404c67d0a1179b9721c5bae0","first_seen":"2026-05-23T22:00:36.825634Z","last_seen":"2026-07-23T03:06:57.072201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/tutti-fruity.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.433Z","timestamp":1784775999433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/tutti-fruity.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/tutti-fruity.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7rcqtv0id6\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8E7JYQjRU8h84mcxZEfUsiJf6sOWhjTxGhb0weMyA4OrJLLsxnhC%2F38b%2FoGrn7fK4gJXODL5MSq87%2FiYuW9ASxFO0ijL3RA0cWN7Eku%2BKqoP0HCNMf4frGS7JOGfowoi%2BEI9%2BZ8ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c69e856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23802,"size_decoded":24832,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"5425ff28400499b6ac19f50df53df1fe","sha1":"aec881da032cd4efe79d585c5890d44646ee29ab","sha256":"8561a342c54ed0dd689e95b5c94f1f7d7ee9ea3515cd8375ca21e2955ec3b902","sha512":"0df14ba74df11d41ccf399173f506a5449aa708e9eaf345033503c838fa348537f06e69254c46ad3424cb25d926fd4c4de1ffcfb4992a76039042f163971d988","ssdeep":"384:2JYW/BFE51pMcJxgbV+5niGIdXkxXbZgLhqiVzSxLxMzqoHs/BAgtb8enUg:+BuyExM+8xXmbZ94SxxMqAwlV","tlshash":"37b2d04a9d7b9b0fe66e9033f54cd5217c484f802f6e052a2e39ede19f360950aa42d4","first_seen":"2026-07-23T03:06:57.073364Z","last_seen":"2026-07-23T03:06:57.073364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/pirate-plunder.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.618Z","timestamp":1784775970618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/pirate-plunder.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/pirate-plunder.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7pdatctv2z\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6idnZQSbB%2BpGrHOrnjQ02ERHs9VBOXyPP9x%2FzkCcaWEJzg16aanKoDFUJfZsg7gFiQj9QQFSA%2BkampsUIDMP3IgkFZeSpwuXSd3ek7jvjazmR0DCNIHJE0sW2RIUxCPKooLECk1Dg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b85f2c56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40283,"size_decoded":41309,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"184d6261257e9e54c347f0d9dae0e646","sha1":"4c986ab833e911b9ff4391a06c1d71ba542e9f6b","sha256":"9b7b8f28aea93ed1aad1e6d5017da9aa167d8ee7917b3b315bd19145550bfde6","sha512":"fa6d34f8d192812154e3b3bb91069d8aee068f60b873e88d9a1efbb73aab426d1c3639ece9c776315a35472c28e3e859291b095b1344770db1848bcdeee91186","ssdeep":"768:YsOw3c1Q7MjkGkOdddVFnxiSa98mUWuAvOq6r7QmS2yKht0zIa5XFi1:hc18yDXWNUY6r702b4LFi1","tlshash":"6c03f230bc6e119cea4e91668a05378b530464e3d3f5a85748e1ed11fef97c8e4f4929","first_seen":"2025-10-26T01:21:03.155244Z","last_seen":"2026-07-23T03:06:57.079046Z","times_seen":5,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/champions.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.626Z","timestamp":1784775970626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/champions.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/champions.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7jqvfxbsrw\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HycXEGGmxrHKyejuiaXFwgYoWk1I2GG2seKT23lzkTzITo2CYuMO5jCNY6xIvEHzWUvpWpCNDSftbqvoDWY6APvkGZvhjlLIb7DqmPXteloHOv%2F%2BiMZqEIfr2hUJ7bvXXq267qDfFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3256b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37292,"size_decoded":38311,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"3392942c19c2bd890d79c41f18ac2a5b","sha1":"96462b092a28040b1f4d1bb4236a9cd5a13a0a20","sha256":"dbeba0f530d8968d90b1cafd3425f9da0190a274a396aa7f391e278d8a626df3","sha512":"30a825a620cba4c56718b9b61a96d7bf113e57cd0e7a9dfcc0d0ccefbbd549522b93c21a93cf5d8c5a5d26403af0359b37d6b0d85a732e1c5d0ba5da58bcc648","ssdeep":"768:gtGdUQq9i0C5nNmwLJie76xgne5ffseK9Z947R1YqPtXD:gtIU2nNcwLJExgu3seK9j47R11h","tlshash":"a5f2f1470696f8f07c9c0a22b6f260146f306717912357517cfee2b1a73628fe6da896","first_seen":"2026-07-23T03:06:57.080054Z","last_seen":"2026-07-23T03:06:57.080054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/screamyscissor.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.642Z","timestamp":1784775970642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/screamyscissor.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/screamyscissor.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7harai264m\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUZr1AaWEdBdpyLQQpott%2BWzLNw3vWOGYRumvNS9gidt9fBkB1Y0GnLOSO%2BEjYUgEAEQwtKOARCK4ECWwbaf5CjedPR%2Fo1JttrIO11ou4EdU47VSTpYpiHCPsdaNVQxwMvsogwzTGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b87f4156b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7942,"size_decoded":8970,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"737f2e8f11eb7cb07faf2d6e9b7e3671","sha1":"a0642de3dda98fe1a488306025fcd395785dff99","sha256":"c0efc977daaddedd35d93a76d4818e1976f56c42977eb9cd355f4ebc65ff4610","sha512":"ed78c3663adbea7cf7f04d938e54d857ba458710c5c63e0d8125f77c01481eef1e981d9b30e388ecfdb0088aa59439d95e7b8015259bdff1faf68fd7884f880c","ssdeep":"192:PzQwF1grdGKYwxgfYhUup7NbMm61yzCN6O1:7XHpf307NbMf+Cv1","tlshash":"72f1af2d133b8810d75ecbb05c4f83063d30ad60be49978c34a25bc5b7d5657e5e5178","first_seen":"2025-09-23T10:56:20.398683Z","last_seen":"2026-07-23T03:06:57.082014Z","times_seen":6,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/prime-property.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.413Z","timestamp":1784775978413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/prime-property.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/prime-property.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7pi2a6umda\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqAzI8Nj1JldpfneQT58LQ%2FVkvRX5cgWacf%2Bkh4ySLdmiWZUkM5SrRCQeL6%2Ffg6q5Fb%2Bwkz437sjXZTdkaL5R8mOVAuudqzyBbVPt1UXSISWASB%2FMdnnm%2FqQL36UGUmiPa4GVvM19Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9086656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28990,"size_decoded":30022,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"62210e47989036e0b57cd2898f095adf","sha1":"a91007d4abe3ec60196437af8d9f7cff3c24a0e8","sha256":"11632a8f71010531078c78660ee314118d3083659d786d881fddcdb591f4cf8c","sha512":"56606732147f25a21c1863b465c14e40c0c0355f548ffa6d6dea9cebc9f257853f2564ffcbcf4e23f400dfe6dc12fb785dd7ebfa1791b3fc719397efa64bff20","ssdeep":"768:Yt8VdTY7PVJr03+0KxFxzD7EfkFQppufiEDpZ9wG8:RVMX4+0KxFxHXFMpufiEDpf8","tlshash":"fad2f1a8c39ca659e03745d480dd1779bf5f9c13658bef09a4a080646b989d83f217f2","first_seen":"2026-01-09T02:52:40.015403Z","last_seen":"2026-07-23T03:06:57.083124Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/napoleon.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.423Z","timestamp":1784775978423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/napoleon.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/napoleon.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7ou8y0ski1\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwe7Y85Z46YyxaEidABcQL8Us773O5EDy5KkA%2Bi9hSgrZ2gYIJRExGdceq3IJBvM%2Bf3O39LQ0ht9GtbbOCZ9hzlES%2F8j6rx21upyABco8Sz0xLzw2zMOk0yvB71y461kbZNAz1ShZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9186b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26569,"size_decoded":27589,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"7a1a8c99b83521a8a6e707eee4204adb","sha1":"dca2ab98d0770089ba555beb86ab55636027ec18","sha256":"7c13dd29ec62c578047492544b0bc675af9cafa424d087a17b581c7241668312","sha512":"7c59fddcaf7660b283b50545989f72fefb26a5cdf4edb7a8f73540fdb75139222e43c45b05df24427543c2e172fbaec6cd51828f42d3b19ca53676432a896dac","ssdeep":"768:YaeD+PQU/nJcTdQD/FdtJdKBu/Ix+YbvXjlLQwa:zeCQgnJcTdQXyeIxjbvXJLQ7","tlshash":"a3c2e137ff61ae3a635f85d3c2cb6be6c9840e26af0c84196490cc88276e7a4d4d9475","first_seen":"2026-07-08T11:58:06.212522Z","last_seen":"2026-07-23T03:06:57.084052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/rumpel-wildspins.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.436Z","timestamp":1784775999436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/rumpel-wildspins.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/rumpel-wildspins.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7q3hvxwjht\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFrhkOnAya6Tvj8zPjT3x%2FxNN2Vn4yuoHlPNYjnmL1fKH4r2Y%2FqRwQNOurrkr8XNu1P7h4dtF1w0YJcvhgWy1E8LqsriCGTZa4ge8gGTYgM6F%2FDKX0b7ESMkAMOQZI6PrxoMfTraUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c79ea56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25265,"size_decoded":26293,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6e1a03037fea7f8a5c8e39b5f2b9a006","sha1":"b4688cc866e398e32de13b0beab7340447b54e0c","sha256":"67716c6441ab46e61945150a00b2daff43430ae6e74761df143789e12fff3359","sha512":"a5926ecb9d0c17dc0f1cd5e99b5af07f15f413ad337f790d5780357b3f53802582304508d3997e703f4edf2f64c7c8f17e8bc9388eee62b8dc92c6b7c4d020a0","ssdeep":"768:9hvvQxktMLOCPJZS2pZdLLEl6lbIkC5aNP:/HYYMLOCPFpjY6xIkC5M","tlshash":"ffb2e17e19d13c04d98cb278711bb8861ec1f8aaf1b58d912043368a9b9ef2b745d078","first_seen":"2025-11-01T04:33:33.218669Z","last_seen":"2026-07-23T03:06:57.085271Z","times_seen":4,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/vanity.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.451Z","timestamp":1784775999451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/vanity.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/vanity.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7hka8644zw\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aWnN2szyZvJCH%2B4mf6NLQtc8tvBYwEDegX3GV7Ek1iVKp50XPzH3wmgUoVyMyfKbsQ9oR%2BFXcBK2nsevDoVT7rDJ%2FTuKXE%2FyXk%2BbKiY7%2B2%2FqU9whYnxn0kwHTKHe2Bd2KFmBtxzx7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c89ee56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6476,"size_decoded":7504,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"1f9841bf47b09fb2db1a256ec20a04a1","sha1":"7b696149db59487100b0e820fbd45e6f71683fd7","sha256":"0253bba9e159e40f3e465762d9cb11c870f4daaa5a2a6b1627c505facdec483c","sha512":"f38e7d3c7ecf10a5156a5efd2733546bc9074213c1d268471014edac8bae19daa38d46e34a71b869c0b7d12bfdf65e99a115c89998ea1b582c35e8f4794f4f1d","ssdeep":"96:rsfDavbJjI0+SojYnt8dnahH3HY2KRjF5jOF5TUQyHNUUwScSTdZVCqK++1oG:rdTJc02jGt8EhHXVKHgYQyH9/ch+coG","tlshash":"b3d19d0b6bf44b52f82f83384121d8da52c4e701359785b67289e6c0bf7a2d0bdeba01","first_seen":"2026-07-22T10:10:48.036862Z","last_seen":"2026-07-23T03:06:57.086387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/divine-dreams.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.629Z","timestamp":1784775970629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/divine-dreams.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/divine-dreams.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7kltzcem5z\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZQF2sSrYq3VADaPlRAKJzPo1BM6EJrnThRP8cNsc6sF%2BoWR26r3tmyuzO7z1CDMXYyKfv4WPEZ1sMpy2aEzBC%2FOzCc2ZI8r9%2F%2Fdy1%2BpbLiDU1VrLEF5gVHV2uttg0hbJxL%2Fj23geg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28727,"size_decoded":29758,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2f725e79ba9e7be9eb25fda93b25b1fb","sha1":"156ddb5f10eeb0dc818729b3e21331c2d853c60e","sha256":"a3d29e0230e9f542072c609dde6e6ebf75a08bfebc0a5b7f5ede8afcd3fb01e4","sha512":"375de873e26d372a6b35c85b5fc167d1cc6b200c799968b0140c64cdb3f09ea352a26b081816dea0c25d168a2aeb6e3805c6e4e465382af23061c013db19efe6","ssdeep":"768:3QrQA9SOaAtMJRbT+d/0wco/TjCzXopFWgntc:aQRAtML8/zcoMzgtc","tlshash":"b6d2e0355f5c8e98d76d9d7203b2aad80e0caf4801fb011f5a0b2fc4fb4b5a54922a5f","first_seen":"2026-07-22T22:37:23.679196Z","last_seen":"2026-07-23T03:06:57.088085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/frenzy.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.649Z","timestamp":1784775970649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/frenzy.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/frenzy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7fwqvqy43i\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqASP0ZX7Q0in8BkcDkPoEndqnDn7LczcUP9lGyeAXeKTSbkVBaskOsNL9tjfLIAHqg%2BvpGusLJ75AZT1OwaOhzPNvpbqfXn5Cv%2BL95QTePqX%2FEikGFOdBvecKS4k5cMS58RG%2Fs0uA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5310,"size_decoded":6332,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 1","md5":"2987a5ed62c01474df260401afdbc073","sha1":"285c187850d42ca85fc3fd6c93aff134fae1e592","sha256":"b4cd78c80f55991201f8c06580d16c0caa20e71a5b828dce311f09b17679e5e5","sha512":"ca7cdbd5e825c2280c2ab8f93bdebc5f056b5a03fb83de08477453eda1c529a650c4871393e1ac94b40fe47d5edf5d652136da29294aefbd6249b4dab3862f84","ssdeep":"96:BwKzgbrnHc7pisqw+xl3KetuDaPby6ARonswYbIyZJG9QEJEtn90f6RgLb+vPFH:BrwTc7Ww6ajaPbtnswYnZ68tnaf6RmbM","tlshash":"d6b18fb0c772bcf0e5464fb0a2759e28f66435893081b92e23e2591f8409d9d9ddf5ca","first_seen":"2026-03-16T14:22:50.908065Z","last_seen":"2026-07-23T03:06:57.091022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-11.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.668Z","timestamp":1784775970668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiancgd4ji6-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ue78nQC4ihjeXhSywx9wPHFjW8gOufp65KqRIYrCllH8MuEaejYswFdken26mbdqyJMhZbWGAlrzxtr2%2FhuwAlCMOjZ5SlB0D5OgBvAfOzQ1kAtesFEizs0yUqzEcnzQBzHqTaphFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5956b9-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":1377,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-23T03:06:57.093169Z","times_seen":73,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/aztec-gems.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.412Z","timestamp":1784775992412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/aztec-gems.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/aztec-gems.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7ihmi06sg3\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=szq1%2Boh%2F7Y2zhlpiNgsSU8l9EvI3Tw3SET4tnvr1oslSLlCe5ItbAWeUC2eFpyuYhAvmifFWKRvjfTiMEjQ%2BhIsD%2FZHO0934on%2B901bxVobOCdmClcs0aM5pRwCdy987VoLTE%2FE%2FQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840896256b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36867,"size_decoded":37897,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"36af1345451d3f95cd02ec6f9b06eca1","sha1":"182bee529215cd36bde6165edd0b6221e8508147","sha256":"009e91512b66f5d464d6926bd31955a65d4fcc8c0cbba4be79c3b0ac3a7ba236","sha512":"b82a0d2c44c71eaabde0e96df16f7ef90af6d5704422b4989fb91cc92e856ae68fe1f580ed6dd2fa2ab04d85cb3f7f994a0ae4276d2676749d23226109a68303","ssdeep":"768:gWNFxfZTjr0H1FxYVavh24nQOE9RLqrPU6tzR12+dRXtOjGuyNIHPQ2H:g+T0HZXvhfnQ79RWgS12egjGSY2H","tlshash":"59f2f104536349b8c7be8325f42bb828d7e750967c243b1a98c499bf5fa9f4d1f0b099","first_seen":"2026-07-23T03:06:57.094479Z","last_seen":"2026-07-23T03:06:57.094479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/star-fortune.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.423Z","timestamp":1784775992423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/star-fortune.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/star-fortune.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7qmjr9yhw4\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTTonsRU0v9ob2QmU4jL%2FYVxfb806%2BpB3Wp4tuNgypqTXDxzrETpvF9icHXCChl8NpOUfOt6yygFVNHpw0BFsJ15%2Bqb3lEhG%2FE2dJ8Ej7T1k%2Fy47xrgtGAyOyQAl3CXeXcMks53yoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840996756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23188,"size_decoded":24216,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f2bd96f2e85c77e230db5b7a17430bb7","sha1":"ef53f8c9dc2cceee4d685dcee42135cd4537722c","sha256":"081a0d56bb9d5d2fede6a44f805682f90c9041d19ccbdb865e700c6319174764","sha512":"b55676c7be135db1828e534cb7ef9a573adf60700bd61ae6744fe1a5ac6c5b5848359c9fc5b48ba19ea5077c6793fa209d98eb91b7e699991281a3c11cb64b27","ssdeep":"384:mWtALNm8SBXWn2SPvdIJmGiJkHlsEhEQyvRVZ6z8QXlqA4Anp7nvVpVcds5wUep:m/03O2SHdQmPJkFsEhI6QApLdzylj","tlshash":"c4a2e12befc13dea896fd67363ed2020e82108d9d38587f50d12a872ff571e66898149","first_seen":"2026-05-01T23:27:36.649652Z","last_seen":"2026-07-23T03:06:57.095675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/esqueleto-mariachi.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:36.405Z","timestamp":1784775996405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/esqueleto-mariachi.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/esqueleto-mariachi.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:36 GMT\r\netag: \"dh3ei7lc11xgof1\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RCC8UAK6MEgcgTv5ql3Y9oRHEoSh6tluu%2Fg45Tz7RGdsGjZLmt52TuDDUOuwsAN2lFxwNGCv1GCF8g61F4rAr9vCNqesz9A51UEQ7vzUQ6LjNjUrEdfvdWcmJhjejmEF%2BuILW0H4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7785989aa56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31645,"size_decoded":32673,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"9821448eb93f6ff134760da6ddf95cbc","sha1":"8c0159e43089a3b54645d6bc14511b3897d8a638","sha256":"f5117133c239bea6a12702303e449b77f92beac110a11125569f44d15d1f052c","sha512":"78b6dd1ed27b472cb284232d871f4ebd7969894753c9574e1d0d2fd406a6ccd0ea71fcb8a57d476cb212688c189f10ab2f045605e68fd09d564497633f9d4a40","ssdeep":"768:GQeiPwnB0zQ1R4T8PiwmdKtWIwkj63Oms+n2GK94/:jwBQQzJn+ewku3rs+n2GKM","tlshash":"1ee2e1772a8761aadc2d8ef556f8cf7bc508b458e50a510ed0541ab83b38ecc4721b95","first_seen":"2025-11-17T13:46:09.782355Z","last_seen":"2026-07-23T03:06:57.097129Z","times_seen":4,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/bonus-poker-5-hand.