{"report_id":"e12fa1f5-14e7-496b-a469-bf67c73efcef","version":0,"status":"done","tags":[],"date":"2026-07-28T16:35:40Z","url":{"schema":"http","addr":"rainbetcasino.bet","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"172.67.195.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetcasino.bet/","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"title":"Rainbet | Bono De Bienvenida De Hasta €1,300","dom":{"size":52216,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47565)","md5":"59bbe0668bf9eac21e8a81f7ba018512","sha1":"c5502436bfa1530dc7eed22a1786c1c48c6ddb25","sha256":"635e7355b371174fc145e5e398a297caf353fcaf8f1a3c593210a3e691731a36","sha512":"677783cdc32c6f35adcccc0cbddc340a22ccca69d42bc608c565b4bc1d372ea9eca6800c7da660be8b422318a9d058c387aa783a0591865a7cbf0f7d91e359e1","ssdeep":"768:b2m6n7IInx7axrFQWDVgvx1JH2M3eVMdt+BlJxDNDFHYI2xBF:b2m+IINyLVI1JH2MJ6N54nb","tlshash":"81330836c1c46b3340a363dcf326e217f1c96095992983238debcba521d49a8d97d79f","dom_hash":"domhashf223d9499a3b9cf4a096e3f8819a58c9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasino.bet","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"172.67.195.35","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T16:35:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasino.bet","ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-28T16:29:48.113363Z","last_seen":"2026-07-28T16:29:48.113363Z","alert_count":18,"request_count":18,"received_data":226509,"sent_data":11634,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/js/index.js","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e52e7d82ce60b194ea4c851b4779973","sha1":"a0230c3f916b4f5ae9bc6ca7225decbc49bf0443","sha256":"518abd6604d7d61b98f1198770994e4e57424d311f199704fe9cd66d778e76ae","sha512":"c77e8f4969cfe7ec9ef73514fa3709f373cc64b1e4dfb54f10ae240accbb49f4e281d03a1aac3f7f8cd5f9638f585f7907a1ee302949de1ac92a029c80736bc0","ssdeep":"192:ZP93lZsSzpZYbd4Vn4jMAk65Hu86Ff6A1uJG6PJoycYQf86nQLqUQH6mK90jGOkp:FZTYR4VHSZDe7TadMNPB+x9oOPR","tlshash":"38422e382de01a5123079ffb7f63a0c9c544086fb941c4ebd51abda8bc8671be9e1971","size":13196,"data":"","first_seen":"2026-07-28T16:29:52.52072Z","last_seen":"2026-07-28T17:23:03.387872Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetcasino.bet/","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T16:35:03.407Z","timestamp":1785256503407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; path=/\naXBwXzE5NS42NC4xMTguMTUy=none; expires=Tue, 21-Jun-2033 16:35:03 GMT; Max-Age=217728000\naXBwXzE0OS4zMy4xLjcx=none; expires=Tue, 21-Jun-2033 16:35:03 GMT; Max-Age=217728000\ncntr_MTk1LjY0LjExOC4xNTI=NO; expires=Tue, 26-Jul-2095 16:35:03 GMT; Max-Age=2177280000\ncmFpbmJ_originn=bookm; expires=Tue, 28-Jul-2026 17:35:03 GMT; Max-Age=3600\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSqbYviy8tnz6gHCllUug0CA1E6jToLd6QK%2FmWe6eElF%2FrBaUdVTcQu2zHDGuNmhVaMg%2F8fjeyKSexb6%2BnLi1IxgTWIn5IV2UrZdnFO9uftcLDX6O%2F3XKvjTLfwBE8f0s8z48A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2254b7a6b49723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":42452,"size_decoded":13152,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41948), with no line terminators","md5":"2cf372484e6e938f6b05b95b13084718","sha1":"21dc4f31d97af2ad050c2a7f3d640513179f72ef","sha256":"b58c8eb4778bd7b281843221b6737005001ee257de5a213c34eca454bcd7eb8f","sha512":"760fcdaf6c485828a6f4321ae625951e0c626bde9c216d977038dc01db0744c4a379142378b40b4d6970c7b7253060109804c2e4c31a9d79843a4ca0f068dca7","ssdeep":"768:H256A7IIIVzyWDupvxxJH2MUbVMPt+glwxDNO:H25dIIIVfubxJH2MD6NO","tlshash":"0313c732d4c46b2340e322cdf756e307e2c4a0459a1d82239debcbda55d8a28de7975f","first_seen":"2026-07-28T16:29:52.508155Z","last_seen":"2026-07-28T17:23:03.378332Z","times_seen":5,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":401,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/css/color.css","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.056Z","timestamp":1785256504056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/css/color.css HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.bet/\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 12:49:14 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b94dca-266\"\r\nexpires: Wed, 28 Jul 2027 12:46:05 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 13738\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQgiBWHtYBxhrI1KmGIwsk7jN8WvJNFB39hPKM7QmRTURm7N9toCNzEntRlS8CJHU4SDGkvJNNgbNQSU1d7%2BDVwe190sJPShnm%2Flf9FFNaek65SSkaKHc6OmeWehU0XsfMyyjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7e5bd0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":614,"size_decoded":990,"mime_type":"text/css","magic":"ASCII text","md5":"754a1f041e072ddd80633137b8bd3a2a","sha1":"ae037c6882589a50f91a6e70a40f29dcaa477d06","sha256":"7a82d49d315010e3b915765c58d8dc31875124242e614bfb3083dc5f7392cde5","sha512":"fceed8bf2b4f90247e61b817af94fab33487bbe788a1734d83db5f0b66313e3b12c9447711510ea0984e0efdd92e0f8330c9deeeaff409284e96411b587604cc","ssdeep":"","tlshash":"c7f04902d26b1b1950b795ab73e7540f62f0231b5305fe69b3d212e04f4c1e8d8c3c42","first_seen":"2026-07-28T16:29:52.518671Z","last_seen":"2026-07-28T17:23:03.386757Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/img/favicons/favicon180.png","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.145Z","timestamp":1785256504145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/img/favicons/favicon180.png HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.bet/\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 17 Mar 2026 12:49:06 GMT\r\npriority: u=6,i=?0\r\netag: \"69b94dc2-2e23\"\r\nexpires: Wed, 28 Jul 2027 16:29:19 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nage: 344\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8SKJGa4v7%2FnOQvPFv3lM5Hq4%2F1EIA9k8WYwh7Ilx3P8ci5rUlcuJ%2BZvv3oO5xfeF8K6VObJ%2FvhLwaIt282luXmaqovhoIYGAkjODSLPxEMF%2Ff3BA7XsPcAbs1A%2F54YfqXG2sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7eebf4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11811\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11811,"size_decoded":12567,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"3f2cf897d3a2e155543a3a49a66829e9","sha1":"f7e9166369116c2966070302fc3c4ead7d810d70","sha256":"86cd5a67c4946f4108af6b11df26d4fa65537d80dc77943ae43c694591e4e644","sha512":"253a60f74aa13082bb23c45519aaf819739503c4209a7f2d3fa4fe4e7578578a809cc8da7d155d8b82dbf518678d57008f60caa84d03e4d53dfa5966ad7b7127","ssdeep":"192:1J88+5lvLEbwyOhF3HpHqLQPiliUINz/F5lZrU4bFWeC5QA0a6CZ1jxuTflTW2HI:788+bLEkrRoDihzDlZY4J/lav1jxuBSZ","tlshash":"2732c0c9a5001cf38f2e214304229e136be67bd1ee509210fe0a153e3bcbbb0b246765","first_seen":"2026-07-28T16:29:52.516569Z","last_seen":"2026-07-28T17:23:03.394651Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/close-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.162Z","timestamp":1785256504162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/close-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"60-64d37c2bd522a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jHeWBEkdHZaX2tNTnpOTAO8GBhqvnLplaUlbopSyVHSwIeIABMAmSslXyAzEdqosxBjh3id1vBo%2B0dScaeI%2FLDs7EXmPe14rtbGcoNTaWa2t0pyHwTas%2B6j9V9fDwLHVnkGLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7f0c00723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 90\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":814,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"cccab7fcb15ec469baf41d5149cf81c1","sha1":"1536cb9e46c9ad5c910fa49bc09cafdcdc11b1cc","sha256":"3232992e3ec0f46805f76e64011e5e19ba25a60532186461baa22de8dc114ae0","sha512":"61d8fd8abfabacb712c2dee30abb95a461d654693dec5cb068530855ed7b7ce14cb2b1f373cb2f0351832c7284b1997c9d83b1a2096429efe64559fb44078bef","ssdeep":"","tlshash":"01b012d3810835405109c352c719f230200223f8661608e6e408a6c01330b516c6115c","first_seen":"2026-03-26T15:08:13.508036Z","last_seen":"2026-07-28T17:23:03.385031Z","times_seen":139,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/js/index.js","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.060Z","timestamp":1785256504060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/js/index.js HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.bet/\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Mar 2026 12:49:14 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69b94dca-338c\"\r\nexpires: Wed, 28 Jul 2027 12:46:05 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 13738\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVWSOrljDgUx3NPIhAwDDnmBUSQadf7Gwacd9%2F58u%2FSrsYOmo1TzVzMjGVv4Dpx56VrHnrZJtlCW4vlNRsMueW9%2B2alCu9b%2FuSQbLhXrah34H2UeZUDO7iZDwelaGfkoKY1TpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7e6bd2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13196,"size_decoded":4906,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13196), with no line terminators","md5":"6e52e7d82ce60b194ea4c851b4779973","sha1":"a0230c3f916b4f5ae9bc6ca7225decbc49bf0443","sha256":"518abd6604d7d61b98f1198770994e4e57424d311f199704fe9cd66d778e76ae","sha512":"c77e8f4969cfe7ec9ef73514fa3709f373cc64b1e4dfb54f10ae240accbb49f4e281d03a1aac3f7f8cd5f9638f585f7907a1ee302949de1ac92a029c80736bc0","ssdeep":"192:ZP93lZsSzpZYbd4Vn4jMAk65Hu86Ff6A1uJG6PJoycYQf86nQLqUQH6mK90jGOkp:FZTYR4VHSZDe7TadMNPB+x9oOPR","tlshash":"38422e382de01a5123079ffb7f63a0c9c544086fb941c4ebd51abda8bc8671be9e1971","first_seen":"2026-07-28T16:29:52.52072Z","last_seen":"2026-07-28T17:23:03.387872Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/img/general-category/logo.webp","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.069Z","timestamp":1785256504069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/img/general-category/logo.webp HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.bet/\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 17 Mar 2026 12:49:06 GMT\r\npriority: u=5,i\r\netag: \"69b94dc2-2526\"\r\nexpires: Wed, 28 Jul 2027 12:46:05 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nage: 13738\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWF5un8QkpmdEvFNThV6XBE7lR5lJ%2B3QigfohldULzY%2BgRbvZANKAnDSNbVg5TLXIHy1Uz590u44basISb33NfiC0bar6lQJS2%2Bv36v%2BTUTdrJajZxajYiWqBF2wSxKVqRfP0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7e7bd6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9510,"size_decoded":10261,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"074f300d42ebe1a5fa482acb81854b39","sha1":"4acd1a28455c1d032c65968d465d92f5fa38214d","sha256":"0c00010d087eaa9ef3d6c9adbf97bc5fa73cd02e4c30a143e235a4d0847c378c","sha512":"bd6db040cfafebbc04160cdcfb3727c1deab7319b3bc50f33d1d8bd19e3ae7a2ba61c475a47e22f5f0f418052dc1f618b4aa9a522c1b954d3df647ee6f9ec2ea","ssdeep":"192:CwT44RVJ2IoU1bN/LKJVUp+bxuVIXX/O2W+vJtSECU0FGvXbsR43:CwT44f15iV7xuun/1ZJgmvXT3","tlshash":"bd129fd96b4e863afbc85d3194f036e3db7d26180b46358e0027eb245f3669536d4e90","first_seen":"2026-07-28T16:29:52.523553Z","last_seen":"2026-07-28T17:23:03.388901Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/img/favicons/favicon16.png","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.147Z","timestamp":1785256504147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/img/favicons/favicon16.png HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.bet/\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 17 Mar 2026 12:49:06 GMT\r\npriority: u=6,i=?0\r\netag: \"69b94dc2-196\"\r\nexpires: Wed, 28 Jul 2027 16:29:19 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nage: 344\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTFTvGIBR4O7PLDwgHFctpO%2BBTf3vk3BCrPJ6yRPTU8Jk5v85fW6lJLW3hyWbSN5ECVzk5uPUq872%2FHVBw41lYyEg5v12Xsu3t2bIsYhbXAx2xjUQdnJizYG3ktyn8R7h2V%2Bog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7eebf5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 