{"report_id":"dfb8e2b2-a739-4568-aba1-fd1a3e464102","version":0,"status":"done","tags":[],"date":"2026-07-18T17:14:43Z","url":{"schema":"http","addr":"francerainbet.com","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"104.21.31.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"francerainbet.com/","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"title":"Rainbet Casino France – Jouer en ligne \u0026 retraits rapides | Rainbet Casino France","dom":{"size":44300,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27703)","md5":"4492668870b6527b54d77fc82d7bdc7a","sha1":"1e89f3c323fb9ead7b09f8b7ffe5b2ff75564bfd","sha256":"77c6fac6278f5a66788c5ba8c0991952a5d501cdefdbcdb9cd5c57698edb0526","sha512":"8394891ad4654bdf167db2813a14f8874e95bec6bffc20ad2ddf7604d47e2a93abe0988e535c98b31945305249a03e3b2ac018a8833d002dfe9d00c4b6a992eb","ssdeep":"768:3mH8USzO0SFJJs51X9aXs/NG9pfrnOMsSHGOC797TvcpblCTHsT4Jh2B7WmLzYBS:3mH8USzkFJW51X9UsQDfrnOUmOC79cpN","tlshash":"96131c3b73c01b3a01f391e6b7c3b65bd2589085d12cdb80b3ebc6a56795aa4c8b11dd","dom_hash":"domhashb7d3f0978b4578ce28c6eeace762a140","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"francerainbet.com","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"104.21.31.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:14:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"francerainbet.com","ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":34,"request_count":17,"received_data":1683526,"sent_data":8802,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"francerainbet.com/","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a05a128b7a43f61ad654fe477b9d7f80","sha1":"b94bd7d8ef5dac12d47507e4e56e89acb5b9004c","sha256":"d48d869dcc46015005d1c13cf1d619154f2547ef82e9f1e15c14f528ec10099d","sha512":"ba8bfe26e70dea555d95b20a00095714db410314d39d11cbff13e445654c8876bd4d15ceb510f859aa0692833be5568a5bd9bf3818316cc0670ee49e53e16d2d","ssdeep":"","tlshash":"3af0273b72aa0c35016795ab538ae7a9362850433002cc493f2ccb402fc4e9048b6ad5","size":465,"data":"","first_seen":"2026-07-18T17:14:48.510862Z","last_seen":"2026-07-18T17:18:56.03399Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"francerainbet.com/img/homepage-banner-bg.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.469Z","timestamp":1784394856469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/homepage-banner-bg.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://francerainbet.com/_astro/about-us.CFn9e_Ho.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"02bdffc74fc81199c5f71e7fe8606c85\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmOiQJfLLCxR2Gg4l8EkBnhAriHKQCLyY6WsLUsNdZfWHUe5I3VtRz9GLo6TGQMTQthiI9iA4r5r1grEy4EJWTtcKQIWyLxaq23yF4%2BMT%2FTGe56LQEBdQ%2BeoaBsXOVFhDNNBqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1d31f2ce9a81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12214,"size_decoded":12881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x246, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f37a7c782a2a400bb59c0a304ec51bac","sha1":"d34383693f29ea6767c5c2972d4baca13ad97a55","sha256":"385dbd37d94f4c319817d01b79a9b966eaad4eec73a90c5f714d52ec67422750","sha512":"c97a935dcef56d9f9b58e5bf42eaad232f47ef765b1081a61bef5bfbde8fdcc8341a1194671f2b314902377289e92e4d1372d328745bf4ade9baa61a525f4e47","ssdeep":"192:7DU6CR9sQ4gYUsaO+hXYg+CMM7Y6E3ptHujYhKQUjw7+/eN7alYctQD+/+J45g:754FYA9CQ2EmvG/EaZQD++4K","tlshash":"9742c05510f0bba762a1e22c727728fa2d380c87b77b600602cc6628503e1b6d254d2f","first_seen":"2026-07-15T08:08:13.868985Z","last_seen":"2026-07-18T17:18:56.027277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/banner.