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.426Z","timestamp":1784775999426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/bonus-poker-5-hand.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/bonus-poker-5-hand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7j5fu69err\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5%2BQ%2BoxBHhuReERNzUxrJ5MgQ0sDSpJhiapneeUqWHVk3ueRHmpjrHD%2F7lYmobe73WxURzBWc6TAYy%2B1t4xqD2fDZWhcyyTd5fNFAhu8c6I4BcXAAnCvRPL1PcUAF96SLZSr23S7Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c69e556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19143,"size_decoded":20175,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f2b328fc693b18b70cfe82b12ce7f7a3","sha1":"9599fdffc098ba4b7c3f833c2a98ab46022b594e","sha256":"92e8465be21816de6dff604438fa678bd159b88c4514abd15578ea836a136df7","sha512":"2c775e565d9c7fcc541be53550a7085308a9803b7277ea9516594dd65a28aa5000401755acb9bc98c651a70e5d446fe3749b438ba33868da24976a8f9421177b","ssdeep":"384:+bGQffty9+hxlKrpBx40UaWlHQs0RBcKzNYIQlqWRHqV0Cjo:+bTftBnKv7JGQs6bYIEHRHqOCjo","tlshash":"8382df41a7dc8e1fcb7f8ff71e0a65df72136aac0a37d2a104a169811ba5d60700c66b","first_seen":"2026-07-23T03:06:57.098365Z","last_seen":"2026-07-23T03:06:57.098365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/habanero-joker-poker-100-hand.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.631Z","timestamp":1784775970631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/habanero-joker-poker-100-hand.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/habanero-joker-poker-100-hand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7ml9zukazv\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55XstnCKNzInVkNr%2BUy5CFra2ptk1gbTw8ZDqFw0c9fqYbIUhW7bBt5WfOEXwtbV2YvuMNEqAW%2BIyQHtR7YxaZKqxcKgXY8EzJV2xnA2EcjZC2fEv1ok%2FFr%2F%2BduO7j9OngfrPE60aQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14251,"size_decoded":15296,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f72ecef0b06ef980d58d352ff9baa5b4","sha1":"55ea0ce50f34e7dd228d63bc5a9465c375706ee7","sha256":"aaf1d861e12255a01822565ba892a4b21fc0393dcec485a50737ecfc2711fd61","sha512":"29dd2c3a4a399617e4da4a9a4c5cd3ac8c1662d119142a258270dcba4145b419ce5bb7f4056cd09a358f18175e19435ce6b20a52b55af5ef168bcd9123d24e01","ssdeep":"384:KGDXTwie/y10qChcmfq0M4S9GHYMnObkEq7RlUJaulEu:Kujwiopxhcmfq6YMjRox","tlshash":"7a52be40d394a109fe1c403914ef316346fd3298799227dbed4d973a974a8a838de2b8","first_seen":"2025-12-04T21:09:10.660246Z","last_seen":"2026-07-23T03:06:57.100954Z","times_seen":11,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/previous-arrow.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.639Z","timestamp":1784775970639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gPnmTWsZoGke5Evi8OJSNk9huWTRZkrFhs5k7sTs0PsoVgLMQgvgnSgxfaRo7By6LTzz8g3cKPtwTUW5cNkPj6FYuLPDP6X9R5N3D%2B95C1%2B3s2R40WWnK4I2luu80sMxZEO30LTEoQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3eiao09pal6n\"\r\ncf-ray: a1f777b87f3e56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1166,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-23T03:06:57.101599Z","times_seen":96,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/live_icon.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.680Z","timestamp":1784775970680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/live_icon.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/live_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianvi8gk1y5-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdsy6ni0U4r1ktQIoaxeR04glAu3WpCu5L9N2cSzRKj%2FA7M2jXkCQ7phPDco3nIIa2Ox%2B8rTedCN3s3%2F7PhbJZZauq4y3D8G59Li3q1eED4zDGbBMhXEjULri23KYQJfcgxSiaguoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf6356b9-OSL\r\ncontent-length: 925\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2525,"size_decoded":1952,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9a0c05ebadf4fda67faa8b90d5424c5","sha1":"f81ff1ed17b5ffba223d3a06d1a3628fb198cec2","sha256":"f8dc8454be75f1a4ce991b485bbb1f1650428409c820b3d9b8540fe5a538dd45","sha512":"ff6e2ddf5f392b184b7d49f702e314ff8cf3af53e7eefc4150dd84a863a30eb627a9dc6f0174ed3710e72ce7ae9831f52bac374779670d653e3d78914bb63616","ssdeep":"","tlshash":"4d510ef3e2cca2d19003d7e4cc079831b59b6cf767daa3cb8272ed44ab30165598d865","first_seen":"2025-09-23T10:56:20.264777Z","last_seen":"2026-07-23T03:06:57.10221Z","times_seen":38,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/lucky-queen.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.411Z","timestamp":1784775978411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/lucky-queen.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/lucky-queen.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7o41vfpp12\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=joUXccWn0TUcG7W%2F%2FNzFajwmYdFgnIeEK%2FG6gNhRgXE0QADEGQLjdRVegF2HWZnvoRZRd1v2jibvJRFTjhSnK5BidPWCx5XCGf9q2623u%2Fpa5nnnWOHSgB3kvHLF%2BT%2BQUC%2Bh9oSvzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9086556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32438,"size_decoded":33469,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"7f2d0e617e265014b26b3242c224e413","sha1":"ca9950189b0ebd9940ed21c1d7f8419cd4d91f9d","sha256":"2db64a372accf0aac1d46d2200d9d7fbd6b8345111b7fd067dfe61e660dd8cfd","sha512":"04eb4e7f377882bd03bea66522f6d54e2e5c8c189dd0ba3045b8967c710c647a0fab3a8b9a224826c6208fcc191690d11f948f8f613810ae19629bf7b558d034","ssdeep":"768:ld87r6mLhXu1woA6xcOgTXtpqwx6mIZCqpxVYtrTV40xoTnHjOv:ldWr1he1nA6cOgBcUc3Q/V4EoTA","tlshash":"5ee2e1836e911421853e6d3bc690ae2613548e55b6c2fe13ab641f1cf33f9d14d329e7","first_seen":"2026-07-18T03:24:45.60999Z","last_seen":"2026-07-23T03:06:57.102774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/jumanji-online.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.409Z","timestamp":1784775985409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/jumanji-online.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/jumanji-online.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7ndusunobw\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcwayJC3rXrB%2BWORsxLzZqbq%2Br2bQeD9ZOkuJBULNcVOfj5dfjZ0NwHIZycf0l6CLQew6LnPg0ZZ5IJOufbAMJzp3DwOmvgIKlXey1glukah94KxMMcn2JpqDkD77pRMx%2FeMOFauLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814c8f156b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31532,"size_decoded":32558,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"f8805809b342b0816b46971ba05931e6","sha1":"fb674ab7e6b729842163aa9d76b59ac6a7ca4f49","sha256":"c74c32ca14eda321cc6545cba5606b343055c3fac83ca82209b692648b96276d","sha512":"68b844f1f0310c5eac3a85a69475935c6ea6ee53f839cb899fd6e29df04f29a71e0fa34b67276fc41c822e3aa3c2c612b32cfd52444cd26753c25d86c76b6b65","ssdeep":"768:CnVnw/KCJusXIiTZQPDN04QpfivdzBEwWCOtJ+jhr1507L:Uw9JusYiTKrNA+dTWCOezS7L","tlshash":"16e2e15037e85aafbeefa175c31c012696e3f1922c4cf824612605ae235eff483c16a4","first_seen":"2026-05-18T23:51:30.710334Z","last_seen":"2026-07-23T03:06:57.103745Z","times_seen":5,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:41.089Z","timestamp":1784776001089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:41 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSHHDPRIzQihWfEX0%2BoMDPsQEIeI1va0dfeLYAh3LxnKN7DP1%2FsXixg2ZeaqjnmrKUftDRg12Mq9XT8kuEHprFHDFV%2B4Cq88QU2OMH2zFJlAHdiRYpig1awUYkO%2Fvq6haymSbvTA7Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f77876ca1556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"79f2de633390b07354ad789cf20f6ff3","sha1":"fbc8409062662c967ce02297e54460e2bc5129b9","sha256":"0081203db347739281d9f279d997507e5812e59c6b9f3626d6373d2eba0e5c2f","sha512":"5f91d313a735ac3d34abdb30b50e3faa48f3369b18025c037c39127347dc582247a91585acf818d6ac8bd9da454d10b8f6f5a1bd17f283713270ff693aa215ea","ssdeep":"","tlshash":"5aa022cf8080e82b83330008082b33e8b0280e030cfc0c002380fc80ca202028083ea0","first_seen":"2026-07-23T03:06:57.104315Z","last_seen":"2026-07-23T03:06:57.104315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/2026/03/logo-69b6b8b75159f1.03470090.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.610Z","timestamp":1784775970610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69b6b8b75159f1.03470090.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/2026/03/logo-69b6b8b75159f1.03470090.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3gzzx7e9s05ra-br\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONLHLfi4AmO%2FLfRG9%2FV8LUeZJ5bKqE8bZrohM8NtT49uMGblD5h8ZnplOIGqXP5x2Cbca%2BbR79fOijIm4EP8wzElFjBYEclUv%2FC%2FvL7s5rv4gUGnHQLM1gpjipLVR7ov3VnKuY8reg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b84f2556b9-OSL\r\ncontent-length: 3228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7462,"size_decoded":4297,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23c748e348160289ecc38a4282aa680f","sha1":"96264af5927cfe40b7887f04f1a45561b8e32d74","sha256":"6a8a555c62485773a09b85b624e51299cea582e118b8fbf0f645e7e71d022264","sha512":"7fa0feb9c332b54554eb33779be82cca0e81372801c02e718249bc0348fa8ee9aef4a4855d16e1fe616b74382932ff1c61b67b4b227a789b5a9666965ef0abe8","ssdeep":"192:9UbeXT/clnP/C0wIWwtgXpZUg9FWLd+PrJyCZ2Ciu:pXLchUwt+wgnWLd+Pr4C4k","tlshash":"2af195cd3bb49ee9cd75d7e2ff0120687a27c0ba59858e60c1559b0d349086cdee8c8a","first_seen":"2026-07-08T11:55:56.080114Z","last_seen":"2026-07-23T03:06:57.106168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-3.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.658Z","timestamp":1784775970658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianh7tyk11j-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ar%2B%2Bc0jIcqK8OiWD4oGDAvVAeThH0JFAvP92iwJlEtZCXRSBYHMSNLqihgjstq7PTczPiVeqP7dOpHZj6FvJ355FDUGTB9yDIjzpn1yWX%2FVLJ1wbs5TyJ5%2FyxRsZgcLRocivpvC5gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b89f5156b9-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1351,"size_decoded":1732,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-23T03:06:57.106767Z","times_seen":73,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:17.087Z","timestamp":1784775977087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:17 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmxGJ4IMdjMYvjEqDldXCvaAbD7RYAnduhGAyXOu7K4YOqPNvzpXZRqd5n498FCTsIGgvH8JiVfaaElpVP7CNNKjLRVmmOpe69QV3Dg0oSq2ept3OoKGGwOHxOlzSy1EJ4M4EzLQ9A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f777e0c84b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":1040,"mime_type":"application/json","magic":"JSON text data","md5":"9e40bc181fad49b81f9649fdf95ef3bd","sha1":"8830b6ee4c2fba74f46b4d878902ae5d015862df","sha256":"981609aa75cf4b72489ead37169c46d3bd97ecffb913674962afa34636812f70","sha512":"de0a0744f9410125fb34a9b0571969f5b49d992eb811c4dfb4a186e6d0969f68b87f7b9544bea49aa3efc2803e723ba53b6f5095493348767a593503a19deea3","ssdeep":"","tlshash":"aca022eec80008ce82330b82b88b38c8b0300f8302f8c8082b80acc0882820a022bc30","first_seen":"2026-07-23T03:06:57.10737Z","last_seen":"2026-07-23T03:06:57.10737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/cave-king.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.421Z","timestamp":1784775978421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/cave-king.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/cave-king.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7jqvfxbpmd\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYd07bXPXbNrvScbPOGED9TCdzwWcgrlC33tALD5pWuK48ChQ38QFy%2BJJVUSRGgmK3nAzYp8xiG7E1qOUBmn3OHCajbray7G5D%2FMQMBsvxYkEQaPlGfwL1w15bZJ%2FcCi1hAl2K3Mjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9186956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33205,"size_decoded":34226,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d9686192a16c6b3ab11c402071c3cde4","sha1":"598f67de5898f44a9b01f2405ef18c3bd042c1bc","sha256":"bf28b4275f2e61cef024d821f5007c7a94116f4b79bc887486866802d90d3fcd","sha512":"6ee51d60a971b168e16f342345542b10abe2a3f1650f071368bd7591cf14a1bb9262296970bc493e77e8d9eb7a1bda41840edef57c5d416e35957a317b18cc5a","ssdeep":"768:BqPQ3h/zLyUJ5eBePdq9wANKOrGf6OQD/IcYahNkTt1:1zLy0tPTANP6f6OMrkp1","tlshash":"dce2f143a2a98b3af4bf75e2e0c5a53fe450954126a053b79f131c8c1bb69f050a8737","first_seen":"2026-04-10T09:55:29.816742Z","last_seen":"2026-07-23T03:06:57.110235Z","times_seen":4,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/wild-walker.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.420Z","timestamp":1784775992420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/wild-walker.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/wild-walker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7ronhy1tbc\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mD4EenfWnyFAcAkNQ%2FZzNOi9jZ2YlQ3tAz3Ho6ukzIds5aDLi%2F15fmYKZo7CySmTgLebFm0I1vSN44XcNo3XZQ0RPY4QiYZ4K3P3F3eyQAxEP5s%2FJY1V6rkdAYXh4%2BL%2FrQdzeBHrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840996656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37992,"size_decoded":39019,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6f475876c64685258729ae95c95014ba","sha1":"bfccff4bca43cde79ada287df951d66e60d19fd0","sha256":"b7302e23c77031cdd929c2cf5891df80e7aceb116625e02fcb5e95030a98c422","sha512":"7f142d4a00adda0bad84b03dc8c724c94f384b186ab6a849d1be8edaaa7fb4ca5c548f86b896c44fe27dacb8b56ce98afcdfae546bfdb9dfb6e1876a6dfd0e9b","ssdeep":"768:ci8Pmb+4MU5ZZRVbFRNkZV6BqwCLAwZnB2b+9J1fxhxdCNrvHDGu:j8ub+ToVkeQ5LAsBU+15cvKu","tlshash":"7003f25542a20b18561ffa370b90396d235ab894e07b8e80745927fb734e2acdc562db","first_seen":"2025-11-09T11:22:30.40358Z","last_seen":"2026-07-23T03:06:57.111444Z","times_seen":4,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/lady-irea.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.643Z","timestamp":1784775970643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/lady-irea.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/lady-irea.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7gb1a8z37s\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5twCLR9yYGt0Z%2FZKiOQbjWdEKxv3sToXX%2FYBCEdptTD195SfNcrBmFJXlrbWMJIXdee2KJjnt3JxBezzvvEdye9HZBgu4LGmW%2B0%2Fpsw%2FvaEjPpwMKhpsyqHDrkofYQpRCEjK7flHCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b87f4256b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4168,"size_decoded":5149,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"72465e2e40eaf2ad9c5afaa699ce9378","sha1":"65e78d1d6dcd573f4f1411d7ae99c3685e8f6dcf","sha256":"967f17600706fab518aaa2931e4f5e538787554ab79e5b3df0f1a08939ccca0a","sha512":"f7dcead7398ea7e817d8969211314840403220b24d72b049b66c48ac7d012d9142620f1461bcc0e00caf92cb88f5dc8962fe96ce68862232060fdc3cb242ed96","ssdeep":"96:h3Hv+h3FvUI+W43zGrqmnPtn5yDUoTggC4DBr4uw:h/eZs3zkPtn5mEgVDFdw","tlshash":"e9817d560f3aad44cb1e92329e6a72350fc5af45a2311507c86ceee71b737a90d563d0","first_seen":"2025-11-09T11:22:30.349222Z","last_seen":"2026-07-23T03:06:57.112007Z","times_seen":4,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/secret-of-christmas.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.636Z","timestamp":1784775970636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/secret-of-christmas.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/secret-of-christmas.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7q89crwiln\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vX7NIIPHx7g6DjqYe31%2FuJBKkSrhzxIHiID5mgljW4%2FyRIxGXMZFCPPmFtZPysjfZJZvrSodF5g5FgZudqs9flHQEN%2FDETHaB2mmSl7UwxmuHZOLHOZ8FM2bBC6rgrspoBpGoedmug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b87f3b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24107,"size_decoded":25138,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e766df83940d6f475bc1563f94196403","sha1":"46587be37c53f54a104c270c31893f816754df16","sha256":"f0f1edfc2901e5a8e3a6ac0a7cd2610f07a4c365d474069edbc23d1ee4416044","sha512":"a944be51b577989de2a320d1d739a2793cb85e9eb865998b649ec749e14a2bf273919ed0cc6803f7cf50fd64e556c4edf35350df7072547469434e9c65c0f424","ssdeep":"384:cI17LUw92Q0YuVvE2dWZFx4gcwqoTmQrOiuhgD96DejWN2Ko+qtRwYFu/S8RupzH:cWPUGfAZE2dnhoiQregQDejR+qNFu/S5","tlshash":"c0b2e160d0c89558be2fdf3302e167ba296108f1b390cece2840f5d4aa19ec76c7ed56","first_seen":"2026-07-23T01:00:06.646693Z","last_seen":"2026-07-23T03:06:57.112933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/foxin-wins-football-fever.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.628Z","timestamp":1784775970628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/foxin-wins-football-fever.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/foxin-wins-football-fever.