{"report_id":"e4da2e7f-79df-44d4-a677-1049f962f673","version":0,"status":"done","tags":[],"date":"2026-07-17T09:16:34Z","url":{"schema":"http","addr":"rainbet-cz.com","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"104.21.83.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-cz.com/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"title":"Rainbet Casino Česká republika 2026 | Hry o skutečné peníze, Rychlé výplaty \u0026 Bonusy","dom":{"size":156653,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4520)","md5":"62a3b29a2efcfad4cd5f9066452c1451","sha1":"91f15c83175d7d461650d76ba193245e2aed0c2b","sha256":"74ab4205c6da38a2ac72112bcd6c25d56b61100496ee54cd21dcf82c76566fef","sha512":"7009cc4fd7e08083ce8ecdfe288e7d049046a551c34db35c9ce586c54b5043061babab0f9a09e02cd5ba963eac7fca34896d1c64d1ef1dafa388c934cc8bb779","ssdeep":"1536:NSuZ/NYPnzdFQzkWEqMv5q6TMpJQDHo9xk2YlqeUyE+fjKlQse:NJYvRewJPv5aQDHUxxUSCGe","tlshash":"4be3e7ad26f159a7048742c62f725f0a3ee6d613c9164a40f6ee4fc90fd7daadc23409","dom_hash":"domhashf9677870aa4cba743f9bebea8ee9a459","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-cz.com","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"104.21.83.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:16:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-cz.com","ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-07-16T11:19:33.959188Z","last_seen":"2026-07-16T11:19:33.959188Z","alert_count":294,"request_count":147,"received_data":4080774,"sent_data":84904,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-cz.com/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6898998306f0c46a2cb8f2395e253053","sha1":"591eb27559ca6d6c3118fd3881ba1b7b9044f6b1","sha256":"3ca6bca2175a4c764771e08bed7019e796ad74398d9244683842e0e6d57d8b8b","sha512":"b52db8e4cf0eaa402812c2403ca29cf02eadd8fbcaed39d955992e52aa36f0d7d63dc19980b96d668d1e75d3c9f3f33aa636ddbe6ffbbe318c2bb0fa85a05fd8","ssdeep":"","tlshash":"e680000a82020a02202a228c28c230800a20002a3b220ba0028ffc08220a0c880c2802","size":27,"data":"","first_seen":"2026-07-08T02:30:26.37487Z","last_seen":"2026-07-17T09:16:40.374574Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T11:43:13.928122Z","times_seen":399537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/runtime.js","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","size":2001,"data":"","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-18T03:24:45.617029Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/app.js","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","size":46320,"data":"","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-17T09:16:40.316879Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null]","filename":"https://rainbet-cz.com/build/frontend/app.js","line_number":2,"column_number":42616},{"level":"log","text":"cs-CZ","filename":"https://rainbet-cz.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"cs-CZ","filename":"https://rainbet-cz.com/build/frontend/app.js","line_number":2,"column_number":13046},{"level":"log","text":"cs-CZ","filename":"https://rainbet-cz.com/build/frontend/app.js","line_number":2,"column_number":13046}]},"http":[{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/app.css","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.266Z","timestamp":1784279764266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /build/frontend/app.css HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/build/frontend/app.css\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"djzbmgbyv4uu1abu\"\r\nlast-modified: Wed, 15 Jul 2026 17:29:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5lALKm0Ctj5znTQJqZNarkdxtezJmJ%2Fs6qTk%2FfJ%2B0HPT5paa8aMwlQcLwDKzpXsnE9EFWnL%2FG%2F%2BAGxL%2FU64claYE1X6Ll095nsPpMBkOqDQ3GE6lRE3cCy9n39E85Zyog%3D%3D\"}]}\r\ncf-ray: a1c8254ea95d4c11-OSL\r\ncontent-length: 10711\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60042,"size_decoded":11757,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (60041), with no line terminators","md5":"61be98fc944fb5090319b5a3eb70944d","sha1":"5f59d95601339cb119dc2a95b4b6d7566b782b25","sha256":"807ac564fede78a003f7130770bc5ad79c49aa87b2bef4d7871a439066652d86","sha512":"55f8fd8758b61edeead3649ded948307f51e56b4f784123e3cdf6bb83502061340fadab10979868ec318236870836501be7584ea01aa7254abaa436da60075ed","ssdeep":"768:LjH653R7mmHV10ms/rfAmZrJU00UEIp2L7BvHgHHKM7:L+Nmm1101rJUVUEIw7JHgnKM7","tlshash":"464364233649603db03fc465a8d0a6ad712cd417e76b57fdee62a174c9ca2d31732b88","first_seen":"2026-07-16T11:19:42.049629Z","last_seen":"2026-07-17T09:16:40.15578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/dewdrop-doll.