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.471Z","timestamp":1784394856471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/banner.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"826d251c15e0b7c803e6dae0c095ef8e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rdxVA%2BVyCJFcjDVHmk6vQHCR%2BH4hBkw18BGMt3i7%2FJEUO51zsNwSMUu%2BdtdTafVLsiY3fHTsZWQNfJrOkVFB%2BnzeBxi2TWsetWNzSzhtRlanQpl8rE6b1S8oXQ0NLpitd8fJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1d31f2ce9a91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15538,"size_decoded":16209,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1504x688, components 3","md5":"6bd7f5796057b4bb27098a025888ff1e","sha1":"4302fb76bcc0c9bf6f181140c5f36136d7f03c55","sha256":"abe3bc0476142dd6311340f09b78d3962b66764eb1af573ca89a28e54319c881","sha512":"de75d6acfd71a70b9cbc99cda3fe6f56a37836ef279870165c582228b627129dedc6cc06234cf45f2b8343c51c73edde7e5b32199f5aeaf16e602fa8489df123","ssdeep":"192:No9nUP3F+yge67wzKCIrYOODXPrkRkm339Z+Dxf+k4IYFFLxT5sq4L13qUepX7w:NSa+le6s0UDY+mn9ZE9IF9xT5wVqE","tlshash":"af62be73ff958b97c38a873da0cb0b349b516079d52a45ed9300522733c7b29ac198af","first_seen":"2026-07-18T17:14:48.493341Z","last_seen":"2026-07-18T17:18:56.027866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/sportsbook.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.363Z","timestamp":1784394856363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/sportsbook.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a447e20a64d8fc4ee021b398ce196680\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XD9kYOw0DeGi6prasnxm3BE%2FH%2F4tMrEga3IB3xfDV%2BFZna9o1DfCvZW6%2FPrVM8vqdKfaQQNyCsGGuIo%2FZ3zXRri4RvHRYLr7BfdZGCqpVxsj0kKC7Thzn%2BZQ6V78LZMzVwRXOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c398e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118048,"size_decoded":118722,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec841251d3cb09f7080e3b048dffb1ed","sha1":"1b5246bac52d26d8b7863984fc121dfe2b9f34cf","sha256":"6ae0c16a2d8ecdf6e8f2464cec439250be6663dcce5b077bf1e99cfce77c4333","sha512":"8f0e17fa2feeb63a87332bfd5a18615f408e789107179268c92db5839e3595f4ed7593d2ad93eff321171ecd6617feb2a4e7b1e5a7a756d3b449c9b5123091eb","ssdeep":"3072:I3f5F9Tq0wKzGrY26+SQht4B20jwbV4AkexKNmbcUd46WR:CtVlZLQPM2swg8lcUWR","tlshash":"50b3129dfe810219f17239b63ce972bf7eb3956598effde2881a0203845944071ea4f5","first_seen":"2026-07-18T17:14:48.494561Z","last_seen":"2026-07-18T17:18:56.029904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/tiers/platinum.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.369Z","timestamp":1784394856369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/tiers/platinum.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3cede765e41c00362bf4b084dd729775\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OQZqFu4dy%2BJ%2BQXFqoseK626i%2FmlknuZUHrIvx9qZxl%2FZAj5NXreQ6dBl7NG7Wi2xjHY3%2FsQXT2GeUAAr%2FZwlbnwawd4LN5dlNQMKM9KF5RdwhvP3cnGIJHvye63tTvG2ZJrMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c49941a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6578,"size_decoded":7250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ca31f5e8329520c8c12490982c1e819","sha1":"9014fef7bbf7b666a951b292ffd4d2f4591996f6","sha256":"917617cae4195612943b72d64988aca84b6b34261a868fa3d71b378044797ad1","sha512":"b91e3fe9a5b98e9d9566896493392dfcb7da950f59d53182807a75cbd20ff8ead85ae49762c8a2124ee2bf39892d26358270b62b43242395129f8242d53194b7","ssdeep":"192:iO856jfPrxFIe/pq6enIMpC1Hu6VOIxIP:id5WrxFIecIMpC1Hu6V7xIP","tlshash":"48d18de7547fad694d8025afd384b108ca177a0776597b6e2b008ca0013d28be841f17","first_seen":"2026-07-18T17:14:48.49553Z","last_seen":"2026-07-18T17:18:56.02839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/logo.