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7lsp6uhpol\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHHzaw1tM5W89fGjFMOBVm%2Fl%2FHSN1uHWiuWNC3UgvJtMqdmAqO%2B9EZ4b44%2FYJxDq2ErZ0I0ssqN1Wo7qufLb2l9KLJxujCazpnierU18VbecGXXlHKOavjcYbWXgspF98syqqxIU1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33285,"size_decoded":34326,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"290defa14c1a7bb4b6c7bb8a8bf20194","sha1":"a34668f6b3808362dedded86dc96fd851fa1814e","sha256":"980335c33a434e36cb13b2c78d12637523b12d0740fe63f1f11ffa08a5799bed","sha512":"ad6f123f7046559d9b344af12f7270e6f2319af915a4fa2c13b668bd369f41a88524c2c8081cf29e27b3506d80fed54cd65923a39ec2089c81189dea373c65cb","ssdeep":"768:pBqaqCMUhzdc8B4ZXMUaZoQe7MJ7rDyufHu0ZzGZJQcKNtw:6RCMO5NB2XRak7K7XylscKo","tlshash":"4fe2e146ad583006f4cf4268fe62033fad3bdc7d51b1573f079ea99c6b28291810e769","first_seen":"2026-02-01T16:54:16.040379Z","last_seen":"2026-07-23T03:06:57.113619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-14.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.671Z","timestamp":1784775970671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianeu3jj2nr-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u14IltSEib3cARiyluXojxOI5YiNWLLYAAGEiShNE97eo18t0jmAZ5H8EoNKABVbT%2FBWqSG6Xul3c5T9bArVUCiaVIFZROzzDv6yDKReEJCdmzN9JeGe4RBSuGBov3q6Ru36gzgeng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5c56b9-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3447,"size_decoded":2409,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-23T03:06:57.116959Z","times_seen":73,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/south-park.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.430Z","timestamp":1784775978430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/south-park.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/south-park.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7qhsafxnes\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DykWFkOL6pR9CJNwibHH9orYWldounZ5fPZCpF9zJnTW9RETz7w1DKIWoXiRAW6BagGwfmhBvZf5PMb%2BGMMwVF%2FunUbviDQ5LsY30uRxzxK5oL2UL%2B3w1JoEiqOkB%2FsegqObRQbJ6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9286f56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30340,"size_decoded":31364,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3f0da58e9de0e76a332abd91c4c23a21","sha1":"afa5b60d850b35a203383ac175e4672ab281d82e","sha256":"c4c9c1c391a766863818436e7ff94db071c6b3136aed89a8c3fb6753ea02b890","sha512":"f67a4ec15ec3ccfd65066f30037c1160f8d5201e35816f71ebcf1708ff6298c87b928b9d1ad47ba836a04e491abcb890065232c682b02cc5d0bf24ab1da56db0","ssdeep":"768:zS6XWgCThiUz1ETzYatEjCWCgUdGkqfQk:zSJMUzqzbyCWDlf1","tlshash":"b8d2d017afb4d0dbd3ff266781379f901927ab1471b349a7502612c937897748a33b28","first_seen":"2026-07-22T10:05:30.547533Z","last_seen":"2026-07-23T03:06:57.117639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/bachelorette-party.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:33.420Z","timestamp":1784775993420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/bachelorette-party.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/bachelorette-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:33 GMT\r\netag: \"dh3ei7imdyu7pr6\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TusRaxQj1Pw2GVtO%2BbJpCXfYt377Exlxxe5Rb63g8rfGgRRmxE75xyIWvdKd1HINdx6m06NeqBn6SVUUU5xe%2FOEJTfY7tHJEZzldvrZeT02udwxZGylnm76epIjLlrW2wwf1LXiLqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77846d97756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33378,"size_decoded":34406,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"40f70822569e54e9c0c01c3810f800da","sha1":"a192dcfcf5073c914804139dc9e620c1af5d59f5","sha256":"6c89f3fd342d7a77bec6d1ba66bd06a5dfba7683e2490a045f9e38089862c017","sha512":"e74d2ca572f59e44e919dc1f15de2dd0997c5dd579d902ecdb1f50735afef0964817173260f4ad45d6b30de23d7dd6f2a06bf91d0cdf29d1fd93a10f3c09991f","ssdeep":"768:EIOdrohAZ01g1gnEvMw76LSQ9auhSYTwxwCPBBQU:EIRAZ01zRw22YpZTSF","tlshash":"89e2f14b626dfd23f69ee782d280c555e218e4982037c992b972730143f0942dbbcd73","first_seen":"2026-03-03T13:50:30.826388Z","last_seen":"2026-07-23T03:06:57.119452Z","times_seen":5,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T03:06:09.992Z","timestamp":1784775969992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nage: 247\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: en685074be92ca5a1db4b39ffe8da6fc21\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gK5N%2Bc%2F%2BuRwi0FmX1rMjIAZctYFv3ng3XXOFNkIaCZM8V0j8Jmd83%2Bcb6rKqDleQ9%2FnMbQn5rsEQ%2FDMG2BkRz5%2F0YiwVyoL808TWpseO7CaYBoLmrL9vwTQ1fzP6GaD2kxQSQrhTzQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b4af1a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145647,"size_decoded":34777,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3134)","md5":"fdf037c88ae4506cf3a1f7633da0be36","sha1":"09d33fd28f5bff40e4c215dbf598d08915f9cbbd","sha256":"4ec46c072bf25a0560e7a8bb918b82deff4d6602039992d616c77ccbd8bc4c4a","sha512":"47a19a2aaffc4ca824995765c5b6eaf551839999a0932ed12c5f84d4490879158d25b6426f1f947a9776680dad845a80386af803cdf71a9d5fc5c0fd417219d1","ssdeep":"1536:p/UQrYkvjW0eYrwOeJQo0qUTcYz4b7IHO/h4hX+nmiqOsHQUQr4:LvjKhdQ7qsjO+Wh41QhqP","tlshash":"cbe3f7aa20f162bb814387c63f115f263f95e727c24a1a04f2ed8bd61f86d24ec5b54d","first_seen":"2026-07-23T03:06:57.123546Z","last_seen":"2026-07-23T03:06:57.123546Z","times_seen":1,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":6,"connect":22,"send":0,"wait":340,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/saint-la-z-boy.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.649Z","timestamp":1784775970649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/saint-la-z-boy.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/saint-la-z-boy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7h8dk3242d\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78BtuekFT%2F87bol749Sv6oJomJHqpkxr5iLeyVcrp0qHgcocLxfRSKQ8fmYbw3%2BD7zXtT%2FKN4RBOUotNLHSqla0UP6n9kv9%2B1ymSrDBFUtcQ1T8UufOkVKh77jI72RHXGpRBlh2Kfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5269,"size_decoded":6299,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"0c23aeb9f4b4c315f289db6091e3445c","sha1":"ca7f57353ecfe6f01e86f30301f3ce7477177bc3","sha256":"bb44cc5a0ef519c98847e3c13c92959c4f051a3d8ae02bab8ae660ecacaf97a4","sha512":"5db1399c41f5d5510e2253ae94ef6dfe655aa52bc3b0421c09f6c3235617ea0587a8138c41d21458a01cd9a23300a0107c8362fda7f461c4891859e1a8bc97bd","ssdeep":"96:FzAANh3AFC+6V5jYOw6BkzsreZYwZa5qrsbLFRjWgWOUU4pU/NA8Z:F0+P+AjYOX+SeZYsa5qKpRag6UkCNLZ","tlshash":"7fb16a0d4f2b6c4aea2c09370a7b4f80d320fb148bd0879758d54ab87bbea052cc6258","first_seen":"2026-06-08T00:51:55.657375Z","last_seen":"2026-07-23T03:06:57.126762Z","times_seen":3,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-1.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.657Z","timestamp":1784775970657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiana2mpj17d-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NeANQ%2FYsPdpOiarIPF7IuNU3A%2Bon41K54btUb8t670td0dDVzm4f6CRvYZEGDqtz7LlRJLTSpKZ3bMlM9Ir3nINfim04nYThFrAau%2B5%2F%2BgtIKCt97ITWhl%2B4Yz%2F3YR72FDP%2B9UN0fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b89f4f56b9-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1665,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-23T03:06:57.130149Z","times_seen":73,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/18plus.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.684Z","timestamp":1784775970684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/18plus.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/18plus.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiamy5ymi1ar-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBGZE9o8eJ3wSSRSjKwS3NSxbLSA9i7lDoIE7DZmRWdsgoFIi86IsCxDLOxrm7gm7e7vCPkdisFxPnPS08Va5WTgEH3dHj15XNI6%2BSA89XoNq640VfVGY%2Fex65HWIplfq3PlYex%2BeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf6756b9-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":1706,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b42465519420fe87bade4adff902f4de","sha1":"064e45920531b0b5ae8902f43ab5a6fd82053de1","sha256":"346dccf80cec2eac96a6102fa7a1043465537c0bd8a044c10bf5974ca3392739","sha512":"46131fd6a08de31eafdd955bf3b696e98766c31bed4e10c889ec1befbfe1b3552c98539a6e588299c9151c17872ec803cdf8cec5ee527ed7e97c69a1909263ae","ssdeep":"","tlshash":"d731ccf7abc872e4d64657e6a07a7518f67530fbbb5acf05818826687a0117fc0ccc44","first_seen":"2025-10-14T14:51:49.128463Z","last_seen":"2026-07-23T03:06:57.130853Z","times_seen":39,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/k-9.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.391Z","timestamp":1784775978391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/k-9.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/k-9.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7g8njtz36t\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvv5EfPnzADxhU89QWw5w3urJnxdzFcU7NzbsDeYtFtbM%2BCXuzWsTkZsixJDGSwyrebFJDARK3E3MrwwsDGJiRXMXdrzBo0lQJE0zJsfIv8dPQd9K8EHEQIbIXbYITwklaoiK%2BgXfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e8e86356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4133,"size_decoded":5148,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"644f54896ba0e6adb183d1c8f2448f57","sha1":"27189b58f42b3214e46b8aa3de4bb1dba77e02ea","sha256":"3380cc59e9156298e4dcc2951a22fff937e593b0bb7abedbc667ff27357f31a8","sha512":"9957bb593a05c06fccc9d877cbcc7b30f15afea0226406f9488f543d67084f1b97a738ede35b2c67086432f30b2acb497c03318c117e8040f800419f4eb53683","ssdeep":"96:olj2fTuizYA3vtFt+Xf48IFvpA9q4b4SxvCMXCU:m2fTuibFz+f480pr4b4S9fF","tlshash":"3a813c8767ffc546f8ed1778218c9951a621be224249072b0aa35f96a37e1c609339fc","first_seen":"2025-12-15T02:33:05.986133Z","last_seen":"2026-07-23T03:06:57.131439Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/genie-jackpots.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.407Z","timestamp":1784775985407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/genie-jackpots.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/genie-jackpots.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7m4luxjp42\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDTAkK9PvDpon6nbHLaQ%2FWISZkBC50t%2BK%2BPkJXbJZaTORMbKnlmPSV4yidUJOo7AeCDCRVC7xcf3v13XuPdX5yVWLg%2FcfIMHWWpH2Zfs6XMZjphokh%2Bzd9dECGrXQLQGeVQCycNcWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814c8ee56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32546,"size_decoded":33576,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"19c71a3d6160ed2f5f19c121c882d176","sha1":"11f30b5310f84d97c9e0716a4b85528471dcf260","sha256":"5cfa026aa5293bfff0201494c6e984882cd5149748b427803acea40a3e6bb989","sha512":"a61503b7f187fb561226783f67598384c38fe7638407c6394ac45b417e23f28fb23c014b9f57235e113b4e9c438db8d7c3dd9cf57d495e8dc86681bce5e93851","ssdeep":"384:Bf1l/Omrz7RhyPFQhpbNBr/EfJT1ZF6NpC/J6Spft5SgyhnstFbQyW3gzjioy0nW:LD7Oc4fJxZuu3pFZBFbQ1Lc0Cn4CNaT","tlshash":"29e2e191b1f98297f1ef47a3690b12422a0bb7601b75fe82950af2d427547390dd27fc","first_seen":"2025-11-17T14:10:19.091887Z","last_seen":"2026-07-23T03:06:57.13261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/runtime.js","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.600Z","timestamp":1784775970600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ekvgl2a8z1jl-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:50:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTrPGHcKn93Cm8ZjaJ60w3eYqQ93f8SgHHbgp%2FFzT4qBm%2BneY1BPwybkRb%2B5IhVHmoyLk%2FqBSVL4CC6iY2KRbheAymVWcD0orLTcihuwRC0LFvKVvyJ%2BewlbYL3bAUT1tNqFmMX%2FOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f777b83f2356b9-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":2078,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-23T03:06:57.133867Z","times_seen":128,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/app.js","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.602Z","timestamp":1784775970602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ekvgiojtwzqo-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:50:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CcJH%2B1rJ%2BtryqfCtKaSD%2FYjza9286%2FdJyzO%2BXg8jFxVdbdFCTN4pnSTS2GgOyWp%2BpE2XyI4bOTFRAl%2F1X9lNRX9cVj7LKxawOsRqRJCB6klwTHKaPioZ2HjAnYe8Kbhbn5hukhQtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f777b83f2456b9-OSL\r\ncontent-length: 7744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46320,"size_decoded":8804,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46259)","md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-23T03:06:57.134415Z","times_seen":21,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/2.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.677Z","timestamp":1784775970677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian7owai17d-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbtEbvSVnzsimbfhzvTgEF1Uta0q9%2F7rmMLVwAC8f8OjWUTmKijcasMgi11%2B7x2C7Jxbvu3XIeO%2Fh0YiXL%2FfMGRlpbCtYc2Rts9A7XyEZn8RlgVA2sFWKlxOtJt8yCHfsBNz6fMjwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf6156b9-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1646,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-23T03:06:57.134957Z","times_seen":85,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/favicon.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.489Z","timestamp":1784775971489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"depnh2ew9bswo4-br\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aPIyGR1lGyldiUWEqBrPwbYjd9h29XnBRUNtD8haWnn8qIPdhZJJOt7e2rxhl9pGv9L3yMn0X%2FFHD3Q0NmS5a4y2Kph5Z5mtTJzJe%2BA%2F2Q74jdqiHJ6lP2g5tMqsQm94PT7gaJ076g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1f777bdcf8656b9-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":1614,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-23T03:06:57.135479Z","times_seen":23,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/undying-passion.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.425Z","timestamp":1784775992425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/undying-passion.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/undying-passion.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7rcqtv0kb6\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlhZllg64Pz8TkUaAGnfJE9fLX7qotHKXhmmq%2BnGDi6qGdJhf2krPD9JK4GG4Tq3I9htAftJqVtvzXO2AK96O0pwxjWkinCab%2FREiZcqPV7FMbASQXpwZ0SERUhE3FBuiYLERDfzVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840a96956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26322,"size_decoded":27347,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1aa75bc9a043dc2d9e9bd8306a93750c","sha1":"bd66fae0fa0c37b95b79e31b51d67e566ede5512","sha256":"a774834de4803a39fd3e5da78b82032a49e16a0bf8a841ec8ef9824ffda9ce91","sha512":"576476e0265e121ed113f992f340cec69351bf8d297103aa95ba602d7c36f318f8efc85b325849079f41df85f3a3bae46b1a6b656dbedaae6e9fc4491c7322be","ssdeep":"768:dQ/8rQWv+jz3dMnz8rZtahwuTsFcdeJ4r+7:dQ/EvYLSz83oXocdSx7","tlshash":"b1c2f102dbea8863f03e9e69c66c52e0c7b8cc78251dc7f56783266ca707d3899d4d91","first_seen":"2026-07-17T09:16:39.558083Z","last_seen":"2026-07-23T03:06:57.135996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/jungle-adventure.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.616Z","timestamp":1784775970616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/jungle-adventure.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/jungle-adventure.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7ndusunofi\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ajAfAWXAKzX4qH5ualgLm3akT9B3GM8LjAc9XO2XWe1sLWrgoFc00WcHtwVXr3X7asD1xEv95NlgsJu9OaBMoAiKAgled%2BdM%2BdYGuzhqKIdWkfoQNqjilMPn1Bnk%2FWxV4aWqOtkcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b85f2a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31662,"size_decoded":32690,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"82f5539a6a78b583f74b3bf30f809ea3","sha1":"7b586020cf25b083329f28e38ab71a10b5359680","sha256":"4f1c457eeda7eff93a436f00f1a76d1b42f6912ae29f7ba48527dee390b2ed24","sha512":"b2a12bf8a0d81a5296b0748b7ea8bd5156fbb86f585564427221eede93c59d0b234669743fb0b407f3ecdf4e581bddb668e777ac6f243ba0e254a3dae7df8dad","ssdeep":"768:ikCNAGhrcvMU6XFoMxaBJF6OCTnPcRNfjE8k3jFvAXk:ikCS6WMUIFoMiaOCTnMfjRk3jFvAXk","tlshash":"37e2f12d8a3bc6f1b95d80bce9ca71264b94dd4572c8c8717ce56c781fe1073e805ab2","first_seen":"2026-06-01T02:18:17.563284Z","last_seen":"2026-07-23T03:06:57.137269Z","times_seen":4,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/black-hawk.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.638Z","timestamp":1784775970638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/black-hawk.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/black-hawk.