406\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":406,"size_decoded":1153,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"136ec2d95aa35261f462201c41d997da","sha1":"39e593aaeb15fec7f3d7a889a3af626fd08b31ad","sha256":"53188cd62434bf6936ac457c55d97bcab9ff4bdf5921b2cd933809af37c4bdff","sha512":"ecd5ebc5b95d2e12de4752840732ea4f7a1a2a4ce844b176055e76c9a393a0c148d6da4a3ed78eeea6be9d74971fb5a1b56df25fcffed22e50185f76fdec6226","ssdeep":"","tlshash":"61e0f1c336952d35c8332214560527889ee1701d000635901150b02e1a09f9ebd799d2","first_seen":"2026-07-28T16:29:52.505644Z","last_seen":"2026-07-28T17:23:03.395582Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/footer-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.151Z","timestamp":1785256504151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/footer-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"1ea2-64d37c2bd522a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDVaZnw0G3ZSsmDuDUWUidc6vSTBiyBtdcEdTHis1fg8P6V3DeMg7Z0ENkAquTfz7T98%2Bn4bOTl0iJs4fs1GTrRYUEUPuzdCqqxQHrcdkZSCiczCWXMXCzSeuDzyAIsbTZPiJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7efbf8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7842,"size_decoded":3934,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"0703446073fb5d3a42d907da59741580","sha1":"cac46c2a2cf9ac6f6253cbaa37aee13c55799e83","sha256":"11421ffbd66e3e6f72aaddce7e361fe248e9061e657a5c8b6501cbc315d7134c","sha512":"0d8952c1b2ff57200fafb198a71677317632722ea1c3421e2c1e9990e18749dba7399e8db3951c232e4419d0aadb2f3f7c19ec8fa65aebb3bf639d315f5934c3","ssdeep":"192:hWn85lFkcrQXzMXyIBm3zW8eCUnkZEL3UPrWnkng0fmJnLViY:8ilFkc+VITis3Qg0gnL9","tlshash":"6ef10169c394d3b4dd5ec3bcca31b8b4788f14be90f1e31896b58470b2629d8d19d8da","first_seen":"2025-08-04T07:32:41.122321Z","last_seen":"2026-07-28T17:23:03.383789Z","times_seen":89,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/scroll-up-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.155Z","timestamp":1785256504155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/scroll-up-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"1aa-64d37c2bd522a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hxh3sScR4GTR2F%2BJ0IdMyvTPzG0%2FSmh1u4hBm9WNJtmKBNpFlB74k0owZ9Gh522BrqGMnkAr%2B2jSZn%2FZCAvsX0Pb5V52HueyV66CxCV0qzUyqQ8eE2uCBb1NSPvORx8jIkQ0Lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7efbfc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426,"size_decoded":996,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"28e15b14cc556d9623e23a84510143b4","sha1":"30b09b48f35bc0d979889ec3b43943920e694225","sha256":"84592618444d6edd07ed0a65955c8f26cd3437374fa61b2bb98658f78c646b47","sha512":"b1ab0da334819a9bb6f014041644cbccb068c29a4cd5be978d6070bf6044d304f82850785158c839513c9bdca079d27fc63f26c9c656e77dcef4ae9ecd83b402","ssdeep":"","tlshash":"93e0e558c3f283ca8d88c29d447960137c8292f2e52352c8a81b4a161cdf8e51b90bdc","first_seen":"2026-03-26T15:08:13.512583Z","last_seen":"2026-07-28T17:23:03.390099Z","times_seen":99,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/trust-useful-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.175Z","timestamp":1785256504175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/trust-useful-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"3fb-64d37c2bd5612-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCzxEk7V2e4YXkCbr%2B%2FIUEzrORrqXuhpIFgpFtK12maOSHmx8Rv%2FmsJcjuHv1R%2FIVCB4XfkPDe7iALo9WHZm5WrTn05%2Fn1IYPIcVe6knrqJcUAGeDSB%2B2NM54jsHxHfpz4Ajdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7f1c08723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 