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.359Z","timestamp":1784394856359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"26444b5873199fdd7e1e18075ef2b53c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6mAULY3iFEOS80Ssa2AqUNN95iz86ulboQ3t579CUjwRNCdf%2B%2BOXsZ1Ac%2BF8ZPiwuQmr7hGiV7qLUUWJjTqJI3hcnjoMBwE32NseKB2qYZqRFCshtQs6rhTPfuiplC5G9gG4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c398c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17408,"size_decoded":18075,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"130c073463dfb6cf0115bc5fd0f6fa0b","sha1":"f22e472c237a52b2e204ec17811edb53f2854fa0","sha256":"3f6f630067e01b69f9d6da9dde0fdb6016fcf1e0e8a0226fe6f7faf97e9abda9","sha512":"80acd0b237319e82f4815ac776e4b3ffd4aaaf9f177fb61fe2a2029dd3f6d971c11d481871641a9ad6fd16ea84637580721cb8c78cc3193af24cfba3d71b8be0","ssdeep":"384:cfwTDVtWmSxfNqk2p819fmvvS1p+a4I/U9Ve2iOsDfnxE8:tTGfIhpEEuAVHVe2pYN","tlshash":"ec72d0d9a372a34be24a297978c23fedf5dec460483605856660f3c7a4cf0c61ba3784","first_seen":"2026-07-15T08:08:13.893447Z","last_seen":"2026-07-18T17:18:56.025218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/casino.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.361Z","timestamp":1784394856361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/casino.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1466736787b3527587735d58c2224bd3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JE0qe0qwlmetrjEYjKYScbX4nb%2F71Oodhbe2wvX9feOq0ggSVC0ZR2GIFFiEy4arSYvRC3JJOcID8%2FokJnHoG0%2BzXMfhelzmR2y9d4RTjh6IA%2BxYMBWtiW%2Bgkg8YEh2SZyWrMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c398d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78270,"size_decoded":78941,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c493472544ac88f757db77d0b524ad3a","sha1":"16e5d055af62d56e19cfcb8b875afc167006013c","sha256":"235077863369da5895e6a1868173e91869c671e39414b78a4ee0b6507a57a51e","sha512":"16719b2495faccdef216ea30ddd5b3100f9f723febf19c54779fdd4d3033c49bc2a386e7d8a426c1018af28ebc0d4e9b3a917525a999080a1e1fae63c93fa1c6","ssdeep":"1536:bfW/wpoB8jfe8Qu1Z7T6ctmxeaD/Yh2FF++jvGNH4JDt:b+/wps8a8BDteeQ/ks++jONYz","tlshash":"3b7302e4735b62bded63573a3214cb388a1d3703a677a4b6ac0105b314966f12fbd50e","first_seen":"2026-07-18T17:14:48.497458Z","last_seen":"2026-07-18T17:18:56.032491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/tiers/bronze.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.365Z","timestamp":1784394856365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/tiers/bronze.