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7ivwwi8igz\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWx0RIv07qJd6XSkUyimpK2iCBuNts5VuvzHGKqzJGfYzFXgZITMvGqnchxVrY8moEQeh7ct%2FSzHNPWLFExwOcLIkJUI4Ao8Dsw3ERVjfhy6iHkX7FYZiiA%2Bh2m91sHpkAuoNg4ciA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b87f3d56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23939,"size_decoded":24959,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"21e438ea144b12027f38c675a5000138","sha1":"af1142cf3e1167f24cb76401353b9294dd1c08fc","sha256":"d107d94b4e0a3f3ec1d61a8fbe0e127154badc8853f88e894d23af043aad43be","sha512":"9334d6969c39e4d33e746a82247594a64a6dd512722cf06845a8c4d890e4c8f268d16d8100e5f15bbb0c08e9e815567dc73dc92d4e112174e9089b1f76a9a3b8","ssdeep":"384:acTVk5Xuo2JDVaZDcq7wU1tb35h7xAuAu4sWxEHJgXwfUELY2:aUVk5+oiZ8Dcqb1tbrlAHsliMUE1","tlshash":"11b2e17eed00875ae30ccca14539206ed7f49c4557a716967c447125ef2edeb8d447a0","first_seen":"2026-05-18T23:51:30.712585Z","last_seen":"2026-07-23T03:06:57.138488Z","times_seen":3,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/live.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.654Z","timestamp":1784775970654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/live.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQVHEuea0tI5qOLKOyEjVaAxP7dULq744qufkzYTKytCFojCA%2FrqxcsnAE4HvWZRSb6vANE%2FWGkIFThWoxeS4yRdFYLt%2BiAd8VSS90POl0raBbmid5rBVbBu1yWXT9jhrxPc0cAXpA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3eiant4i1l6j\"\r\ncf-ray: a1f777b88f4c56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":1143,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4b1d6bd9eb199da2a8da2fd336258a","sha1":"3409a3abcfeeed1629f32e912dd2999905e0f6ca","sha256":"c93aa5ef0a425835222b705e5d77271351b56c48a55d8812244f78acc4a2b10a","sha512":"da202b7ec7b4bda755bdcd3edadae88d74f79c4164fc98b8a3e6ddb451b185ad7da9454d45a9ae3733edf48548418d413084795ba07fecb68fbb2816bcb157dd","ssdeep":"","tlshash":"cad0a764c24cd82de610c4a8e63b75a013db51c6038d3315b4801b2ae1185df34bf1ec","first_seen":"2025-10-14T14:51:49.240721Z","last_seen":"2026-07-23T03:06:57.139035Z","times_seen":34,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-9.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.666Z","timestamp":1784775970666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianod17k16g-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1jeXA%2B4niBVPTINkNQ%2FOsriYVfk1iOPiOnyGqKh62e7wECA3xiyl93XG7S0cTg5rUTomzFcQkR%2BmXalvynWxTH0JCYhk6v8vp3NOFLK49hKkc8yjpjhH0xfSzieY6E8mbtTVB%2BDSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5756b9-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":1572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-23T03:06:57.144105Z","times_seen":73,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/wild-heist.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:15.742Z","timestamp":1784775975742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/wild-heist.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/wild-heist.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:16 GMT\r\netag: \"dh3ei7rm9rj1kwm\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tG8ASSjXwI%2FGtwzp6EzgaseXFd2h8gwfBdAkOsbZ%2BfeT0gHjxxiGxVaiO%2BY1CZYKWhGorkOA3ZVnBRLRJxkSwH%2BNCW%2FrleLat4iT4%2Bvh2O3UvNYorF35okn5JIyaGhkYCPiKCZHBJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777d8583456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27094,"size_decoded":28122,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d866199f05ac8278b47012b80dc97423","sha1":"55c44442672cc9cbb11ca7a49b39ff9e7e4eb649","sha256":"9c7da1a8089cc836ac0dab0b1241f5b0f49652633f074247d368f6f8d7495603","sha512":"56bd7d86b64445b552bed54f8a2685f7635dd3d12dacfc2e1386028c9ee0ed1272a80af64ccf6a1fe5e54df24a315f8f15ac80678642eca065863380cfb24f82","ssdeep":"768:HTBsRj8pR7deTBUdcfmDq2uutNJVUeRujglHkDm:zW9e5MUUmmnuj0eRujWka","tlshash":"abc2e0e11b42e6e2d30d0bf199c405898225424afd3727663d683385af7e2b4baf4a58","first_seen":"2026-07-23T03:06:57.144581Z","last_seen":"2026-07-23T03:06:57.144581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.086Z","timestamp":1784775992086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LeAAQlGBMiQvQbHByZGoYyWMWLXogxt%2FaY3q9LPCyq9GqU0HRJQq3WfP9AweFDV1RNgYv2Ap4GjBkKMS1%2FtBadFXPdiyAIfPo9pN2Rd5tDWHVll65NKDIC9eIfQrdhW4yXe7W1S%2F%2BA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f7783e895c56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":1049,"mime_type":"application/json","magic":"JSON text data","md5":"3160ed18c4655a4632fbd8d6e2ba4f81","sha1":"1716bc92e817c83c2fcaee9decb909aac9008f3e","sha256":"6d74907c090cd921c816896be019dbb9d0d96f73204c89adf0151a4f1ad26382","sha512":"bce4d4a14a5e641753b279df000868b97eb78ba2a172c940d13547accb76620044c56e9b3102607657cc1272d5a09509faa8acf3bbdf3c149a4fe9afc4b93483","ssdeep":"","tlshash":"a0b012c9804c24d661bb8c04289732d4b3a24d034db2099013c0484484105ed0012c51","first_seen":"2026-07-23T03:06:57.145495Z","last_seen":"2026-07-23T03:06:57.145495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/dragons-throne.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.430Z","timestamp":1784775999430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/dragons-throne.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/dragons-throne.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7l2i49f10pc\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jT3PsPQdIn25UBeDUeJq6ME8l6kiPjVQ49JkL3H3MrSd%2F3XSPvxu72gi1PUZB7ccik%2Bxu9tpomHBszrt2mFPXXwqFEQJN1DvraLQM9FfatIYy%2BmakKbp9coNv%2BZnqwRtg0u12YIP7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c69e756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47568,"size_decoded":48597,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c66187cf5c6e2af7e82b34811db330f3","sha1":"6d1b83b8e31e05e6c675d7abec25319df8668454","sha256":"861da9c6e239e0ea0ba4b60ceca1f24030b2a78814cf12943bb5adbc194fe0ef","sha512":"8b024d2f7bf42e8f18b553bef2c9904177c928ffbfea62341889c579775fcb84cbf30b739fd74dc52cb2030cc937f79a818fc954f85a438062ae7a581e82fb55","ssdeep":"768:8x9L5qXq8Wc/0sBoARdHMkdgQoI+5Vega8Jdli0hQ1zBuk7RtNjs:88q8bB5Don/egfrlisWlvRtNjs","tlshash":"f523f198afa668e8c5be1e5e3ac17723259fe518b5710395f0411005983b23bfa369e3","first_seen":"2026-04-29T22:47:38.040762Z","last_seen":"2026-07-23T03:06:57.147413Z","times_seen":5,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-4.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.659Z","timestamp":1784775970659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianjlkdj19b-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cspdV1mL8GwctvYu3R%2FNlFZmleFLJxpAQi01X5Si4i9zIwGRnVcYr5Bde8ytyIRqF93h%2FsK12mk%2FE0EGdSy37WBqlhvO2SfB1VbRfey6%2FjsFee5x7rU0tkYxlQY5qAEnXyLOkWFMNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b89f5256b9-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1631,"size_decoded":1798,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-23T03:06:57.148079Z","times_seen":73,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/5.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.682Z","timestamp":1784775970682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/5.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/5.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian7owai164-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLdXJB9AxkK2phlZ4Dl5%2BFOjDgiOciALnLeDjnyAZ1oYh1UlFMt4gyx7xAFhY4JSEqFhLPjN6Hsli6yf3x2iaDd3uvFkt7lKKSVZpv0YetJ50voKLupxtX3udVJugKOueRliWw6l2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf6556b9-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1516,"size_decoded":1795,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-23T03:06:57.148565Z","times_seen":66,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/dragon-scrolls.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.417Z","timestamp":1784775978417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/dragon-scrolls.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/dragon-scrolls.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7l04dufsed\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3%2BefjEu67rnB0P5ReXG0EXaihw6P16Mg4PLC2Q%2FDaVlcPxAiqOvtDZUnaa4xrskqVp6IMMqLNUBRx45iIuvN5li%2Ft8Fd789eun6qiaTJTR49xhTwPbGrRWP3Bv5O%2BSVGiCWL0PaQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9186756b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36805,"size_decoded":37833,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cbeac328469bf4b9bf1068922cf54aef","sha1":"06ef8a5b9624eae9797ed42386aaee7cdd230cc9","sha256":"9f788b23400b712f0148ad0c71dd1731a9ea33e62e567d650cfa0016e6a05ea1","sha512":"390080fd97be4577367a4c3727b7cb4577ad89ac9306a8ec9364a29bebfa6a6f822c5d7a616eb349250b71f52389abd42c91bcee70f78a7b0844403c10550ec9","ssdeep":"768:FaaixXUpa6hRrnLCn2OqydfkHTSMjmphuUGXjfI1gtNz3HPFsM7t4:FaaixYedMHuxpQ1XjGKfLW","tlshash":"d6f2e121ab0391beb27d1b90fd51d72fd52979a5cd3a69223fb09874038dc13c57b6a0","first_seen":"2026-05-13T21:36:16.044968Z","last_seen":"2026-07-23T03:06:57.149141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/thunderstruck.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.408Z","timestamp":1784775992408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/thunderstruck.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/thunderstruck.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7r5lmlzpbt\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2sg1Pe4GLMqc0lIsxLlNlmnmIpr4UmTTn1SAf1Envf8fbjvus1QqIWGm4FE%2BZHt7%2BkAE1wQ3B3N4cU63oXwW322XTjnfE5%2FnTfrwXTVkAzrEIK81HMB9N%2FcdG5HlGMMQGKgI3T8Phw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840896156b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32825,"size_decoded":33852,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ed6b5407fcdd3a508848e3e3483f14b5","sha1":"26ff609e0fffb523ea086b9c698dce03fdcf4de8","sha256":"f282b2244c7ec0a5dad5deae2f94447734ca2d6fa00753ba030cc29d94fcdae5","sha512":"a1f50d6b8b5739e6542e69c63c4633bbbd0796ad2940a49f0c9978f47795ee2228058a2a6f8f245d3047342201f485c95ff9dc63f352d2df57038ae08c1d86f7","ssdeep":"768:EMLNL59TBsX8GUcxgwOYAtc2wMfuvvmVglGxUBeYLsDRBAXvdS:p99TSK/YA4MWGZxAeYLgt","tlshash":"85e2f18217d50cd113780f9117f74b71b7b19ce8b35170ee65ef03aae6a5216ec2d292","first_seen":"2026-07-23T03:06:57.151975Z","last_seen":"2026-07-23T03:06:57.151975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/classic-platinum-pyramid.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.418Z","timestamp":1784775992418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/classic-platinum-pyramid.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/classic-platinum-pyramid.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7jy0n6bhy4\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBp%2Bl8jHsOK53BptSnSZhZROWA9Jyb%2FNK%2BFpz7qyGlhJseFrviuvRgSf8Qyg%2FCisL%2BogikJ2yxsK0RglkxTr6jcuixTO35OIKoAICpatZIybRu32xO1ERXAoeYyPFqYz9ZhExL3Rjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840996456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23260,"size_decoded":24300,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"66f2a574fa893824788c6e56506835ae","sha1":"533bb0a8945b7f1294ab90853d66e877c6d8576c","sha256":"b3a38bb5070af5032ecced3191132c70f850dce64e457cf127a3395395fccd2b","sha512":"d0d8b5b5f5b3245936d59ed581347f464847712e40500c6c41890d425c807df57ef949730748b8215c44ddb868f4b339cff9eec72335ab5a82e5a373d4406f73","ssdeep":"384:8ezz1me4AkVxYCy/wPYP0qp2GB85rUGztzut8RjkJUJCAudYFDcKd1UJJ:8ezz1mHdkFEG2Qktqt8tjJadwcCiJJ","tlshash":"4ea2d0ffb370b406f75e772241e413f066a1a6a00b22ae77731ebe05b756475d068ca8","first_seen":"2026-07-23T03:06:57.153917Z","last_seen":"2026-07-23T03:06:57.153917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/oink-country-love.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.424Z","timestamp":1784775992424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/oink-country-love.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/oink-country-love.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7p1e59sm88\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfDCK0vk7YRDDbZ5s2Nnw%2Br%2FFGkvRUa1DGXEUltCgRFlFJV7CO6AJ1VSpwK2cRGW6YRAME2yINBcDDZdCMoYa6%2F5bcwt4Hdn6Vxry2VCHnxWIA1MlaxXu7NRzCfM7k8QpDg3GRq%2BUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840996856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28808,"size_decoded":29839,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6d26d4e38c0f1af153ea7a49928fa85e","sha1":"04f6869da26708ceef28e6f9aa7b39a984fe3792","sha256":"c800cc21a403a8d9074a9af2bf60c09de7dd5347f6f791d87acd425dd28e5fb2","sha512":"b307baf693e35825a012989a30da5f5fc7a51aa08ec9158f7ffb8bf334aa003d7907ef3bc4f478a4281effa29207f139a7895680194c62afcbe8b91c8125b949","ssdeep":"384:o7vIIjwf8mdENlx6AdDO7dC1iaNJERykXv6LyX5OhgRHMicra0ngT69TGw/GKHra:oz9eOx61I9iXyLyshgpMta0nT9uqE","tlshash":"36d2e171a39ce4a4b90a0a7d0c1ab36084691fb17712df4def134a731ff934676611e9","first_seen":"2026-07-16T11:27:37.590583Z","last_seen":"2026-07-23T03:06:57.15504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/lucky-firecracker.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.427Z","timestamp":1784775992427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/lucky-firecracker.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/lucky-firecracker.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7o1o50pmpm\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyRTpsLiv43rgj9ii838%2BEYWjATmUaXKhuaw4oTxFPc38RA1yhnlQC3x1gPprCURI9mfOKCP0O%2BwIqE2cXdjQP1lDe%2BJw2qfIxegiS3ELvgglPzRrRIgfZJV12EQYMdNuZ74SmLPng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840a96b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29434,"size_decoded":30463,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"04877143ae13c99c683b382622c41947","sha1":"d32b8b7f3adb87972a67e72f9506b8f61d054025","sha256":"1a080bcd7e86122a95e026462e93010ade6cf8a344ac9af0af3db63c5a0b796d","sha512":"b3be16bd591eeb8abd87848383e77a0dd867dd06e596e18ea4483b0100dec6f7778a4bd21697a2a0a4d91153c36d6214912210004eb4fa337092c8c6a14495c2","ssdeep":"768:9zqrI4IxHBCrph88z/xdWDcyW1LyRjQdj:lbxWuWQRjQdj","tlshash":"acd202f1d216ba6b12f41130cbbcc2642302ef664ecd786d0c7551b4d7be468a9b2653","first_seen":"2025-12-16T07:17:55.577466Z","last_seen":"2026-07-23T03:06:57.157025Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:35.090Z","timestamp":1784775995090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:35 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydPe9uNO6q2KSsMXRH1YsGxXWIf%2FygrPqUzGdb1l33fUCF3XQRvkaAqlSVJNsPm%2FneX31n77B1tEPNd5yU8%2BB3QaEQCCwVUfpJw3IwP0QAIStn5NsbaHXrzRQaK2BXnhdXfGsg2mCw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f77851498f56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":96,"size_decoded":1047,"mime_type":"application/json","magic":"JSON text data","md5":"b5571f963a62affc2eaef9835941ac08","sha1":"ae01b0c453d65d2251c8a1d524bcba34d090ef17","sha256":"d8978d49132476c47030d31e39ec2e93b355f25bb38ba8d63739d83db1ae35ab","sha512":"dcd18065e1f0cbb47be09d8b476edc5ed1682f94cc7f47048551c43b421ea01dea008f6c32f63c4d77c620ae516195635d4a124b71385b1fc0ef88f4ece6c455","ssdeep":"","tlshash":"98b012efe1e00425a1335201887734c090200f2361d1f4445f48bd8666a40034002c88","first_seen":"2026-07-23T03:06:57.158888Z","last_seen":"2026-07-23T03:06:57.158888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/tusk.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.650Z","timestamp":1784775970650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/tusk.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/tusk.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7hka8645o4\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VowZO5WBDnkFudUyjA43fxrJ%2FfQiwjT0Cm5l4L7pTFKD1B7ojppR1jRET0LjsZjfb542SJWH6gRz4XiQaW2ZQysa%2FNfO6EP3evZFJMtNjgLmxGHC77%2FFkFw3K%2BEMa4OFUvqGus%2Biqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7348,"size_decoded":8370,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"12aebfc286a76b97c693fddc74063bf1","sha1":"4e540cb08fcb350ff231c151041a2b6f11bf9927","sha256":"71094175de15038bf9a905ca00e4feb5d5e18af9af24f4f7d3e2530797d9ee24","sha512":"818e31c0adf3ff6155166efe7485d8c7c3bd7f10415347606f611a2e5e70c4d9d5afa191632461f23a0b7a958392351ee765d2a5aee280fc189fc26aac8af1a8","ssdeep":"96:6HZGiAWI29eFKPfNcSwjHP6uRmnmmB/E9iaRL3Ynzimf2oJcrINknqTsrnuHOECb:kZGXUNTMrCgJRL3Y2meVrKYrn0OxT","tlshash":"bae1bf215273cd11dd3f917f79ff9572f1885686367e3a9adcf768042ba18b0c8a1041","first_seen":"2025-12-20T02:09:47.808418Z","last_seen":"2026-07-23T03:06:57.162952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-2.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.657Z","timestamp":1784775970657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianeu3jj164-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hse5Lm3YVgH2UJZ10HQ8JCEEeM5DaV80vtL5hyQFGT%2FcJucwNJOmU1Bg%2FCRneGkTaCP9dIcrAC3YXoRhbU7ggjJBDFegmJebMIuJjqh7w2mJJv85UFufaO%2B1XQK5IhiJNbPUI2DHVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b89f5056b9-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1811,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-23T03:06:57.173272Z","times_seen":73,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/gods-of-olympus.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.402Z","timestamp":1784775985402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/gods-of-olympus.