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.337Z","timestamp":1784279764337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/dewdrop-doll.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/dewdrop-doll.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khg4fr1459g\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvZNS559JHpOk2ntRKoTPzYo8wk%2Bo6%2B2HU61aA87XG46rU0rNMoTTPU11jr27lYQiTvtXQCO6Swzq6%2FumnlTpo24tmytH5nzl1vceCrZBL1CTNaZdBNi4CnQB5fijvYnmw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f199b4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6820,"size_decoded":7832,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"4299ae8c0841863691469826256c3fa6","sha1":"09dc5c287b5d39509be9e2fc5a04985956bb3b0f","sha256":"250609ce07da98702c680d064e71396c3081b00b23d6467a1ddca839dc792b31","sha512":"c9f6be1fc1407833ab3d32bbdf8a34464045d64d0c40f2b2cf92c1e1ec58f9004bc26c369835348c91cd8789672f21a2b767700ad3cd119735ef24e095b3278a","ssdeep":"192:FXNZQ912BtuOvLLsWj042zy2vwsLqel8q:FXN412B5v/fj92zySw0Z","tlshash":"a1e17e5b7698dc5ac73ec935036eb3563f749fd484514b7f16511438efb60670a902c4","first_seen":"2026-06-08T00:51:55.721209Z","last_seen":"2026-07-17T09:16:40.158729Z","times_seen":3,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-2.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.354Z","timestamp":1784279764354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-2.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyaenwk164\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJswTvCjlsQ8so4ptYmt0%2FJcq4qGTOgFocwuRw%2BbUFEiGsEuDMB94IscBywiDAq%2FH0kflax%2BoGsuyA1TAEEl30tTuty%2F3AGpbNcU3r8%2F6YjE%2FsGGrTVYcNnbE58uyrxeqQ%3D%3D\"}]}\r\ncf-ray: a1c8254f39ae4c11-OSL\r\ncontent-length: 775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1809,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53eca9a29b8da20d28484c8d01e514e8","sha1":"1f1d6484552d99f175d7041fcf7976e1efa933d5","sha256":"e17ee8d46394ea794efaba9a0f57838f089e8de8f7a644e88fbd8884c901e1a7","sha512":"f55ab27f3394237f313f627c7f15026fffde59d29090b0efc32fca2bd5d791ecc22c921e1a84edaa24c9556bd3ed13e230c6cc2e5baa85bd515933cc5b0d85a1","ssdeep":"","tlshash":"273167ff03cc72e0f402dfe1d81578667ea638bf6e15d75e8255b920b51126f0588884","first_seen":"2025-09-23T10:56:20.511844Z","last_seen":"2026-07-17T09:16:40.160251Z","times_seen":60,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-12.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.365Z","timestamp":1784279764365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-12.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-12.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy39goa2xs\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbhSd5M%2BOUul1g6I%2Fk%2FkyvOgO86tQG42R29bFfhwjxrcpjpCsoEJ6%2FJdUqy8M%2FK0SbSfyEz61TDLit0usUvI0RfOQ1iXXkWtpSUAejyYdWVZy%2F1%2FZvZl9CTVxP3%2BSgUPjw%3D%3D\"}]}\r\ncf-ray: a1c8254f49b94c11-OSL\r\ncontent-length: 1704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3808,"size_decoded":2742,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dc1b0be849e1a76c39d73119c54a4f2","sha1":"ff8c4c594605b5cda33a996ab2517c08639c39db","sha256":"65825152ab6d1b8d197cc531a0458467374105a29935f430f2de99b9b7c5925c","sha512":"b55f9fcdac28dd4f93e13cdee62019222442403ecf69e7c7a6012920dc52e8a5f6ae6576f82586e93a265af089d970f5a9878e27479df89eec40e3dab08f84b6","ssdeep":"","tlshash":"a97163ffd7c8a3f0940ae7b4ac13447a73ee3c7b77269b4543808694e75519888cc840","first_seen":"2025-09-23T10:56:20.252423Z","last_seen":"2026-07-17T09:16:40.161673Z","times_seen":60,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-17.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.370Z","timestamp":1784279764370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-17.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-17.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy80xht2dl\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12bqTENtcxfFWujsES7l1knYHzId6N5o47yt04lGF%2B2s%2BqGKn7BeJv6pMFWg6fdzA29mwTprul3kiQk6YrX8ra2AH5BCA6S7JvlHLyybxAl56PvQSqt6tN%2BBPUWHSMPqQw%3D%3D\"}]}\r\ncf-ray: a1c8254f59bc4c11-OSL\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3081,"size_decoded":2384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a2291bc6bfb22a5f5c638257eb08e3","sha1":"6c615add4351ebda719a8921502723751431c469","sha256":"e29394ad1cf34b556b6de5c10afd62964807d19e0494cb8137dadc003f333911","sha512":"72fc5b010c871b0b68bd640ffca2f92bf6d1bbad3d77b772bf661c4d94413c703f060f43eed2b288e18dffaa22bf198196846dba9dd880f975d4d42461aa957c","ssdeep":"","tlshash":"e95166f263da62d1a90feb81a4169833be5e3cbb3b5ad74dc1b0e744b652154c44ccd0","first_seen":"2025-09-23T10:56:20.373094Z","last_seen":"2026-07-17T09:16:40.162871Z","times_seen":60,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/rock-climber.