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f92221dea968bb4c906ed03c9b34beb6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdEXbP4n%2BoAXIlnCqWeM3y%2FCRAQgBDM8njmNc1cy6%2Bze4OC5LfvKg5XJ3eTfVBM5A4oq1P8fSWW4KA3hO2aoTv22Yby7EylGaVM7DQvLJiPpwUX%2BkTAa7aMMdX7%2BGrC%2B0kozow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c49901a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3984,"size_decoded":4656,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76b0874e8893b50fdc077b62789de228","sha1":"9b032c63a89bfcb77cf82999bd7e993acc1611b6","sha256":"1b9ff62bebfb8e7ba5f63d9e26dbfe7faf069591173b5307fa22a1dd5bd24a79","sha512":"321f50bcea81c4b49741fdc8d27c13d593c1f98648c0a09eac1ff2a1534ff2e5b586a27ccd59579d4389aad0e5ec77b743705e872aaf69c7c219f04c07518890","ssdeep":"","tlshash":"3e816d1a2f070373d52b2836bffb6b056db55db8170823548c2ea96ad830178d376635","first_seen":"2026-07-18T17:14:48.50092Z","last_seen":"2026-07-18T17:18:56.03041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/tiers/silver.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.367Z","timestamp":1784394856367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/tiers/silver.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8af4e1b84848b209781c45275ea7b9d0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YW0g1R%2B%2B9CJnn8TIlYigZlV8hJdEH2%2Bcl0mOPbRM6RK45aZJ59urPFHJSXhOTWyEqwU25b3M8etlT0Xe%2BBJRF1s2FU69ImcyAtrAypJjJ9emngXyN38PSOnCFoHGHspcbteZyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c49921a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3894\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3894,"size_decoded":4562,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d53137822add98bd4ce2245781b6ce6","sha1":"0369664d4092660fd890d23429169f8389c88019","sha256":"4bacaa103c376ef1e72a28e39aa2e36a38756ca463afe7388ed101383c3438f7","sha512":"d68a79b7d2435656139071c53a117a80581f03dd67b4de71e85ae48bb9a7bbcf9a08cd5979ad020405510351e83818152de7fb515f210e3f9f56d5e63cc9c1b0","ssdeep":"","tlshash":"dd814bfa9ab2c056e1d2f6b72432306683d6f8d3e66d44df423d08417e249523be803a","first_seen":"2026-07-18T17:14:48.501892Z","last_seen":"2026-07-18T17:18:56.025803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/tiers/diamond.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.372Z","timestamp":1784394856372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/tiers/diamond.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2769acaa45c2b91d4a6cc1fac722be82\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nuGsuq6Sw%2FhI9OmZp56d0IdqhtsSU2VxXN59XV3gS9MiD5lwv0JC%2BWZ6y%2BZF%2Bbr1mUU%2FWpqur1JN9MAYCrVSCsW%2B3nriwhcOodv0PrP8TQJZwX8EpbX9PpCW8n20lrrUdQWuUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c49971a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9032,"size_decoded":9704,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae4bb54139d7236674683c6b4021ba66","sha1":"d81e40fcd0c971f67e4764a5a00052d75dae5d9a","sha256":"a907cf508611155935e4b46414e8b74dfa15ae3b43908c000c94857a2732415c","sha512":"2955e49bf631d36ada9703df1ff45b3cc4be7c0938f26789c09b195f0c223fa365aa59d88909e8bdda06283163cd066f5bd2b47e8bb3f0e94c70bbee1de15ab1","ssdeep":"192:c6HS31i7GLf8XjBotwc7dA7ccMwmJPUAS1WQgUTyu+0TvynCo:+1iSb8zuac7WccMFPUAcTgAyuqn3","tlshash":"ac12bf649d9bec0ab10d7a4df6046f8abc8e5438b51d95a0c98a32ec722471cb513fbc","first_seen":"2026-07-18T17:14:48.502735Z","last_seen":"2026-07-18T17:18:56.031777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/vip-loyalty-banner.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.364Z","timestamp":1784394856364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/vip-loyalty-banner.