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/gods-of-olympus.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7m9dbrjo87\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2Bll5z5wkgp1lhil1ZH1N5uzYeF%2BQMX7MHgkQ%2FRSUTlaRp516DFwRC5D2jIfbe%2FVgP6wI1SF0a1%2BlNr45VRCHOc5OMSQBNcj5djK%2F55T0ot7J0dWilFa4j3y2Is1Sf7aXHMLk%2FbeOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814b8ec56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31399,"size_decoded":32434,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"32bfbea6e92d2e5bb80e81d40d25dbbd","sha1":"e4c2cce6d6bf9e44288a7890d01144c1e3b57c51","sha256":"f931799d7580ad068eb42194e8ff90a3bba21d4813296f99ac31ee4069f7135a","sha512":"4b280cff75b6702a7aacb4223b0bc811fd0241098f81f0a1b8ca0c5a834d1e0664e92ec7950a0d967f293d410af2970239fc9bbee787c17745301a6ed5a25933","ssdeep":"768:It6Jmhe3UjJLX9vuTqisNppIgGTrFBwfksGiXdITbQaLII1g:IgE9jJr9vDnp7GTh+cnMITbQt","tlshash":"14e2e1902ba06601cd0cc4f9f9cd10785ea8496857252d688ae9d4ecf7fc9dedddc0e2","first_seen":"2026-07-08T10:52:34.911255Z","last_seen":"2026-07-23T03:06:57.174327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/tetris.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.414Z","timestamp":1784775985414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/tetris.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/tetris.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7qygfcznq8\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2B3IbiqoZI%2Ff6Aj%2F9%2F%2FSBBhbN0PSGIgIVLdTAS%2BsjO2b%2BI1zUi1I9o2Uv5yWozSxeIVEGWP6SIOHSgvz3BwayHUlewiwarZVeG%2B1b1HydvvXN7%2Bk0aoA%2F2QtTSfmSwxk%2FuGX%2FqwMrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814d8f456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30752,"size_decoded":31788,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d561afc4cfdb47490bcd237142b46148","sha1":"bb7f38b5d4ebc6f7921904d03d573488a523541a","sha256":"5366d1cec8e4135b1ed32616a2bab183fe1c588598b807c8d138bd5147767a7b","sha512":"5d9f6e8435c116f84f67b4a7361d8a6f0c613ab07fa11b0856d48e2831123075b2bf31251d65d5a0fdf5e968b0a6e627f6b4199224b11a9f73975a04b1424bb1","ssdeep":"768:f9qCjpXgFpr4XyT32E0gzPaCz+DNGSJnye2G/:f9qCtgPY9OCPDNGgy4/","tlshash":"c3d2f1629c5e8c53da2d9d6ac437cd02838bcecdada184f35b1e4082e748452d375bf5","first_seen":"2025-10-31T17:41:30.795495Z","last_seen":"2026-07-23T03:06:57.17573Z","times_seen":4,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/siddhartha.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.652Z","timestamp":1784775970652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/siddhartha.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/siddhartha.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7harai25od\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpizYR0E1cYngKQ%2FK%2F7OPnfy1uj5n7InPnY5qZ1DlxipRpappQmzt7M4hPqzZ3FMOt%2F7ZDl%2F1g3369zHYgHjluxZfGbvdVUg%2F2JMt1YT34k%2BAEJx4A%2FPtYcRSe64qrY38Wb%2FjDdmmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7357,"size_decoded":8393,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"945c21b075933d1bc397c929782f1a73","sha1":"990ed683f4d4cb03472f0b468e42e9c612affc22","sha256":"10a76981aa439a3da0bfb5348912b40724ea96fb8d14e087c799c3f7928e6391","sha512":"b43b723e34ca11b4da26515cc5a0f22590fdcebec79f320d0db9ea7027bdd82e3f8abce54cc94088024754bc761dcd7c4446e40a5428ad5a6d6bf41637b0e335","ssdeep":"192:uli79Bv1SmhvDo0U6Kua2RnyV500tFXDbVForlj:uli7NfxNU6NC0IbQF","tlshash":"4fe19e84df01c866fade2e73a04153e47620ac0de5542fdb78e2386d9fd13beca91495","first_seen":"2026-05-27T18:32:05.412729Z","last_seen":"2026-07-23T03:06:57.183966Z","times_seen":6,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:14.086Z","timestamp":1784775974086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:14 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:14 GMT\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Sun, 23 Aug 2026 03:06:14 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ti32vVQf2BIGfzq4cbe8neZ3OA4zG2QGFJuAr3DXF786VH0UaqRIDqbhw27bS2wE28r3%2Ft3LrsZwLkw3SmzMKRg3DUUgatB1b4xWYmOiwhZZYk96smBGa6dLfT%2F58iVwkVeymCGqYw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f777ce0ffa56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":1143,"mime_type":"application/json","magic":"JSON text data","md5":"58aad2a21ceb22302cdcb3862562e197","sha1":"27575764eff4bd1a7dc08fd4db82b0ea1393182e","sha256":"84d49e20cf10460ea28383d841f4cc970423f6497adb4580622ee7f784abb4ac","sha512":"655c404c9507f4a50ea6083d1d937bfc37a570a6bbaca6aeee95f4d7b896292afad670988b8a8ccab351c43d2a373b7d92a318f2720f0a22290883e5686d4275","ssdeep":"","tlshash":"33a022ca8000880b03f32b032e3f30f820380e0320bacb00f380ccc808280032203cb0","first_seen":"2026-07-23T03:06:57.186062Z","last_seen":"2026-07-23T03:06:57.186062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/happy-holidays.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.423Z","timestamp":1784775985423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/happy-holidays.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/happy-holidays.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7mnnq9llrj\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f35q7JaqUfZKsXJ6sTiIShVz3%2BEYMf6Rin%2BfD2tRMT75fzw9eGTPLI3%2Bpbnh8wxWcLQZIo5%2BlEDpo7K%2BdrDp0PT0njenFgI99%2FnD2CW7NBgMT1%2BREGQVJLwcqSrN%2BmfJroKsdNkUMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814d8f956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28207,"size_decoded":29243,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"fba5e94bc9c7c0e3bdaafc53022a9c4d","sha1":"9f95f7b95937f4cb675034647b10c61dc92bcbb4","sha256":"562574b8985503f99de6462c006e80c9d7e0eb6974be0afaaf3ddae9ef111d47","sha512":"beb41d537dc6ef76e3c8c45507a6aebf8af312045931d29b14279a3eb668bf2d094cb0c63b1e805d0181f4ab0e4c39e5eb7b33cbb2ff10a8d8130d3d6ea641a0","ssdeep":"768:u38Bk6LFlNdueJZ/+7wa0aJfbwIWcBoKhU1M4s/43w:u38Bk6plnF+7wahtsIZfUGA3w","tlshash":"10c2e12895d4165ac7ed197677adf721ee31734208ab87c07b814b180b6b4fcee5222a","first_seen":"2026-04-10T09:56:45.87778Z","last_seen":"2026-07-23T03:06:57.189424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/chitty-bang.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:30.406Z","timestamp":1784775990406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/chitty-bang.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/chitty-bang.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:30 GMT\r\netag: \"dh3ei7jvmwrbl76\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yn876Sa7YRQFpJShAY3SUktStNQ%2BS2Ow%2FTyUELL%2F5a2dx7T8B6bMJnyC%2BEQzbGFCZDdDMLsVCEAhtAgUA39Ndo16pUniG8fkHbdStGwjxnPtHQOmprGWAeyej2RbpsglUUmWHY7foQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77834094656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27474,"size_decoded":28499,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1d987bd81208cff86e95f8205ef1d3dc","sha1":"729730ae7b8d8022dc62f349839d9f3d9ac9d355","sha256":"2d3e2c0cef9edd38da6949b65143fa613cea16fd1702b786c43b4b11876ef828","sha512":"37ce035606570ec8c4a9d3673acee1c019c53fa635616e347a7e994fb17c604806aa3bb604761c7ab46fbfebe5a70cd36f9a0f5abd2b20d9e637d95a8e3cece2","ssdeep":"768:LHlMHSLOnfkVbredmS/sVcd7iuoFcgC1+yuxNzpg05Mu:7lqpsZYyVg7iuIC1+XxNp1Z","tlshash":"04c2e0e64ba94d81a9cc3a7c98d9e190131e80546e608b817dc45a3c7b2f376d936ba2","first_seen":"2026-07-23T03:06:57.191065Z","last_seen":"2026-07-23T03:06:57.191065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:38.087Z","timestamp":1784775998087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:38 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wIuEZYLYUDK1PYbq%2FIOwxQnYmSXIFLtjioPl%2B%2Fzbza6LHp8lvG4yLk5RSke7Gv0ETrWpLDwooiDpX%2Fu9Kc2Mw%2FWfmFbWddGU6HpVKvIo7iNUHmCXn0DRwTEhCuvLbnZij1OIV9%2FkQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f7786409c656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":1048,"mime_type":"application/json","magic":"JSON text data","md5":"f8456927a40ce1d8ec4991c84586abc8","sha1":"582a17d10537cc8aa33b243de0035a620e97d64f","sha256":"ffa59baa8d72138033331125877c0ceeb5be37287e084b5691b5dc07b28ab3e7","sha512":"e148bf135428db18fb4f44abec2f5deb0281d16aafdc66522e9b5e608822d069f62542e96ec4757719b0455d11ae6f3276e6b4d62449bf99617636afffc99f19","ssdeep":"","tlshash":"5eb01287c108480d2273010c180e32c360300a87c0554c4052d88cd144d00670093c74","first_seen":"2026-01-04T02:47:04.060203Z","last_seen":"2026-07-23T03:06:57.193913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/tattoo.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.647Z","timestamp":1784775970647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/tattoo.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/tattoo.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7hhwhr356z\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MfAAgeIDKt1etCUiA2bEBEa7zzOEByqsxAZNUEn3JJ5zTTxskVXSsGz9GZG5jZJNPawg7ivsg7u6dXn9jezBGEKAIvD%2BpTCoHUiwacWErwrqM0h6pgv0HpiMVt5Q0jI3Ssem2cpCYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6731,"size_decoded":7747,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"a9db0484a38d4c2382b6460f498f95fb","sha1":"7eb3397168e30e779703506c797e334efe7c8c3c","sha256":"1d78f90370cf6a53a82a1b13379144b92682d5ba6ccd218e8302b624032022a2","sha512":"95cad51b7a087671e0a9b0c70c516e12fcdf0fe6b505a429c140c0d90db283ca7261afa77fa299d6572590ffe3d0c43dd37f755a48dfb8204259d51b328d5b1e","ssdeep":"192:8lJYZORRf6nHgRuSQV/cX2LFsdI1j/ZD2xImOodX:qD0rudgZDc1t","tlshash":"d8d1af234f695a93e81eeb3a1a490a4bcb0c991a9ac82f4690f57d90877fac3444007b","first_seen":"2025-12-20T03:40:23.623978Z","last_seen":"2026-07-23T03:06:57.19929Z","times_seen":3,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/images/hero3.8abd0bc0.webp","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.044Z","timestamp":1784775971044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/images/hero3.8abd0bc0.webp HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/images/hero3.8abd0bc0.webp\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"dh3ekvgl2a8z57q\"\r\nlast-modified: Sun, 15 Mar 2026 13:50:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tr2b%2Ftu4uxRm67I1PCsGFL33hS1r6ESutmoZumjlGhjYbNCyYlVowCbo5VXOtf7%2BygQXDzHi%2F6cU0CNMZQEDH154YgwfkYUAG%2FulqceWwrkiABuqRGvgVDlZPostSM03o1A1Lvxg9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777bb0f7156b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6758,"size_decoded":5275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x760, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d28aa48798158135b67e00bdc0edf88d","sha1":"16848b8de4af6ca3390673b1b1ff65341336e97a","sha256":"17a792b9f42c5190867fa7396ac526a4ff678805a0fba43389af1a466312033f","sha512":"4ccf446b7b74bc80ebd809dfccfe4e9fc8443de9003bcc795b5db2a03fbaaa2ef08c5ddd9ed53b2624f7bededb13792df0e2a673e27ab11187cd873cc3c6539a","ssdeep":"192:Xd3sRlGEDhtPxCVGkTIiIApCFRq0Kn1/eOHK56/:N8/GENtPxCQ0IiIApCnmgOHKk","tlshash":"d3d195ecf1b18465eb2c1b56094a8af72d5dab2f003647ac7ab8d4b152ed50c1fadc1c","first_seen":"2025-12-01T07:25:15.285226Z","last_seen":"2026-07-23T03:06:57.199866Z","times_seen":16,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/2026/03/banner-jackpot-69b6b8b6d822e3.21554575.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.062Z","timestamp":1784775971062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69b6b8b6d822e3.21554575.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/2026/03/banner-jackpot-69b6b8b6d822e3.21554575.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"dh3gzzx7e9s0511t\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRKfC%2BTfE2jFOEv1wMLt6tDpOYpcVhpANDZuJFzrPhohX2RNZ8NmF2juzwIa238tXfgsH1PezgUgv0N2KGMXhiT13tnxfqhWV7zHdabXWOPMgtP%2BUaScB9T0FxDPQgpaUm8pt6w8Qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777bb1f7556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234641,"size_decoded":235717,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"f01dd042726ae004d571ffdbfc87936d","sha1":"3538d8ac1aab54caedba23283aa818e11fdeb989","sha256":"dfbce7d27f9470e03d863cbf28fbfb2e56913498bc19679741c596cc7821fcad","sha512":"419b2b793f76bf197d92667a4809a51aa9d2f8857e0df775b63e67495d45e0a1fa0538910ea62819281040295e818291109f024eb731738f22e0b9b48782cd8e","ssdeep":"3072:MVdekoVvEC3a6+6jwrXyvPVNKn+INTfZpI0N8f2N46NEB4VXUJ/Ks9NKy6tACP0c:aQxBp3VN6Za1fXR8kJ9N8P0Izfsi+pA","tlshash":"3f342337b6dc28dc15d387bcb4ad41c624ca9dcc513ea390e18662cd42fd949b66c88f","first_seen":"2026-07-23T03:06:57.205803Z","last_seen":"2026-07-23T03:06:57.205803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/blackjackpro-montecarlo-multihand.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.411Z","timestamp":1784775985411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/blackjackpro-montecarlo-multihand.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/blackjackpro-montecarlo-multihand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7j0odc8os8\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3C%2F5JLgZw7A9UIjaA9R3vQrKoOoayqSioUS2T76Rpy%2Bluf2%2F5IiwRj%2FjKb2CU2VUa9%2Bq7YWFemqAFMrkL6YlQANlVoqm9kmJxpw7NG3J8WL4eUje1IdqbcKqJrQ7yqaWRDDFDqjMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814c8f256b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32120,"size_decoded":33169,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"dddafc7ad0d52c4394ab4de129a8fea3","sha1":"445f1d94995250a149fa2af22ea8ecca4984fff8","sha256":"4b34d4f24816e22c71482342995367bbbead17ad2cce2f4f7c033e07a7c83597","sha512":"9259a022eb8cb9b0d175d452cb287f2594297782441fe0b1664a5cd6a3d45ac195716e25ef8808fe4b2c6d0fc02034effd7c8a55848048dbd6c2aef4c1ad145d","ssdeep":"384:SYmOwwV3uQq9XifTmX6vbO01nx7iiNbh5dqyvQZACgSi5owuW6ubK8LQACabCzZR:SMluWTHvtHZqnACgSi5/lGuJCao1lhxl","tlshash":"0fe2e00c6d6bdfc5fe8f0b7a9b78343e8130c44a0b3e90964da979498d316d04a6f620","first_seen":"2026-07-17T09:16:39.757678Z","last_seen":"2026-07-23T03:06:57.206987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/air-force-hd.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.416Z","timestamp":1784775985416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/air-force-hd.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/air-force-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7i5ptx57gb\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SS28hFId9615mQyG%2FSuv0kOg8y8AQxafckT2MwI%2BkTFgwyIs7Hn2m5%2FYYLi%2F7mbFLfJlO6XZSPAjgfSc99MmRjC4n3Ogz5hi8fwEZXiY%2FhV0HAN0WBFypGXAYFQs2nVS2xjxcn8WA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814d8f556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9659,"size_decoded":10687,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c434bd34ce4a7d0395413d99729b7896","sha1":"9ce5c3ea5ebb7fc179567b46f803bdb5c44a66de","sha256":"51857774e0c0539c715cc92613411ed9c06497bf84a25d4959a394aec172b9a7","sha512":"dcaec974b82286c3a69b38c8a497ac1f9dcfcb3af00cd0e42edc1bad6a1b0818d8b7a7dcf094743f059f1a9b7fc348468f7a213897a4791682750a328ddf2d5d","ssdeep":"192:E2P2H+lEIxGFKPHBO9KGYzK9iNwmRy/dhefrByFLfwvfu0pqzi2ICME:E2yZQPhEvbi2wOrejYF0pqzi2B5","tlshash":"c412af4ebb0f482ddcee7f380c5d160767275c5894e3c2e775a12fb56b4a0e8a1982d1","first_seen":"2026-06-24T10:21:13.020554Z","last_seen":"2026-07-23T03:06:57.207931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/grando.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.400Z","timestamp":1784775992400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/grando.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/grando.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7g1icky4e5\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvKXbyQSuOCKc17QdPv8Mq0kpsh1kKdiuu%2BxydwYpHnX4JGYOeR7UgGS%2BtMbRBnIRbboehI3%2FhcbEz%2FlBAlYLG2ng1EqgRu3YcTWhlLJQiBGC7zTTVb%2BUh7MUnJz%2BI9RcW9bFDm1PQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840795f56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5693,"size_decoded":6719,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"8cd31dda242f304ebcaaabf3eebff153","sha1":"ec285bcc43d255b8eb91d26745bcbc4915e7ff6b","sha256":"40294fa8c08e4e94c9b36155169090340b14a419dffb2a7c16a5bd93c6f22664","sha512":"b106cf6119480e0cba78cb55611b0c2039cf91edf82117c684c1d0e317b33d88800347357cde28725271d172e1c9b54b8690f54ef4f20bb322483c85ee164df2","ssdeep":"96:9m9W0za304ksJW1OSasrrgIXLxXn+BjAMSzkZnCmlWYElwhnG:Q9XeBJW1OpsrVFX1MSzkZC4DlhnG","tlshash":"95c19e72f74ae803d7ad4132f94102265e435308694a792f92f36d963b3f031addac90","first_seen":"2025-09-23T10:56:20.30072Z","last_seen":"2026-07-23T03:06:57.209254Z","times_seen":3,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/astro-cat.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.442Z","timestamp":1784775999442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/astro-cat.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/astro-cat.