579\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1019,"size_decoded":1311,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"5b6d33c4c41f80da03f38e2b4dd2eb5d","sha1":"1f40bba951a080d7b1b297dbf670f7ba422093bb","sha256":"005a0f499b097cf20de2775844b0df02958d1e3fe1ef01c151b5c9b1e552e885","sha512":"ca0b305ead8b238a8d92c96b816ad73d4b8a5777a82f4f261cd5a0cf56ec35bf63544b1e3581f1b318db9ec9e717a985556dd21857b24c0a7482cd652969f1c3","ssdeep":"","tlshash":"a911f0be83c8a3dd704b4725bb2ed4a8d32f84ad71a852990a6edb646093140d647490","first_seen":"2026-03-26T15:08:13.508762Z","last_seen":"2026-07-28T17:23:03.391305Z","times_seen":36,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/trust-share-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.176Z","timestamp":1785256504176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/trust-share-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"1ae-64d37c2bd5612-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUXA19K2%2FnA7lDDqwPiniJSYnPjCRnBARTbueeCNnLx3rSF%2B3AmpO7bkEEdivZElU%2FKazrH6ErjKhraoIZqsplb1ieRwMIW3sFhFVik5QBttQX8EjKrZYdAXCJ3iJPzQZVgogQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7f1c09723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 277\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":1003,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"32bb6a833bd4f47074938853ae49b8a4","sha1":"aae8f0db6713f5369e31160a68082f6e11b146f6","sha256":"f4e5e5aa63c77af58fba55a8b5cb950b87b62ce30ba4dc70185f513561bdd1ea","sha512":"05471a443ab40bfc33a2e788787b467a8776174aee05bc2c556172c71f7b1a795f27504b40c0b9bc7d13eb35553cc50a7bcc00d620925c8dbb2834a00bd222c7","ssdeep":"","tlshash":"e7e023624e8d17ec5443453cca6fc841135ff777766c00b995dc79791417570c4679e4","first_seen":"2026-03-26T15:08:13.51576Z","last_seen":"2026-07-28T17:23:03.399243Z","times_seen":36,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/css/main3.css","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.058Z","timestamp":1785256504058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/css/main3.css HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.bet/\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 12:49:14 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69b94dca-d991\"\r\nexpires: Wed, 28 Jul 2027 12:46:05 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 13738\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6N4130ybUQVYsLGXT06%2Br1IV4F%2Fr68%2BBGCGd4IrCAgCWU4wRiy3CXLLq%2F5COZVbq4EzzC3fz3MesVXUfLIjabTtcrCqG%2FGY9s6qiccQ9%2FwkUcbBGzb%2FwdpJvfmq1%2Brhk%2BgFKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7e5bd1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55697,"size_decoded":10710,"mime_type":"text/css","magic":"ASCII text, with very long lines (55697), with no line terminators","md5":"7ac635ffe0c8a24ac07be4ac517dbc29","sha1":"f4e053b4e7b170ebe7db34672fc1e484105c403a","sha256":"dba1f7da04be5b2ca1559c1a5bafc07111194e5ade4f826c7aeec67738b8776d","sha512":"ea0aa9a908d887e2f98c8fff5968b896c256e23e98254ae3e8081c53c781bb7537dda2e030f55ac8386900e1263c185ca30781c70e97ae3007efdd1153e455e3","ssdeep":"384:zvO6hDRAX/hjpZn1zl/qSsH90+7pPdlVBYhCSgJav2KKBt9j9e9v9S9j91He0oDg:R8qjVlJaQHmqO/xZieDoBv8c5","tlshash":"8f43872937103268a417e16973e74b895339e010e61b12fdb9a36195cbcb2b516b3fcf","first_seen":"2026-07-28T16:29:52.510247Z","last_seen":"2026-07-28T17:23:03.380064Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/img/general-banners/banner_1600.webp","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.071Z","timestamp":1785256504071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/img/general-banners/banner_1600.webp HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.bet/\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 17 Mar 2026 12:49:07 GMT\r\npriority: u=5,i\r\netag: \"69b94dc3-10492\"\r\nexpires: Wed, 28 Jul 2027 16:29:19 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nage: 