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c12f657e34a7c3d982fc13d58a6938c9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pj68E2xFCAkb8vEtjuP3a2LBpdDsrIe1ty31jQsOF9ifRyXzvg9%2F5PfXS85rH%2Bw%2FrFwg9SiJOjac2Ra2IMsfxVcs6OZ9IA6RqKrDLLVZuQvDI%2FEyHiLdUithifqi%2FDm0RVlouw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c498f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42996,"size_decoded":43667,"mime_type":"image/webp","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1024x1024, components 3","md5":"24384f3e4f451d6a2a70d722b8a42de8","sha1":"b8cd369c96c0245a586ec368b42a3295a0d965e1","sha256":"240aec470a80d06163d3c77bbb7c9d70e38a53f2a1eff2b169ce98cef18807e2","sha512":"70d1adfd2f23f374f1d9a01891507fb87567c32296177830dcab0aec4322e8d4b864a81d9da16fb88d6e2ef5cd59925a01f8095a85871f79f322a0881b4f1057","ssdeep":"768:CWCU0VDqnZlWrvbNyWgj2nUISYlqVDEZo9XXR10/cWYhbi4S+LpJ6LX:nCPpqqrjNyWjjS1N9XXR12c50LX","tlshash":"a013e073f3125807dcbed63add9b135af77b541ea34c4a7f2611283218617496c9e8c8","first_seen":"2026-07-18T17:14:48.503679Z","last_seen":"2026-07-18T17:18:56.033383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/tiers/gold.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.368Z","timestamp":1784394856368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/tiers/gold.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"765ad0c180d050273b6228008aa80e14\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wuvY6zugkEUIN1lkv5aHGOlhb8pu2YeZ3sxVDRr%2BJVtXCRTRx6PIwlCergTULt8qor5udQkWtluJao9U50V%2BPAtwcBketNvNnw7lvgvWapeRIi7gmd7Yytg2PsKao4sFV1KuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c49931a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5102\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5102,"size_decoded":5766,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e375405062a5151a67ae46bfb7d01e9b","sha1":"72d73635d7da0b0031307dcb45aaed9d7ba73807","sha256":"d5bcb6c98c40d42cc0f389d6e9ad00136ec5fb1eecbc1f0370fb52d428c37f08","sha512":"5e1fd41c0c351d6fb560623dfb407651d3b7e490a01f15bf52b99670e5519e37bf2736bfe1084b404700a0031667e4a5d53ae1c8acfe4a8cb4a74a97fadb8673","ssdeep":"96:Ji7Ej4MHMNcqU1mYzbQV57rR9UlZA96Jmgx318NQql:JC+4qTB1mYvK5zIZA963hK9","tlshash":"0cb18e11cce80566bfde7ba3861e21eb644e6353db32dca465a0df476701871d6fa401","first_seen":"2026-07-18T17:14:48.505699Z","last_seen":"2026-07-18T17:18:56.031029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/rakeback-tiers.png","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.374Z","timestamp":1784394856374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/rakeback-tiers.png HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7c857b523d92e79be0217ce4475e5c21\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLkr9cKfwHhfaZTvig6nIKmrAcecmw0MbFpAuLHoXA2J2zq8ueAVG2UB6uvkmF8iOHjA4X5ZEyJLDM0KC2lUgom5AIu3qr6kk9p7zNb1aMM8CDWxIAnV25p4q%2BE2pkPPk7QAug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c49991a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55570,"size_decoded":56234,"mime_type":"image/png","magic":"PNG image data, 1490 x 380, 8-bit/color RGBA, non-interlaced","md5":"eb08c85e52b0257d2d07568da26586e1","sha1":"915b18f6e67fd94aa53023a82a7af334db0d6516","sha256":"36fcec22fcd8fd5de8de38af0d27f5952062fe447dce21c8ac5ddd0c673b959e","sha512":"7bed8f1f709fc2ce2033061064dad83e3d96fdf8f5c11ecf4504fdf3f60b634b3d140e45a1dd66eeb505d40eb8dbebd84ad40dc8078d361c1c9b33ff9c129cbf","ssdeep":"1536:TMC9W/5VlSRIJODB6fIfL7elyFQR0Hrue0A:nIBVlg2a6+ewHrH0A","tlshash":"4c43e1b0d94241a3f46d91f7efd707a5333ffb925c500e2412e6a6084b917b23d6a9a3","first_seen":"2026-07-18T17:14:48.506701Z","last_seen":"2026-07-18T17:18:56.026475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/mobile-app.png","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.375Z","timestamp":1784394856375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/mobile-app.png HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"339b5cd314258c4e9c2eaf8c17e2695c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnTiX20xuikkGA7F1iF3Z05RNnymJ1vtbwcmteCP5%2BYTddPI4buk19v1V7PxAAevTqk09p7N11PkHWV4mHNjUE6FEei%2F8cyW9HCPfQ%2FgvtOVlO08Oe3Liof9CRihhtSJPJZfCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d31f2c599a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1208191\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1208191,"size_decoded":1208859,"mime_type":"image/png","magic":"PNG image data, 1603 x 486, 8-bit/color RGBA, non-interlaced","md5":"dc1227822f58aa2e84d0d0ce50121577","sha1":"65f902a1a7abe845ea6e59247ee62466dc6b65e8","sha256":"29b843911ea1e7aea6ebbb15d1270a8b203a80c4c6da4b8e58e7d81ecee6c541","sha512":"4e1da3d9c0b6b4050834dfa2a5493d6781065d2d9e6749d3daf1603259b319307f6228783e71fbcee71c73e47daa8b584774befd2a3068b0c7f743cf34bec4ab","ssdeep":"24576:8ihJPQH5W7moqKLjxRcmoMRS8YPnNx6mdp:5QH3cjxeKRG6mdp","tlshash":"212533f3b1fd1af6bd19a74b12dcc008ed8a0944e829fcb65ba1d4149b76262c821f75","first_seen":"2026-07-18T17:14:48.507898Z","last_seen":"2026-07-18T17:18:56.029327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/logo.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.525Z","timestamp":1784394856525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"26444b5873199fdd7e1e18075ef2b53c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrwW1eexqpYSOq%2FmVxqUD3MRSG0fAUo1HFCnDZ%2FuNnZq9MQ%2BSGGulHH1SEUBDqiRA8vqZfxENCsJ9PPkrQLbbdfWmmdbvCy%2FbQgVCgBirXVlKXtAehlDRORJ%2F4NkCV2ZIzppvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1d31f2d49b51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17408,"size_decoded":18082,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"130c073463dfb6cf0115bc5fd0f6fa0b","sha1":"f22e472c237a52b2e204ec17811edb53f2854fa0","sha256":"3f6f630067e01b69f9d6da9dde0fdb6016fcf1e0e8a0226fe6f7faf97e9abda9","sha512":"80acd0b237319e82f4815ac776e4b3ffd4aaaf9f177fb61fe2a2029dd3f6d971c11d481871641a9ad6fd16ea84637580721cb8c78cc3193af24cfba3d71b8be0","ssdeep":"384:cfwTDVtWmSxfNqk2p819fmvvS1p+a4I/U9Ve2iOsDfnxE8:tTGfIhpEEuAVHVe2pYN","tlshash":"ec72d0d9a372a34be24a297978c23fedf5dec460483605856660f3c7a4cf0c61ba3784","first_seen":"2026-07-15T08:08:13.893447Z","last_seen":"2026-07-18T17:18:56.025218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/img/logo.webp","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.527Z","timestamp":1784394856527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"26444b5873199fdd7e1e18075ef2b53c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wg48qiLkJ4P31EK6ysq0uvyVu7gdErY07imeJbs%2Fh%2BclpodTbanEOVrWKRTo42si%2B3UJDl7mVJ7%2FXBs%2FCa%2BWSBNVccWGz6MwhrfcOX9pMEjBLyJ5u8ee9U56f40%2BMUkRkJWciA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1d31f2d49b61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17408,"size_decoded":18086,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"130c073463dfb6cf0115bc5fd0f6fa0b","sha1":"f22e472c237a52b2e204ec17811edb53f2854fa0","sha256":"3f6f630067e01b69f9d6da9dde0fdb6016fcf1e0e8a0226fe6f7faf97e9abda9","sha512":"80acd0b237319e82f4815ac776e4b3ffd4aaaf9f177fb61fe2a2029dd3f6d971c11d481871641a9ad6fd16ea84637580721cb8c78cc3193af24cfba3d71b8be0","ssdeep":"384:cfwTDVtWmSxfNqk2p819fmvvS1p+a4I/U9Ve2iOsDfnxE8:tTGfIhpEEuAVHVe2pYN","tlshash":"ec72d0d9a372a34be24a297978c23fedf5dec460483605856660f3c7a4cf0c61ba3784","first_seen":"2026-07-15T08:08:13.893447Z","last_seen":"2026-07-18T17:18:56.025218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:14:15.762Z","timestamp":1784394855762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\npriority: u=0,i\r\ncontent-type: text/html\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1uvxJyQPoBww4TYV%2B7%2FVqGZ%2BVZ4xJ1AhUBWrzsGHauRc8yXvLKwGbuK9QRX7WCynEUhSrMjen59lz98iq917S5iGEiGywgOBVli88u6p0uRK77KWdQVVQgStRstegHOn47NCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1d31f2908c01a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44048,"size_decoded":13419,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27711)","md5":"ecd7b5ff117dab2739213422eae5e48f","sha1":"e40b841869df0265cc26d04bb9baf82b46335e17","sha256":"29b96758a1a902f8a0e7959c216f15e1fb5fc5c48b760c088302651bd0c0957e","sha512":"4cce6951835380b1a61602688868e7bd6ca88ac71d67d388f63f2dc434472f150a5760b7dc983ad57c8bd138dd646af65f47eecb7847f61373b0b8d6b3467d4a","ssdeep":"768:zmHsESz1aiNJJs51X9aXs/NG9pfrnOMsSHGOC797TvcpblCTHsT4Jh2B7WmLzYB0:zmHsESzTNJW51X9UsQDfrnOUmOC79cpH","tlshash":"79132c3b73c02b3b01f351e6b7c7b61bc2589049d11ce780f2ebc6a66695aa4c8752cd","first_seen":"2026-07-18T17:14:48.508977Z","last_seen":"2026-07-18T17:18:56.023692Z","times_seen":2,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":68,"connect":14,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"francerainbet.com/_astro/about-us.CFn9e_Ho.css","fqdn":"francerainbet.com","domain":"francerainbet.com","tld":"com"},"ip":{"addr":"172.67.176.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://francerainbet.com/","date":"2026-07-18T17:14:16.350Z","timestamp":1784394856350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"francerainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 12:47:42 GMT","end":"Thu, 15 Oct 2026 13:47:20 GMT"},"fingerprint":{"sha1":"F8:93:56:39:5A:52:49:BE:CA:58:E0:63:51:23:B6:6A:77:3B:18:22","sha256":"51:EA:2E:70:91:E3:06:8D:F4:04:CA:3C:DB:B6:38:DB:FE:B8:00:0F:65:29:C1:3F:9B:16:69:51:25:86:07:53"}}},"request":{"raw":"GET /_astro/about-us.CFn9e_Ho.css HTTP/1.1\r\nHost: francerainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://francerainbet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:14:16 GMT\r\netag: W/\"5ba57fd294c90b4670a7c1ee3c39957a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aM5EwmIktyomAX5jtZ1R60riGs3usIXQDYcEAg2aqY3dLJzQyFWGXLsz5uFUXPqI6%2BXMl4mivCAgvyZvIeUOgmp%2Bi7Db4XX%2BM%2FNDlwqXgATuaDXIeuNRrvN%2FsRHLo7pwp2yOPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1d31f2c29881a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16557,"size_decoded":5322,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16554)","md5":"e1cd8114d0a515b465cccdc1b78b7ab4","sha1":"df2c769b6b4aea93b9e420bb77138400c1aa10c3","sha256":"e25a011d4a9da1f04f1b5d5d0fc7ef92d5b38e3a2bfdcbf9453b6343e4c88118","sha512":"db765d9bcfb0794b87471d8ff41d5bc965237588b7b3f7598d0317a26ac59841da59238371df5d186e27080960d65b9d6db1884b751dc849a5e4a9adedf4cdef","ssdeep":"384:HJ15CiSnhf4MBhmV3orlrS7IM0CegROlh0zJ2jrEiwGgq8gigzIgLBgt58H/:IiSnhgMBhmV3opr3MSD","tlshash":"7a72b971b714753cb427e529b7c4a29d7110b412ca2b83d8fd82a674d8c77f31ab1a4e","first_seen":"2026-07-18T17:14:48.509923Z","last_seen":"2026-07-18T17:18:56.024603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"francerainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}