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7ihmi06mw7\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgihqBB1i8J8cP0Cka5CHnMrTzk9Ew3cvF6fmRHEzgkNHXaUqc6uOfT0d6faTaoz4ty9zhE0wwVE8DS6zYxMvFEL9vUJlms60gVTygJwfoEoCoxuTD%2FAHNvhcmZt4picwurJLx3jdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c79ed56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29671,"size_decoded":30688,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"61bf70bc1fb64396637201b48f9d56fc","sha1":"8682285c05839b1bb0ff658750e5a88ab08957d6","sha256":"2c834381038a79e8638553c5db9dce635936fb081223651493dcb0f1f5a1d48b","sha512":"a99d79eb855c571d02d279665a124e32cee7f1f0bcba1d497f4e7298218d5324e0ca15ca720fd6125e7e11a8dc3438c17273bd9690356da8114908ddf68b23d7","ssdeep":"384:rmBMhyIGxxiOD1n1EBed26w+oL9eEIH4JIg/hC6Lhg+r7m+6K0wzcCBCQKHkP40p:SMFAnJ25dL2gjy+rR6NUEQSkgU0cbY7K","tlshash":"9cd2f19877c1c163e8bc61e6e8ed4224eebede74712a17b29ac71c04ca7c6815579f10","first_seen":"2026-06-07T20:26:45.783051Z","last_seen":"2026-07-23T03:06:57.209888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.598Z","timestamp":1784775970598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 25 Jul 2026 03:06:10 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQE0vi5PNBGSb5hmbgb7of4zrGjkwoBRTDEyzrDFX3DkZmG2%2B%2BXkUIFN7e4qWlhq%2FSRxkhP6Ugfh4ZfPYLOZ2esCytojIYjqz7N6%2FGQrcaLBobcefE%2FIkvM0qwHikiLzAep9KSABrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nserver: cloudflare\r\ncf-ray: a1f777b83f2256b9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1304,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T12:19:11.547957Z","times_seen":404320,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/adventures-in-wonderland.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.627Z","timestamp":1784775970627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/adventures-in-wonderland.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/adventures-in-wonderland.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7i3c3i5spv\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqKk7X%2BLQXYBZN3maUvlrm6bUZNlAqXQBx4yXHkV4s3Pmq04a%2FzzqUnJXWmGUCKTNg2127Z5qVrVhnS1OdS7WntWtyBOGPMaZZ2DkcG0cPfdSbJvIjfJJgIGkwHEA7axPDIhZs0wmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37219,"size_decoded":38253,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"22e8c059c95b09c5e460239e904e2d5b","sha1":"e54ba757d967e3cb08c284803b465ab70b446831","sha256":"66db14348338f58fc0a7eab6943a96f13657884f41f9b513f38023b80c8c1f46","sha512":"a37b246cdfbea0a2d059a705ea31973881fd5067c936b115e8dacc876c088722af6b14e7194dc2a286595124afd7bcc5b8baa338da0bc5f95e1e83a0fda66b10","ssdeep":"768:psb/LLwm84kCkHF+d/kk9K12Dy6ciwbVkAKJvWcqwkEL1jJ:pqDLy+OsBkkYIehzbVkTrecJ","tlshash":"a8f2f1a6f76ec113f16c2af4d39a67e96e048562509bf8f049649a0c5f2536380a382b","first_seen":"2026-07-22T10:06:57.57542Z","last_seen":"2026-07-23T03:06:57.211768Z","times_seen":3,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/2026/03/banner-rectangle-69b6b8b6e919a7.53386482.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.061Z","timestamp":1784775971061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69b6b8b6e919a7.53386482.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/2026/03/banner-rectangle-69b6b8b6e919a7.53386482.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"dh3gzzx7e9s04z0i\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wi9WMNsKOajIj9gftUkoe3Gdnci4NTSyZHNEJJlztH8yapWlFIy%2B0Qzoyjb7YEVsKVHC1iGMC%2BY0v0R0EG90OMZxlmK1OVGiq0YhrpS5UdzQUNDZyHj2MyoHjuHPZROFK8a3q5V4YQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777bb1f7456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232002,"size_decoded":233080,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"e7f12b4903e7727f058515a6d990f2d5","sha1":"5816c52f7be4938da847d142c7b19930ae8a7a70","sha256":"1c1926e644b577a14f3208a44241ee78d06811c00a1edc8f9c1f6e68cd7ae7ac","sha512":"a6b246b50b2ca764cf6c9deea7bb5751e5a06db3ae221413e437b1f34fc2facce1e7ce158f67a80f7dd7e6f0da9a4fab91ec4d638bfd71404873ce0a79e6ddec","ssdeep":"3072:tXio1AkyTEjgVZqb9yXEhcM3bHx5ebuCZNdTqEbshRKGoOzQ3TA3p1rQkiI5wIS+:pbjywjuS3bHuZrThs5z2kd7K16","tlshash":"7b3423a26bf682d4415de9b3f99c31b27fee1ddc080e1855612b3305e3aa484fe0691f","first_seen":"2026-07-23T03:06:57.212324Z","last_seen":"2026-07-23T03:06:57.212324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/2026/03/baner-2-69b6b8b729d221.93657215.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.615Z","timestamp":1784775970615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69b6b8b729d221.93657215.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/2026/03/baner-2-69b6b8b729d221.93657215.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3gzzx7e9s0kcb4\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecFz60EOPy%2Fyfb5iST2bBKwDyjzy8KGT22JwRSM2GODC6xQZaD1p96Z0JnYHFf2xfdU6FVhb4XIh5pszYOJpzYFRDhjUIWExkyukxHiMchjtBPLO6Gk4warSGpDyeoWgu6ywyARE2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b85f2956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949072,"size_decoded":950199,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"e9e641ebc9c0a3c19704c7e6f4817524","sha1":"15099090e1a1032f20dd9deb427e75a5dd94a7ef","sha256":"7c41dc5bdddf853c6cf2716f007845a7680c8d9a1e2f1d0756ddc52ce0dcd017","sha512":"f3cd94d3ee2871f29afcce622a2f4cc81ed0ceb15cfc32c832345d0b34764bfdbe509fb5925a946472308026cf4614d83d31313decc9b2a0e836d577c6d4a22b","ssdeep":"12288:ekoXK53gj1SGtFzIek+ZMOQ/O8vuGRiJ0BoSPs6fBIt36F3y8HfH5shO80zsXkUY:eRj1VZMrTRYAPBIt36FCMshO8ys6Ni9e","tlshash":"6a1533128eac23e5c75c533860d70c1e3286ad0de171d4495d83f41f3a9f6633e86ab5","first_seen":"2026-07-23T03:06:57.213676Z","last_seen":"2026-07-23T03:06:57.213676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/images/text-block-3-bg.e02f2b7e.png","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.047Z","timestamp":1784775971047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/images/text-block-3-bg.e02f2b7e.png HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/images/text-block-3-bg.e02f2b7e.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"dh3ekvgng0o3awz\"\r\nlast-modified: Sun, 15 Mar 2026 13:50:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHRFMAKutpvKKlKqOvQrPFnGtMiHfnDIr4YlccTLYVZQrZoywMQXE%2F6jO30aItSnFB2dJ3tYIZoolklLDRbfx9887dDCKZS2twrjOJh3Xzj2XPrsNd4V7nFY3JxxnDq3rwF%2B9jSALA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777bb0f7256b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14147,"size_decoded":11469,"mime_type":"image/png","magic":"PNG image data, 1440 x 492, 8-bit/color RGBA, non-interlaced","md5":"6f62c24117634af99f35f88d11894678","sha1":"7be13bbe2def230f608d04c09780005f615668d9","sha256":"317ec0aa5769282689cb6903eb44f35fc1444d96a0badf4f9ecfdd60bbd85747","sha512":"9ed9ce17423524f7b248cb2e82aa80aa163940244ee293d3ecbbd38be262ab21f2fe522bbcb58b3acce7c18858363e0a52b4e17253636f71cec8b0c7f967ccb9","ssdeep":"384:xJ9ZPllqnlGsJvKPn5k7ETlp7TjL6ey4uMaDdE8/2DoG242IchkTU6AibQ3o5TX4:Tl6XQDHA/JP2L4/YAcr4","tlshash":"6f524b249b0c4ab3cd7f4ff83667a7306b350b98d42441475235dba2ddd3b98a4a27ac","first_seen":"2026-05-18T23:51:30.759583Z","last_seen":"2026-07-23T03:06:57.219381Z","times_seen":6,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/cosmopolitan.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.419Z","timestamp":1784775999419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/cosmopolitan.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/cosmopolitan.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7k2s40clss\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKpFee9fla2hRaAWNxL6SSQTWLzNK9qJe3qTtvLefoq4SaUz0xBx4kbTATr6ssqb5yQj1k8KLKI2Gn7oh5oA5mL2XKKP9vr75xh1S3xSAZgHfANelBoECi1JGzSKP6nMFalxXGsTdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c59e256b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28252,"size_decoded":29270,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"523780f4436ca9e750e445eae4c14d78","sha1":"8897e0b7c57ba4b8c683d006877444fab1f66fba","sha256":"095d92b3fa02816a86e8227a923af4927383bd7b6f1c71000a9c3f7c62ad56a0","sha512":"d9c240f679ca443028c03621cc644fdf25516ed76862d989d9f0688a9e197b1fe30d197ee1522207158069b94a17110f6c476c6e2542028b311d56914de2ebdb","ssdeep":"768:6CT1+CyZqUn3QenbEHYEwam5D1+QLfSuJI1v2L1ufnzIpK4:JTUjn1nbE4EaDo2jI1v2L1Qna","tlshash":"f2c2e01f33d5de8bc27f96b2c967d0a01ba15a41d18c4a003c1ba5912bbdb4ad3d2de9","first_seen":"2025-10-09T01:23:42.842023Z","last_seen":"2026-07-23T03:06:57.219989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/christmas-party.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.438Z","timestamp":1784775999438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/christmas-party.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/christmas-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7jvmwrbp91\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvIa2Wa4VDT641Fb65l%2BwINsrlQuyKd8bLD1FdXumlzAwVoV8eNknqbPZd%2F3ACD%2BdVFdNldkY6DOOxRGN0pkUv9DG2Wy6TbJq9CM5qnEnmrCwMSKw64TnzRPNjQZzd6pvXK2Vw1eTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c79eb56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32725,"size_decoded":33752,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8da2ab11866fb530eda804c2054b1ef5","sha1":"9cdec2ac9ae4e705a6e42092d39f84f0144dc0dc","sha256":"f80f495758ce05985df75bfe7b8a23675abd920a2fd8e2e9e4ae7af1a09cfddb","sha512":"d394fa442c7b0eb5abae92072196dd7df55eb4e87c53a455099e9b6bffd44c72d0969c4015f57e2af19b3edcb9152679f87bb28f30bf34b87cc019ad1fd8ba20","ssdeep":"768:2YwlhkEY87Pr4I6gDAFUCWmG9+UyO7p15ORvNwewJz:FSkEY8AgDAuCW6UD3OhW","tlshash":"94e2d1960ad7bd0ae38ddb09b3dd99d1470e842c9130ba6101537fb6c7ce25312ab4d7","first_seen":"2025-12-15T02:33:05.875955Z","last_seen":"2026-07-23T03:06:57.221296Z","times_seen":4,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/the-purge.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.651Z","timestamp":1784775970651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/the-purge.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/the-purge.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7hhwhr36vc\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SNYk5WrSjuwADVsDa%2B8cRGPXtF8bLr%2B96GUJYtZtsBrugeeJy%2BQJ3WnCAsbbgeNkuZIPZ20aQpGwYgHi8HhcwK8l2xpfToef1i%2BtAXSkBpvTrVBONcQ8hhXmxCyCnczOhhpL18Z9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b88f4a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8904,"size_decoded":9929,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"f74d24bf9c098dd494a3162c69462488","sha1":"439c61ac2287fdf5a1083425f18277835706ac03","sha256":"14d33718d906ba28aaf104ad12b4026375b8b059397479942034b280728e5fb8","sha512":"d4cd4d1d4064931134f42a500cab78995243bd4576257b9052e73733d906883f51949e12a0b9cba2238778c33f7af1d114fd499345f33a87b21ad441911285e6","ssdeep":"192:yHoeq3KK12IZFQ2VRHwOCRt0rhLXRlV5ef1URZLz/aGFL+iy2SOcr/:FR3B12MDfHBC30rlTefaRZLz/axuS5","tlshash":"93029ede1f21a890eabc2275c0aa074177aecc11f43a8b033a8b054aff5603512d12bd","first_seen":"2025-12-21T05:00:13.839028Z","last_seen":"2026-07-23T03:06:57.223891Z","times_seen":5,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/88-lucky-fortunes.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.407Z","timestamp":1784775978407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/88-lucky-fortunes.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/88-lucky-fortunes.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\netag: \"dh3ei7i0yd35sr7\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MfVEYRMkmIMHQosCEXARXh0VVPMhQbQ6b6iCs88YE5T7GplSixKIk6381utRh3hHKR4xRmmlpqBGWoTx8wHc2kc9RMQSQ%2BoDm%2Fw1eIdg93YG7PA1sJWW8A7HUKTjPN9dK7qgxYVcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e9086456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37267,"size_decoded":38294,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"21a388b661b4ecec65d8d1df43a57c21","sha1":"cf2a2cf07cb0317b0762c8984f6b2a22b376a92c","sha256":"2c9769b8debf919ea384ec6712a2d3ceaa352eefa694e19a71e62c3dd8743fc3","sha512":"8839127e849958f5ae615362ef10d68825d86e64a5559dcbb0d33bf47d9ed4461242828779cb1b9a791ca2609323d24a7b5fb7803415e2f5fbdf121b03ac1e66","ssdeep":"768:GYwgzk0ZGVnYGnP2+fB2m5FCSN06wYNbWstRSqjrdnwghIhboi:GYLk00dnDBP5LN06xfoMdwSIhbH","tlshash":"6af2f1176345088b9c2cacab265801b7e7ddb34440ee57969c26076e3b3f6792e9c4ac","first_seen":"2026-02-14T15:47:19.056091Z","last_seen":"2026-07-23T03:06:57.224571Z","times_seen":4,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/mahjong-88.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.418Z","timestamp":1784775985418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/mahjong-88.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/mahjong-88.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7ob72oqs9v\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1U20YTZPTx3J%2B08OTKLwALx2vxB2Fdts%2Fzh4LfvgVBCTYkE2U9hel07xxLu2Xv3T78pbdZ27qf%2BI0rdcrv2n3uqGN0Mv2uM8ML1xGYcBm%2Fq3gL9jrUvjg3edG%2Fe480GtYJF3hoJxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814d8f656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36643,"size_decoded":37669,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"80570b2cbbdfe1601b516d824527cf38","sha1":"abe7825b55a70708da1a481979ec6a905fd16c5f","sha256":"350609b4f7248ad1515654a849ae1542d373beb285282988e7ea6109bbd9032b","sha512":"9de707806861892678ace5add24f5afb47b1e86ff02e8d3162bb20c52fd0d5c07c7d8c6544a34a3e4ae15f9133c5ca3df3214a64569c91e95da641f337a35f98","ssdeep":"768:vIgGTBEK22sCp9MldPxVU8U6jwTxG/amfkhKy+y7qk7d01+Be0HtCbgI:rqL22jfi5xVhU6KG/aakhh7aYBe0e","tlshash":"daf2f130f104e8d48fad90f7656a128adf068e4073d492a3396f9918e3f19937a5cdb2","first_seen":"2025-11-17T13:46:09.625623Z","last_seen":"2026-07-23T03:06:57.225158Z","times_seen":4,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:26.086Z","timestamp":1784775986086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:26 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYsbgcBClZ8MKqvu5sK2UnTr9F8Xsq5mJXTOvZgzPOr9%2FDLvj95LDyIgcnw%2F4jmAnQi00SstpT7hoBSe5X1YoBYnGiGHBBDzSog%2Byav35pjcn4GwLuOoWfkK9F5dJ6jk3vM%2F9DrPPA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f77819090356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"0af8f56ae9c7031614b3b4f174a643a3","sha1":"aba37cf025d05a97201b12946adb225b198d9334","sha256":"2c8daadb563622810bf38dc206c2ecfa7574802d5ee65f75918124731e718e3b","sha512":"c62acd46bfb9396c31b5922ece9bcc48e14919a54fedfd7519446361e733d40f2392f8ca5f4bddeb60b420247dc0fc60381e655712abfd14999082f85908f0ed","ssdeep":"","tlshash":"a9b012c540000885a1b301093c4f32e124500b170c924d1136c048c0cf181496403ce0","first_seen":"2026-07-23T03:06:57.226124Z","last_seen":"2026-07-23T03:06:57.226124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winning/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.032Z","timestamp":1784775992032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 107\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":107,"data":"{\"exclude\":[\"2561\",\"1751\",\"801\",\"91\",\"1622\",\"2528\",\"37\",\"2074\",\"132\",\"1313\",\"2533\",\"724\"],\"locale\":\"de-AT\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIRwTkVLRisuN%2BvfsJqggXcJU%2F12ucfYzgUuOSdBiOKiHuCNpw3QePepGLbqKpXE6LjghePH7L99AU7dT7wUDZkWW0SKHbcdrdDMVqyzDC%2B3uDiRhgf1RkG009YKKx3jLWHza7fetQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f7783e295a56b9-OSL\r\ncontent-length: 624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8724,"size_decoded":1615,"mime_type":"application/json","magic":"JSON text data","md5":"b6bcc406e25f4a4d845af3b8aa21590e","sha1":"6205d639738603e2b6f1f4e3595624e9fd771dda","sha256":"35a8a33d760493570d07bafa756a8dd86b3cbd75a48097f82b23401bdaca6e3e","sha512":"b0c03a8de8ae2010d33fb6a43fc32481372d8834f7247aaa1f636820f64f4e08de127931202a4a1d2fb9d8275c7aea5539238ebacd74f3c9386c7ed9b7c77213","ssdeep":"96:TKfYffsA8KfifxsxUKfyLf6sgzKfvCLf2s7UKfT6fHscwKfMtfosgLKfVfhssSKJ:TmZOGtGVqzt/D5iZtX","tlshash":"3802a265aa62d73f75d360e0ccb3ffcd1464da65602c8428bcbf18a2d3224286f9475c","first_seen":"2026-07-23T03:06:57.229083Z","last_seen":"2026-07-23T03:06:57.229083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/panda-gold-10000.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.421Z","timestamp":1784775999421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/panda-gold-10000.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/panda-gold-10000.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7p3rvotolf\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s12jRoFp9ixZvxvDLbCuaFqfYJvTeqcQzNSoVuMWxQvNvKPorIYthPKUtC6nWK11VtBZVROJGq0x5q%2BoXPoqpNkd9mJIacAjQ7ElQ5xuMHb9eQbrqxfOJg%2FwAvxqxMJYtwQtm0xRGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c59e356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31875,"size_decoded":32901,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d9cc62bc4d666f7fd187cbddeca01512","sha1":"bdd38ce2a6f926fb2aef4090a3e897212d3071ad","sha256":"67d99decd50d1c2d23b0081c4dbfc76f6725c4006295e6483baff97dd78fa64d","sha512":"ac6ec63a570c06980b965445d8e042794c4f31fec00786b26d5d93c752e78b7a9e212f09294d8a917bf080d1c764abbbc741357c3233606fac4e30011bda13a0","ssdeep":"768:A+x19nv7VFJLwWXqQvrWqUO7hV8CPB6W/NcgnpMLbphCs:J7NLFVxDp6ecoMLCs","tlshash":"28e2e1ae327d4115a0bc173e623ce57689fda90133861ac8a2b29bf6677d4c944b21c7","first_seen":"2026-07-17T09:16:39.664473Z","last_seen":"2026-07-23T03:06:57.230149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/play-green.