344\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrCK3%2B8iDnQz%2FTidRJ9VNqoO1b2o88hFUt0%2BAMLmzfBajyxuYsHffBKFpx7lVHBFm5qjrQYfYW2FIUJ2bVgVutj3lNX0wDGSkYRL%2BkQX0exW1VjGrwLScG6GyP7CRAm%2FiBrq1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7e7bd7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66706\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66706,"size_decoded":67459,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ef090cf8aa74644005097a0f58f27da","sha1":"38dea4182a64dbd38b0e82de547ef3542059f025","sha256":"a31128ad392533dce8260dc0ea329ae2c76bff1c9573ec583c99dc6ef6aaf7a3","sha512":"de6f7e4f876a68cc5e9242932683328798b2279c74dc6f6cd1ae46e5c48494679fc5d9b361c6a5612b65dc8ad0fb12563394c4255386bbfb68bd89cca159cd9d","ssdeep":"1536:YgLrxaAUcmPSHFK/5LwUgJWOS9bVdAHMwdM+bPV:L0mm0w5Lwi3bbSMInV","tlshash":"005302e6edba40505558fdcd001f9d0732b93efd282bd1aa03ac35d53a426c3ce6ac68","first_seen":"2026-07-28T16:29:52.512371Z","last_seen":"2026-07-28T17:23:03.382541Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/bonus-arrow-desc-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.152Z","timestamp":1785256504152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/bonus-arrow-desc-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"1a3-64d37c2bd522a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMZH4NecBAF4teT80llv%2F09v4UMZGmrmM6%2FtSsqitzK4eyfFwdcGX7ME7%2BPwgZuQx3kfkQDqG9t5nmgatTdWC3VJ34NSdaVjlKI2HPPD6Op%2F9xol2g%2BNCqWc8cMjQ7dzhzjX0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7efbfb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 241\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":971,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"fbd58b150afa2847dcd087c933e92cf7","sha1":"88a351585a2a71c42ef0abe6ef794c67dc559545","sha256":"10791fba9365a1459d60e0753633f4145488098f4f374b6fe3fbb070484a2a38","sha512":"daa17553d2212ceb37c852a4e8fbc0e6d2b8f86bfe7391251340326f3108f4b08c8148bf06be2e9e14e02b6ade746fc835258a8b9e664e03a5a74ec4057ccaa4","ssdeep":"","tlshash":"02e0edf6961923807e07a7550110d63fad2f32efcabf28888250a98027011210c6ecaa","first_seen":"2026-03-26T15:08:13.511783Z","last_seen":"2026-07-28T17:23:03.396595Z","times_seen":101,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/nav-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.159Z","timestamp":1785256504159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/nav-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"ef-64d37c2bd522a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FN1t3yTzhkuDD%2BQRgbzwU%2BMOZKup9ur%2BjVCoZNFsiXhw0hzAZd%2BiTU9BzuuHhEYk0pfnHGaLAGxsXiCk5miGwW6wlqyEzzCjwGTtrRy2Pny8NymQSHLqRvwQkN92je5TKIve9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7f0bff723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":895,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"9ad69d37049e6c62f9280188f2c89ade","sha1":"88d249bd0ffb765859ef0d48bcc412d780ff762f","sha256":"a6a56d1a88e78af0a11b91a4f7dce9b6a47189b77aeff95d95f31ba00f3ed39c","sha512":"3b8e022c5324d5cec346b6c76252050b1fce9d3d3b25815da0e206fa80767f0263347d18da18b3f75b6ff7eb1f35072d129321444869c782a8b8aa067d0e5b72","ssdeep":"","tlshash":"32d0a7dad2283540421a274dc01c7794732521ba03e6d31bf0526ad57858c7166e5718","first_seen":"2026-03-26T15:08:13.513301Z","last_seen":"2026-07-28T17:23:03.398417Z","times_seen":101,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/trust-flag-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.186Z","timestamp":1785256504186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/trust-flag-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"138-64d37c2bd5612-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jby67Y5c%2BoaCcHTPcWS0zDEhuoPnBNmcrOagjmYbqmFKZhhGMUc7BLFIFbYY0opiEwWrRgV%2FLl8hF79VZCMCUxF9qTWkuzyvH%2F7cXu9DhkKNyB4MwgnI7zGn%2BGqQhwAP2TDjfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7f2c0c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":974,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