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.617Z","timestamp":1784775970617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/play-green.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/play-green.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiao09paljz-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQ6WxpFoyA1e84X7qpg3vtqHjXnfrrbMriXEl23gHASxkAP8kupuqPbxTPOtaj4sqBNCS%2FcYl1On3LgE%2BO%2FV3%2FnP1JzGtPwKqutgWTz7ZKC7qBnms9YX%2BjLPIQVueT26F2%2BhnlPYVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b85f2b56b9-OSL\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":1377,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef71ce3378289fb255db406156262678","sha1":"bbfa96c0f5732006f3ddb4868b606374c71d1b57","sha256":"e7f7ac71134aa0dfdf47990ad3f2e0b4de0f5efc4aa9cca528ad0019747e5e85","sha512":"42561dffa655ba2fa5903839adeb82365c2918f05d6e4441c54894cae46cdfa0685ee369adc6f989b36825925ecceee3a30bbe457f0fb8b64f89732f15b23624","ssdeep":"","tlshash":"1e01f4fb27859134e1543f45dcb49264600170d6bc65c275d1f71e1dd270c4e44946f3","first_seen":"2025-10-14T14:51:48.927534Z","last_seen":"2026-07-23T03:06:57.231228Z","times_seen":34,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/apple-touch-icon.png","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.487Z","timestamp":1784775971487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ig76yoAfaY8yl3%2Bej%2BWIaB5mS%2B7lp1GQTpnEyREypm%2BvHeuktI25QKHJVpJx1yFbBB55X7Fwv6JxagQvO1xTBztzWv0C7GU%2FF0QsYVjOCPzUWcwIFSfKNOtac7WztvTqAmrlPvXXCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777bdcf8556b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28896,"size_decoded":29910,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-23T03:06:57.231888Z","times_seen":23,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/book-of-oz.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:25.413Z","timestamp":1784775985413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/book-of-oz.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/book-of-oz.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:25 GMT\r\netag: \"dh3ei7j5fu69pm6\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZICoDB8TXHmTkDXYwVj8qnn89dUkquLiL1Zk%2BT8E7woVB71RE8IMCJXOHCkI86600EEPBGWyqCc3vcD6O6rba5sdFNX9vFltl%2BijvOUcKwJuZR1IL78R1TlxFzo1fsCSNawPaaCww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77814c8f356b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33198,"size_decoded":34218,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"27c7ccca1d847d97eecfdfc47e15eebf","sha1":"a9f4bbdd3ef976290adc6c507f760e8749dd27ac","sha256":"de6eb84a23af7a6570854e5dc0c3b667569e5a9b2134ff099c135d3c81c48111","sha512":"9380c40c487a7d51ba3fcfe20066ef84aba902303192425c55ce9edecb8121df021e3a473b0a380086965827a3031f3c1ed029a36375ab0530571c8562294297","ssdeep":"768:Aq3OWscu2KgmQthR3ijl1ozjxDbZPk7bKIISzDjqcGqxEfps:hOWPKctnIl1IFDbZPi2I/z/Kqefi","tlshash":"66e2f1c36b9407c0ddfd341e2215abd8b7251fb5a2236d5f0b20a865bb125d1e4cf386","first_seen":"2026-07-22T10:36:34.513749Z","last_seen":"2026-07-23T03:06:57.232462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/freemasons-fortune.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:39.435Z","timestamp":1784775999435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/freemasons-fortune.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/freemasons-fortune.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:39 GMT\r\netag: \"dh3ei7lsp6uhrxx\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGoJAP7GRSakCvtrOtP8vUVmE6aDcm1604cMny%2Fux%2BWcPu0L18y19kWYf6dDTtQdLoW8WWUfO6E4neMQ5e%2BYEIkDlEUFe8WsF63pfpv4iIZTnvQ49T7KiGN75p2i3gX%2FgoI0%2BcbKvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f7786c79e956b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36213,"size_decoded":37247,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"fa4770be7d9d1d00b8a033523bdda936","sha1":"ce089d73cde4f29476e39b6b7dbc69e283678606","sha256":"f6c10591ffdeec0fcb97e4a78dde483a4d80ebbd8f4a45d31321b630ec0b8d26","sha512":"54405edf81a3d2d809c27cf39bdd731e761700248eed1fa0ac9d0647ee9b6d3116663a4f0fd6232d3465dbb3033b91ba659ae8dc0d5c76a807c8a411a981b0c4","ssdeep":"768:dR1Ey3XJmWagKsDZ1gJxM/FbJ/a7tzH8BzS6ZCL7OkMunSEYo0A:dR1EynEWysDXgJW/FbVgVH8B2EjgYnA","tlshash":"f1f2f183030a2ef4eec3c3b851280a747f76a8349a59d79e15461cdb9e5ce644b28737","first_seen":"2025-10-09T01:23:42.733321Z","last_seen":"2026-07-23T03:06:57.233804Z","times_seen":3,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/app.css","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.578Z","timestamp":1784775970578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"djze8yf9yhb41abu-br\"\r\nlast-modified: Wed, 15 Jul 2026 19:32:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BRp22RLdQz%2FPPjqOi1AW%2B%2BcaFfERyr4RPd8BIuIarUD1b3jN5jx%2F%2BJy6%2BWOJYTvp11nsWXcMDHdANVW%2BBi3gMl4csTcQfJNOOX33L%2BsF4q7GWbYTFXF2raueyDcafw1Emj2o%2BGfjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1f777b81f2056b9-OSL\r\ncontent-length: 10710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60042,"size_decoded":11772,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60041), with no line terminators","md5":"b1ccde4f7a857b839ba276e22a734627","sha1":"0eead6c7a28d4355f2bebd292109ecc4c63fead9","sha256":"3a7d5df0b7220d3920cd069e7d4129b3b406c9c81870cae9e9db70a421410f10","sha512":"634eba07d20a409d82f95a4851113eff9f998c0894f0267c2ac6a850dfdcd0fd032cab488a0e68a5651d946937d29428d0df253fbd22748a849a50daa1703731","ssdeep":"768:LgFG1xvBli4hG+wL/q8+ewHp/bOsI8xx2ZkItbHOcPtofDBO9:LgA57i4hy+ew1I8xxuTtbH9ofFO9","tlshash":"584354232659603db03fc464a8d0a69d712dd407e76f57fdee62a174c9ca2d31b32b88","first_seen":"2026-07-23T03:06:57.236693Z","last_seen":"2026-07-23T03:06:57.236693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-7.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.664Z","timestamp":1784775970664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianlzask1f9-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iA9O2%2BOs0TQHSJIkZ7BXps8Ao2lgJMy6SgDCGflVe%2FlzHkiZZWIxvDBsd7EsIOE4EWHMdqtxI3xCYglt%2F3VqfIeZPSHpMgfk%2FtsflpgPFKtrQNAYjDb9NH%2F9auzY0s1Xu83B%2BtNXgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5556b9-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1845,"size_decoded":1907,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-23T03:06:57.237709Z","times_seen":73,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-10.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.667Z","timestamp":1784775970667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiancgd4j29u-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0Dblja9CHVTo3puexr%2FMOub%2FExs8UK3e81DZTTB7EgbYplkLt4ajQaclSxmuWfo6yNnNW9AICUWLCbjyB4FPBf0AG59dtedErPLEmmajlD%2F3zY9Va49a9DKz50FynlpZbDICCU0FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5856b9-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2946,"size_decoded":2379,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-23T03:06:57.238264Z","times_seen":73,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-13.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.670Z","timestamp":1784775970670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eiancgd4jf1-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0OeEQXUHHy879uo8Ea%2BsTqul62gdWiitPQnHGZp30QGseGx3OxsFWKJQO9dt5J6nIg6ovhOj9mInVsr1w0dRtW%2F6NBEx1dbf0dD8jy%2FSIhAsRhFDhz8N6dU3jMMTQCINfMJxqJskw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5b56b9-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":541,"size_decoded":1350,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-23T03:06:57.239189Z","times_seen":73,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/build/frontend/images/search.5e828e81.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.064Z","timestamp":1784775971064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/build/frontend/app.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\netag: \"dh3ekvgng0o3hf-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:50:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aa9be%2BXWLGi2i96Dq2siTTBXr2GDUG9VPp0ttBkqIAHEI2TLLyXK04X2AzuZy9GDM7Q7k%2BE9ufXWr7EgEQh%2FFDdhHRjbdwHD%2BHj3iBEKSOeQuLaZGTYA%2FO8YJGEnqJWMvmg%2FH5e38w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f777bb1f7656b9-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":627,"size_decoded":1352,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-23T03:06:57.239828Z","times_seen":106,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipinfo.io/lite/me?token=1cb6f299560e63","fqdn":"api.ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:11.076Z","timestamp":1784775971076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Jun 2026 15:37:34 GMT","end":"Tue, 15 Sep 2026 15:37:33 GMT"},"fingerprint":{"sha1":"DB:16:FB:F1:54:B4:05:9B:1A:F3:E3:BD:03:B7:E8:97:B8:76:5A:26","sha256":"76:07:9F:A8:EB:25:AA:0C:95:C0:19:D3:52:58:F3:73:A2:A8:E0:3C:CA:47:40:E7:7C:25:9B:A3:53:E2:FB:54"}}},"request":{"raw":"GET /lite/me?token=1cb6f299560e63 HTTP/1.1\r\nHost: api.ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino-at.com/\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Thu, 23 Jul 2026 03:06:11 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":207,"size_decoded":425,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e3a9ecb873ad11bd5ec93bbeed364aa8","sha1":"08a69db14ba5f832720f07cdef7244f8d2cc89b6","sha256":"04346d673795d948db2686cf3010927909e0cd4bee0dc3990226f8e7d397fd05","sha512":"b988e332db4cbef923c0a0898cc654b3823a4bea28e1f47b28c962478840b554920cfe4f049470341700fbf6297f7b9eca0961cb140939c847530ad6ba57d626","ssdeep":"","tlshash":"08d0a9a086bc1b0b58f2038a205a2d1250a5af13c20030480fa33faa2b8c4b370322ae","first_seen":"2025-12-20T16:56:01.952485Z","last_seen":"2026-07-23T03:06:57.240532Z","times_seen":7,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":6,"connect":13,"send":0,"wait":138,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winner/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.035Z","timestamp":1784775978035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: de-AT\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"593\",\"454\",\"653\",\"746\",\"232\",\"392\",\"622\",\"143\",\"337\",\"306\",\"812\",\"220\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YG5Tp%2BJy2NNrh%2BzLG4gyP5w7cuwrtMdz7mlYgev%2BMt67OTR%2BCQ7lqQRSDAjDJFL9ryY9AVc57svvcwQxAaXAZca5jl6A8PCMsnnp05OfJVGP4HtV6N52z%2BPCXYavTQQtQzMC4EVXeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f777e6b85f56b9-OSL\r\ncontent-length: 206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":514,"size_decoded":1201,"mime_type":"application/json","magic":"JSON text data","md5":"d5f7e958b8945c60a53ca597897d9e09","sha1":"cfbcd99ee0bfe3a61b9a51be96eb393caec32792","sha256":"f55992cced0f82759d8b527ab601b06f8185fcd261b080b65404d304cef02e6f","sha512":"d56562bc15145ab3be7668868fd4b510eaa179c77e98d1a4dd500910c5db14e0ec6b46db74f2c4f0f10c84a4b94391c763a702b741f1c3f0adc029626cc54785","ssdeep":"","tlshash":"39f030526a21a73fa28310d0cc77efce1444ec52542d8834fdbf59a1c3324242fd860d","first_seen":"2026-07-23T03:06:57.241572Z","last_seen":"2026-07-23T03:06:57.241572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/game/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:44.087Z","timestamp":1784776004087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 125\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\",\"575\",\"47\",\"1549\",\"3\",\"1261\",\"489\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:44 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htQUALbnViQrp4eY7fZ4s3z7jbxzTYogDtk%2Fjwtn2mK0xWpLYEYhS9KPlzZ%2Bw%2FH7BOvZHutABsyoGDDsTlV1jHbogAoiRYXYpJV8TDC0fNO9RC5sADJN828s41N9PAUkcXBkNLg0VQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1f778898a5e56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84,"size_decoded":1041,"mime_type":"application/json","magic":"JSON text data","md5":"3e3318543453d0e5a589ae376c9aeb37","sha1":"2beeec90bd5f1474d4471d8ff5ae52c8335ef8c8","sha256":"628a9bf991fe31262356b6b9699b51e311875676de6fd7c8fbd0e16576cbb74e","sha512":"03f3e81c77869d2f39985cf373233feb71d6bf7bde626351b4e3a40f39e5b6c7b058b4458998f04e560a2ea39045d1dfb2c79d2dbbed7a54c74e5b035ffea8d9","ssdeep":"","tlshash":"99a022cf80cc888e03f3a300888b30e8e0380f3303e08a30238a8cc30ca220a0003cf8","first_seen":"2026-06-24T20:03:33.036836Z","last_seen":"2026-07-23T03:06:57.243452Z","times_seen":3,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/the-ming-dynasty.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.623Z","timestamp":1784775970623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/the-ming-dynasty.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/the-ming-dynasty.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7r0u5rzp8a\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZn%2BUzw1L7yYrupB52egLSptLJDlIhm1sYSBkfviltra%2B0Kn9TMvWt38hKhjxiUhMhIKnRa1w8mG4ckenz2XTVRzwiL39pCr6lNRBlGPQvb7cxPSZoKN7sXaeeZnHrzSh5TAjJp2RA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b85f3056b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32698,"size_decoded":33724,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"ee4c3f711a837dd25aa451d4cb778296","sha1":"c2bdb4dc12fb31ffa0de0def449238b80eda18e9","sha256":"f852563502223d4e96b70917bc6d32f90467369770f35c78fe473ac7a35c005a","sha512":"923a1068b322d7a92c3c278e791b5f6483d969729a38945b5051d6407eacbe558431c9fc92f95c2d4e51da9d3f473ad675781d6304e63151284daeb0408d47a7","ssdeep":"768:1WFCp65Y20fshDHCH5ffpjlIkasZ/MPYRmM:1C44yfshDiZffpJ3aLPYRj","tlshash":"02e2e14b75c60548b77a72148f766720f613fdb2e4a2931b6d202a2e1bb4083f1373a6","first_seen":"2025-12-21T05:00:13.829954Z","last_seen":"2026-07-23T03:06:57.245907Z","times_seen":4,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/fruits-evolution-hd.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.632Z","timestamp":1784775970632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/fruits-evolution-hd.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/fruits-evolution-hd.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7lzue3ih4b\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQ7D64r9DuhYfZUI4rpEFDTWm47KoPfWEZh0%2FpVhgdkL3n2i%2BvlL6Wp807jjvXfxqxutB2vEbIH32WOdynQ6tWhyErhKAY025Ok2s%2BCHIo%2B8Vvf86AmJyus7nRp3OIWfNerXU2nlwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b86f3856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22187,"size_decoded":23220,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"23815b6693e02ec66afd9b1f1732d59b","sha1":"5b8abf9c81ab1a9b389e23a47fdd8faa650e5ff5","sha256":"9a6f41898d8d12395e42279b7fe6fe475e48cc47b803f4e6e2008da1692a19ea","sha512":"06ae2c4194413528a4d5970fb4842cc509f9019dab4b8fe631bf85676c2ee8c0dfa9efd5904e93096e42326a4d5347283e46458c548c7e81ab61e1c4b0de7a24","ssdeep":"384:Xg7NRJz2ET6v0pJPKxYUbZrf54S3pjLlrVh6wRGI4kY+2ISkdbUrE8G:Xg7NC26vA5K3Zrf2SdwINY+njwrEN","tlshash":"14a2e187868c8355f51c43e62262dedc2360efd26a545318bd29286f3fa5963d04e2f1","first_seen":"2025-12-15T02:33:06.00578Z","last_seen":"2026-07-23T03:06:57.247324Z","times_seen":5,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-8.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.665Z","timestamp":1784775970665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianod17k16h-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PjXnO3p509x0bXirxErrHQx1ZuD0tyJm1OuHWucZr2X5RyC45ujto2cFC7oampM%2FiAipg9UhskJeNdfz9Uzl4ZcD36qGqgUmAWxDMSahp6uE51YcvJ4Yw7vIAGEjhTeqh75gF61JBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5656b9-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1529,"size_decoded":1714,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-23T03:06:57.247896Z","times_seen":73,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-15.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.673Z","timestamp":1784775970673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianeu3jj16j-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oU5g9LfZyxaUuLgn7dAVvY9x2JbUSgswFLeuXSv9JKs%2F1G2V4XLK%2BoN3OTK09QIFO2sSYJtmRkSXGSgtRj%2BaXc6FA1UwlGQz%2BXdlCpx3y4mTl%2FzDafzL5JadcCfHKauwmxydLAUXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8af5d56b9-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531,"size_decoded":1805,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-23T03:06:57.248409Z","times_seen":73,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/4.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.681Z","timestamp":1784775970681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/4.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/4.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ElbCQ%2FLj7LQ7Hw82WaO8bh0zARAVE4S8vjEH1sefAwBDbMYsM%2Fs8ehbrhkxSlDbXGB2z35SUZD2q39We%2Fh9iuuuM6sS2wXdr12RgKmajIlKLaNGqJT55%2FvRbdfVrUxb%2FAX9hCtgOjA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3eian7owaidb\"\r\ncf-ray: a1f777b8bf6456b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ee164960aff929fe6f50fddd0dc9a4d","sha1":"8239329ddf338f02f75e9a930189bd8fa50cc526","sha256":"8b584f54de8fc8977262beff46978fe77aea372ba290013fd1e0ae1f003182ec","sha512":"640a338fd999b248e62fb14060095ab32ef993607390aeb786d9e8526b7d7f8336210e8b6ee3eda946f9fb7553ac2b57d328efb7d389b03a105765cedfb82143","ssdeep":"","tlshash":"86f05974b34460405a2cc73099dc7cfe316f223613844088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.288287Z","last_seen":"2026-07-23T03:06:57.248956Z","times_seen":64,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/gambling-therapy.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.685Z","timestamp":1784775970685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/gambling-therapy.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/gambling-therapy.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian2xfgi8qi-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8hFr%2BrFk3HAsFuvmD56%2FdFjoGlxOyhoZfcRDnvs4PeNfxVgTdoe1X%2FGN4i7y7gE53Qq8vn%2BLDYR5qCuLN8Mp0qaQCLeZ4kl%2FSJqBSbngxK6Ekso0nLhsHtlrfi0yLhcWAO01y5Ftg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8cf6856b9-OSL\r\ncontent-length: 4642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11322,"size_decoded":5681,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"227ba6cc3a63172a4dcd11dd41e25a32","sha1":"4f4a04e5710e15f2b25a88cd803a1fe26fcb4bde","sha256":"56f3544eca45e25b4679c142aced2a4d5619b19892f836edaed193e264415af3","sha512":"bb6b03b36ec8739824c325b1005aadbaf52000f0c0ae77a1aaee73a3ae87ed6c4ec935726a59b22ed5ae10d9210671e124c9471a696c381f78fb3b478a85735b","ssdeep":"192:SqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sl:SON5+E/VumjLMAzj3wl","tlshash":"c832b6eab3e4f2e4f102e7f0d52194307bab38bfbb66d618c3956dd0aa1100c5a95cd5","first_seen":"2025-10-14T14:51:49.035077Z","last_seen":"2026-07-23T03:06:57.249501Z","times_seen":41,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/2026/03/banner-popup-69b6b8b6e223b8.74124360.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:17.011Z","timestamp":1784775977011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69b6b8b6e223b8.74124360.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/2026/03/banner-popup-69b6b8b6e223b8.74124360.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:17 GMT\r\netag: \"dh3gzzx7e9s03kw1\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJgI0t3Zk12BhQ1Sl3fylJoZu7z2OCdGBxOfvSijXf%2BS%2FFmQ75j0CKEeN8cqhGYGF3aNaGIcNR1P1%2FYkCyRSDLzdN4UNOAUMkyYkUNen1v5ESmAH6EdP7l2dIjC%2BuezqCB25etAPTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777e0484856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167041,"size_decoded":168114,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x345, components 3","md5":"11140b4d38512abfa2bde929efaaadec","sha1":"d88922fc90b5c4b9f9a3a5c03349280d0e21acb2","sha256":"13defcec8fbe60f4ad744572e09bc83544979360dd676996c563b12ae8dc21cb","sha512":"0e2342e62b558eb07854881259c8ca176e0fc57663c7a26c4be9a664abb506526046e0d903f1eaccf00d2c54dbc1a6417e1bc63830aa5ce310ecb7b1633bbeb3","ssdeep":"3072:Rf9QX3R6L4hZ9F04PSk/A6w3iKP47LIO7kcla85FKsnIAWxE7C9xl:RlQx6L4D9F04Bf8iKP4Hr7kclJwsnjWp","tlshash":"34f312e142a359e759fc5b109c05970c38f922b409590be2f799bcc1d298ba660eccff","first_seen":"2026-07-23T03:06:57.250031Z","last_seen":"2026-07-23T03:06:57.250031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/find-it-girl.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.641Z","timestamp":1784775970641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/find-it-girl.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/find-it-girl.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7fwqvqy3l2\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpiMdwSadGa9zt7ZBxZgXsliFJ8boNxz923k2kCOx1xh1cKNxJR3%2ByzQFLbAeVkkJBgi0qe5JjrXBEx9d7OwsXo1soMOjMEICnonSdvTR%2FloS%2BcxuuwUFM4BdoJ6HT%2FEccKRBdetAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b87f4056b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4646,"size_decoded":5674,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"30745a0eab5693672370348455d0decb","sha1":"16b3200e981700109bb4967ad9208666a0035d63","sha256":"b7c2f790d7591c005e9fbf01517f257291e63ba51ca9e09dd6a3729811d1f1cf","sha512":"04ce02fd4598874a9522fdfe86119495513d58e50170e5df9a6d8ca6c24060727675549c26cfd05021d3dfae7a2c3d261108ee1c7ea7076a8463b2c34bfd9aa7","ssdeep":"96:hMVtedttWH7lBltL9E8cNlo7kynfHUG2+AOTMJy3eb4JhJsW:hq+jYRtLmqTfHUG01B0Jd","tlshash":"baa18e287ff82b60e4deb93454b60847f318addd25461e162a251ed147512de1324876","first_seen":"2026-06-01T02:18:17.504152Z","last_seen":"2026-07-23T03:06:57.250969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/2026/03/baner-1-69b6b8b7066577.43651122.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.613Z","timestamp":1784775970613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69b6b8b7066577.43651122.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/2026/03/baner-1-69b6b8b7066577.43651122.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3gzzx7e9s0i9pu\"\r\nlast-modified: Sun, 15 Mar 2026 15:44:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PL2sJjpMCMBRiLJA27NtaeQDTo1VDqAtSiAFFucoRY%2FgTk1uACVwzwWADsy3o4oOGgdleXgXhc0pF%2FHMno1UfGpuOLok3A2GGyNqNMUkbedosMgjnMWoJ9ocCdst3r%2FR%2BVUa8Vaenw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b84f2856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":852402,"size_decoded":853530,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"eb598eea2034701f6c4909be73c9bf6d","sha1":"5ed33af9e19549a9d1e08072bfed04dfd54e1ce7","sha256":"a2239430f92778ba7aabf380d8d9e8e36e940ee26d7767ea5539c07c0e00b945","sha512":"4f790d612a270a368031c9af8cfd906f3749b67d6329400dd0b59827f79b7c1620beb1a1eacdf85633725f44965c4914dc1772eb3d2be2d26953ddba0cf5fe45","ssdeep":"12288:vpjccJemvmSTk0LkjMpMxCiJlkyfUXO5pulr3zCGaVLiK3CmvQyFUuF+KV2ZCxD:BgouH0Lkcykys+52rDCG1KyGRqZC5","tlshash":"f40533d9f95a60d2924858b5e52a53c298f832b601f6b515f83813be801ff1b37b84fd","first_seen":"2026-07-23T03:06:57.251896Z","last_seen":"2026-07-23T03:06:57.251896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/full-moon-fortunes.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.622Z","timestamp":1784775970622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/full-moon-fortunes.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/full-moon-fortunes.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7lzue3in4u\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRRoAbjU6yOFkoOivHuYj01v6C0IK7W%2F94XQw7tiOBK4iSixwFnRXCHn%2FRZ%2Fl5IZF6o5KrJwYxvZ4f9xyWXjFEipsExiKeviwJCP%2FXyKVeoZX7%2FoWrSp83LD%2BGiddCsG%2F9%2BWbAUCpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f777b85f2f56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29982,"size_decoded":31022,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"3d268f7514cc05b75c497108678f9553","sha1":"0e1a4da621a67a1c3c906d08bff59d30cbafcea9","sha256":"de6a121de5c91a4b259807ac66efce0b0ecbbb4cfdcfdc1c0f46ab1d39b0edcb","sha512":"c9045e478fa9b16736ea11ab67406ace667aac9d78b5b80a2950131bb7ac945cd8b7c30c2b59b066d14bfaf1bbef6ab1c46ff57cb8b7786c1e30adc121ab16b3","ssdeep":"768:rU0FdcS7+neGb8GaVus87ct2OTvX/2OuesBsaT94b+Dp:4EdcS7FWBsAe5nJue9aTOKDp","tlshash":"9ed2f1c5927c0259c40f17f558c6a011daa5e09cb5ea25b70ef49b390b53bfe8abc0ad","first_seen":"2026-02-02T10:45:14.6343Z","last_seen":"2026-07-23T03:06:57.252801Z","times_seen":4,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/table-icon-17.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.675Z","timestamp":1784775970675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eianeu3jj2dl-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2Fc9K1wODtXxe8ur5dUJxIvPg5j%2FlsslVGUNeMIvUyiOWGU%2FxUr0gTUjzYhJG1XgTzZ1WKMCl4GUlb51z091CGyW%2Fc4gvJczRLqozT7INMqMbfeHZAZ7cmQJ%2F%2B6O%2Fhgba2WoWIGPig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf5f56b9-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3081,"size_decoded":2402,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-23T03:06:57.254083Z","times_seen":73,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/ajax/winning/","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:18.031Z","timestamp":1784775978031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 107\r\nOrigin: https://rainbetcasino-at.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":107,"data":"{\"exclude\":[\"887\",\"1378\",\"871\",\"524\",\"1713\",\"352\",\"866\",\"2401\",\"927\",\"1084\",\"2594\",\"588\"],\"locale\":\"de-AT\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 23 Jul 2026 03:06:18 GMT\r\nexpires: Thu, 23 Jul 2026 03:06:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y00kbkxk0%2F%2Fp6oRuq4hLLhTMuIR7ITuZyp9eLJ%2B2tSoQpb4KJKCEadGNFiCHg5PXTPHdysUBfVY2Q7vWI5px3jzJH7CL24hbrVtM0V%2FTwmpUXEhSSnyqtz86JKzXuYOcaBLaxGv5BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f777e6a85e56b9-OSL\r\ncontent-length: 589\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8671,"size_decoded":1582,"mime_type":"application/json","magic":"JSON text data","md5":"1adc218a238f632743c7a6695e8d2e42","sha1":"260647b4a7625b9e4851730e2fa2aecd0b661d64","sha256":"bedb754b32a6493fdf24f3f5a9470e3be2748fae821557f0594647d4c06cf843","sha512":"55da44c0022663aa91b0b165d5c312c5f4703d8edc4d256df3409c2df18b0335a279d95720047e501353ff6fdb1101d6f42e6756878aeb977b8df6f57d5e3b2b","ssdeep":"96:3KfRsf5sGGKfbftsqxKfTf7sc8Kf8f4sIOKfSf26sc1Kf61fUsnxKfXfns+iKfYA:36zUTDzDbzr36oi3","tlshash":"4302b365a962d73f75d350e0ccb3ffdd1464daa5a02c8428bcbf19a2d3224286f9476c","first_seen":"2026-07-23T03:06:57.254582Z","last_seen":"2026-07-23T03:06:57.254582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/flaming-reels.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:32.426Z","timestamp":1784775992426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/flaming-reels.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/flaming-reels.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:32 GMT\r\netag: \"dh3ei7lljzlhrb1\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6i1aG%2BouSdVA1IG3ywzJfKEq8mXV%2FvjCHyVffRuH28ZuOhoWum%2ByKRF%2FbxY43a2O77RTqQbS7usmK4EY%2BBokn7BKOvFjYK%2FjLQDHg0l6%2F8azX65t%2FkFnsK185LJgp6IfXa%2BO3G8og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77840a96a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35389,"size_decoded":36426,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0d8fbe3ece31b8e5e5485af2c698604d","sha1":"aa039096a435b9b3548336fecfb5c11faed6e4fd","sha256":"0d3571b8f36581a5804ac4172395839756da33b2d1acaf65031c001f53c139fa","sha512":"23169bd2bb9d0ad43dacf1f4367a0504098cd98360b750d1868c45417d5c1286c72f44078fc827a34e6abfea13f9766d5b7b614d4dc7d6b63fd94061d50e144b","ssdeep":"768:4tp7B59IdkHXfUccA2bbAiiuV9gY+2gd+Wgziixmk:CpVrvUcN3SVP+Rd+WI0k","tlshash":"9bf2f1fe6bebd55afe0ac3fa35013e0543228e6bcf64974f1894b52c527cc45109919d","first_seen":"2026-06-02T00:44:56.48364Z","last_seen":"2026-07-23T03:06:57.258961Z","times_seen":4,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/games/1.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.676Z","timestamp":1784775970676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian2xfgi1be-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkWeRV0SbalsgHCgy1FAgDqDfMurtoSzv%2B3e8pZiNzTqJObqHem2S50gY1keKsmY%2B1mQLLDOZw1ISXb493lh376U2VAoX7GiaJneg%2BAyGZHdnAXMh5nIIBvrgCJZN5n6BE64jcmhKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8bf6056b9-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1706,"size_decoded":1737,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-23T03:06:57.260951Z","times_seen":90,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/be-gamble.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.686Z","timestamp":1784775970686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/be-gamble.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/be-gamble.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3eian0jp1i20ob-br\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLIELtSXkqdzfUHNHR8P2GmxjzcccKEUScFpYFHDssyY1WwXMOq%2BB45HMGBiV6TodjpDYYf0cLtyAxSB8slzAnFEjL%2FCD4PvW%2FCoJWswMuaDlrGIn4YWCNXP9JwSOqEqxSTgLHG%2FHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b8cf6956b9-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94187,"size_decoded":44550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2630e6331e38bb73b65c6f268ba880a","sha1":"c5eb4f402cd9a654c44f45232b9be73794df31dd","sha256":"c80089bf96fca7f674c0e8815f64b93db18a0cbb887a289545ff53bd1defe1dc","sha512":"e36f67c91873e96ba79af52959383a722312d5f0f683b9b6f5819f4f2d2ba7fd3fa731889effc3392533db1bac0aa5413062e6cab6e98c887e2a499564c9da50","ssdeep":"1536:sPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:8N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"6893202a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-10-14T14:51:49.415953Z","last_seen":"2026-07-23T03:06:57.261475Z","times_seen":41,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/svg/arrow_left_icon_v2.svg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.611Z","timestamp":1784775970611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 15 Mar 2026 13:47:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDNy%2FgCB6VsXs1tB6NdCsTZLL4O7kiJTR0G5yLNEA77yKDMwbbkui8uzLoxnhHPyA4iqD4k3Ifn%2F87wcSihGryT5KrO7GTQDc54OYlU0g5QDF2FOsqUjL07kvHyfXsT2F68WRL%2BKog%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dh3eian0jp1i9y\"\r\ncf-ray: a1f777b84f2656b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":1194,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-23T03:06:57.261993Z","times_seen":56,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/avatars/stabber.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:10.644Z","timestamp":1784775970644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/avatars/stabber.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/avatars/stabber.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:10 GMT\r\netag: \"dh3ei7hfirc32xh\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JzvFlH1rZW2%2BsxVXHmRzWnaYM00%2BqoyrS7WJKC4atYN31M01vBbQMAX29rAEhpgvhCZNPnMVyuiCcrBjfcNuSG0%2BDkYiaI%2FJO9dxNE52UX%2FcV6QLXuNkn54B4XjiSd33xOd7zvCSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f777b88f4356b9-OSL\r\ncontent-length: 3772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3797,"size_decoded":4816,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"fa5369ce8f562bc42bf8655eb5e0c1d8","sha1":"58eb19483a16e649cd13d48839e47e0a335e80d8","sha256":"86ba89198d3761a0309c1f56c99a057fa39e3b9ac954e06d3e63263a7b8ef301","sha512":"dc1f0e4ce3ed04f824a400ae3ab4115390e45f81b500e44829b7ecc5aba946de32d7755e14469a6721518b934052080726e2ecf4b1b82cae338aaca3fe8c17b1","ssdeep":"","tlshash":"20714b0b17c58818fe1d1b39ce84cfe193c1be62365358671469ab90bf2b1948cc81f7","first_seen":"2025-11-01T04:33:33.169174Z","last_seen":"2026-07-23T03:06:57.263026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino-at.com/uploads/media/games/fairytale-fortune.jpg","fqdn":"rainbetcasino-at.com","domain":"rainbetcasino-at.com","tld":"com"},"ip":{"addr":"172.67.171.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino-at.com/","date":"2026-07-23T03:06:27.394Z","timestamp":1784775987394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino-at.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 15:18:46 GMT","end":"Mon, 05 Oct 2026 15:18:45 GMT"},"fingerprint":{"sha1":"49:B7:CB:6E:53:D5:F2:1D:10:73:BD:E6:82:A5:80:3F:48:CA:15:98","sha256":"04:9C:E1:42:63:7D:A9:E1:BB:52:EE:3A:53:1B:30:CF:76:E6:66:CC:4B:C5:82:CE:3C:B8:11:13:5E:E9:32:39"}}},"request":{"raw":"GET /uploads/media/games/fairytale-fortune.jpg HTTP/1.1\r\nHost: rainbetcasino-at.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino-at.com/\r\nCookie: bn_source=; bn_firstpage=https%3A%2F%2Frainbetcasino-at.com%2F; geo_country_1=no; geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbetcasino-at.com-/uploads/media/games/fairytale-fortune.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Thu, 23 Jul 2026 03:06:27 GMT\r\netag: \"dh3ei7lgsirgmx8\"\r\nlast-modified: Sun, 15 Mar 2026 13:47:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4FObOaSYQpJIQpka2yjYgkVR8VGlbsXy2wpjl8itJJk5aQ2rc26AqPGO%2Bzi%2BQjBwpA391Qn0HyWh9JAB7DFf75iGvR2Z6mG5bvF3lVLa2is22r8yJRO9VjTIjBNLqF67kVp%2F0GCkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f77821391b56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29708,"size_decoded":30737,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d47e285cba75f8deead721c4cb2a0f93","sha1":"e3c2d86336fc43ceddd224487058d583ce44e2c0","sha256":"9b3bad4ae266c9ea3b25304e1422f38bf2ae00be8057ec731ac0e8952df3142e","sha512":"5677f2dc279e373f63e627ec574356b607f1d192d339e0fc9564e1235e482278f9e9ffec2a084900ac58dd6c73eef4d68d885450633db45efc289e245a87f399","ssdeep":"768:GYSt9vO0dU3Me33Wnk+atoZEX5Qjn+e4RPFqTML:GYStNOKCH3WnupvnLXL","tlshash":"f6d2e13a4d541753ca5e923199fe36915a04cffb687b231238a748d8e3eb91306be471","first_seen":"2026-07-22T10:05:30.635601Z","last_seen":"2026-07-23T03:06:57.264261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetcasino-at.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}