"6f834883c1ccc4522b416727b0111b16","sha1":"b4ef1db33bd7838ae57b667f0b2765537e1fdcad","sha256":"056d1f501c39b5875c1d3f79f90962cb66fee64a520ad89c679a4bc5a9dbf53c","sha512":"5aff476e5ac44e8e7c9bed5a701326ba5baf8e819132eb01087619aabae25bbbc5b705f0bbda4786a845624d6e395d617e0f816bfa550837e6e84981f7bbbb09","ssdeep":"","tlshash":"41e07d3523cefd083a9b8434d6b581e1f026a14988880d84a0b07e56d470ce169e82a8","first_seen":"2026-03-26T15:08:13.516556Z","last_seen":"2026-07-28T17:23:03.392455Z","times_seen":36,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/close-form-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.164Z","timestamp":1785256504164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/close-form-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"247-64d37c2bd522a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9sX56q513tIWx9SFPP5c7ZY9yagyzNek72zNam7qoaI5yQrHOLRmIWX2yBYUSk%2FxZmI9DRj%2FaE838vJbqwSB9sqi13EI0qpbW%2FylCuClb85ikYEPg0ZOHDG70T34YTPTRqjfEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7f0c03723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 241\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583,"size_decoded":967,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"0ab0e5bd5d2a24b6ea14f9fc8ac3f2ec","sha1":"0d1285f145e9bd1411aecc678aa2acaee861a069","sha256":"8a3af223d8a98cc701f1c0f29627aa86739927c49e2b21eac078b535d2ac41dd","sha512":"ab2d83022b5e385a09276d336b9fe02d8ccc8bd9a1258fe1632bbb5195b817451816cb89f4cd09ad62ef07961226a93904337500beb8083ae78723ec578dd003","ssdeep":"","tlshash":"b6f04fbe85e61885ec5acbd4e62c0413bd030afbb982d91882909b65e3312715c5eca9","first_seen":"2026-03-26T15:08:13.514132Z","last_seen":"2026-07-28T17:23:03.393623Z","times_seen":138,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.bet/templates/rainbetcasino/svg/trust-local-svg.txt","fqdn":"rainbetcasino.bet","domain":"rainbetcasino.bet","tld":"bet"},"ip":{"addr":"104.21.20.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetcasino.bet/","date":"2026-07-28T16:35:04.173Z","timestamp":1785256504173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 18:05:35 GMT","end":"Tue, 01 Sep 2026 19:04:04 GMT"},"fingerprint":{"sha1":"2D:23:E5:63:DC:74:E2:8D:E0:F9:1D:8A:1C:2D:85:53:92:4B:19:C2","sha256":"CE:F8:F9:67:85:A8:A5:6A:EA:0A:DF:7D:B2:D4:AC:9C:07:D6:AA:6C:7B:B8:B2:36:0D:FB:B5:32:CE:83:DC:3D"}}},"request":{"raw":"GET /templates/rainbetcasino/svg/trust-local-svg.txt HTTP/1.1\r\nHost: rainbetcasino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasino.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbf6991df1d3f3b7c0215170271a6eab; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzE0OS4zMy4xLjcx=none; cntr_MTk1LjY0LjExOC4xNTI=NO; cmFpbmJ_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:35:04 GMT\r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 12:49:05 GMT\r\netag: \"401-64d37c2bd5612-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhJNvemGAxU6Vsb55QrckmS9gR2XmIsbVzHWPP35vQ8zl8ojTfWlJAciSttfsBnBGVmeXS%2FNxPSFUmKvDdfbS1%2F28%2BbXpyCguu%2FkvU02iNjEo7hqzPjDeCUGqv8MOkUyCUkeEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254b7f1c07723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1025,"size_decoded":1266,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"128e4fda9c5273c26c7ff09e5c6257ce","sha1":"f3720d5fc9baa8f7617ef1d03c933326cd2397a8","sha256":"020a81dae825fefab1db76e50f6c10dd1759b800bc44abd6025ab326dd6c0778","sha512":"44332aac7bb2c8ace1f80d4953f7103d694ab0d162cbf4f49ea38809a51915d12fc8b8ada0af1cd38d3b5bd5a8720804522eda3a0a43617504c41a7a4a914821","ssdeep":"","tlshash":"6211affe0a98a54cb407e73c9f3bda90b31e70ab74108944ca5dc6ac65069b0e747058","first_seen":"2026-03-26T15:08:13.514985Z","last_seen":"2026-07-28T17:23:03.39754Z","times_seen":36,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetcasino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}