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.199Z","timestamp":1784279772199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/rock-climber.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/rock-climber.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khwnt5jglwa\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkV67fqJrHOsPdMaERVDBjqxsORv%2F0fKChZ7m%2Fa65oYyPmy1P0WIFvwmvp%2Fu1eN%2F8BDyRz9lSoaXgdZoQfFZ9puKKG%2FtVyvFEMs1H6UruF91RxCW3Xn1sDYg3a31zOci7A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8258038284c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28378,"size_decoded":29392,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ca31b27c2abdfa2b51775800b3ea3518","sha1":"38816f04154ca07922d8407cc234e5d4fc600dba","sha256":"0e6f16b200bc111b24f4d4fef05a18e597b6eb4672b0452b028256b8b249471b","sha512":"62b64b9ddd7ef5b515038255aa49f85684d497066fdb63dd9598cfc41d2c93217de697b5163240900b03e867b1bce6929b73e418902ea731123cd30bb0b3601b","ssdeep":"384:tqFdySiO/ymu58nMoqKF0R4mjKKgNa11l3UJTktL6byWM1SimMo5vokjJy+StF:EbFlu6ryJj3g43Xh6bypVqvXJyTF","tlshash":"85d2d1b35c6b473dbf28d1b53128641ae224fb4968da02231811f6739b2f1b9075c5de","first_seen":"2026-07-17T09:16:40.164266Z","last_seen":"2026-07-17T09:16:40.164266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/island.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:15.091Z","timestamp":1784279775091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/island.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/island.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:15 GMT\r\netag: \"dh52khs3hj8wi4z\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29hWOtYrTsD8TnWyhABxminZPbrJKNpi9%2B%2Bupxb%2Bi3AJl6wgTVghmZVLd%2Biq2yq4BbUZHEpcYXUaCKEyZWGiGe5v5AK5qPujldwACekrU9Xyj%2FtFBDmH1nCz8U3I0lBY%2Fw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825925a3b4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23507,"size_decoded":24517,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"a76c705c7dd7837d579b22d8e233522e","sha1":"5ef3cd8502b6194ad9280436e7a82d9a30ab2b45","sha256":"7c02f4e03c76c104de0bf72975b3e75357b07c944d8448b5b33f4c6eefdd580f","sha512":"09c96a098b9a912f509178a56bb1d259dd817957ae4b19133ea0e3df483703f9412ba701c7ae1ff535fde623a4d33139573b13d813697e83a6aa1890229d0ac4","ssdeep":"384:VwOLqj74fNxguw2TXmlWJnPt+DA8tSwsISCTtA6/w8KhqQl82eVmC:yOGwTsuH0Sws3sKQsdesC","tlshash":"b1b2d0416378f91a9d097c33cb86f06278ea77143669a8477c2781e2a3b4df88393365","first_seen":"2026-07-17T09:16:40.166868Z","last_seen":"2026-07-17T09:16:40.166868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":460,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/cricket-star.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.316Z","timestamp":1784279764316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/cricket-star.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/cricket-star.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khmsyug0ou2\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FWB%2BBR3u9xFXvbsg5wBe27Ezhtjxvm4CANq0WEKDGqidJ72vCPlRvyJdOW0dMmE3CrFRBtu5lK0f4mgmVTiVCdlJb1Q8AoSOMBfcRw8rNpZZ01XXE1FN%2FV3wbOqqHk4Ug%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ef98b4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32186,"size_decoded":33194,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"c6f03d23f3b5b2f97505d39e32e34ef8","sha1":"77547294be5ead39532468691e3ae118a3e17cfe","sha256":"9be9c9aee668933e5ab4d7b2b27feaef1a439fb054e188265cf834b904af7cf5","sha512":"2d142b68677b441dd65c579bfbf42b2d78c331a8da361dae45743150594d04b4e22388d5ee9985ac0709e8bd04e5206c2a2d51330507d32398b9cabc85439085","ssdeep":"768:0L/ZjdCR5FlO2cDc3Jv5h3vV071iliMIBH9crMCWqqOWLJaMu7X:4/ZgnFlO2cmJxL0pqmCWq4Mv","tlshash":"c7e2e1805d7f3015f83a35bd82affc9b59fd900af4307ed720920dab6a161399836b58","first_seen":"2025-12-20T02:09:47.726655Z","last_seen":"2026-07-17T09:16:40.169251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/winner/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:11.719Z","timestamp":1784279771719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: cs-CZ\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"938\",\"764\",\"627\",\"396\",\"563\",\"913\",\"497\",\"314\",\"905\",\"861\",\"868\",\"187\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KK5ZKlBHoJyXwkIbblXX2B1aluuFR8SZsu7fGrTL76b9aD9fEd1QjeQ7eg3bwzQsc%2BK2M292WI0qKxXbVaatVjbL6mYQnbSmLygE02gHM3h2417O4FP0ptyRTPFCSAuELw%3D%3D\"}]}\r\ncf-ray: a1c8257d3fca4c11-OSL\r\ncontent-length: 207\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":526,"size_decoded":1186,"mime_type":"application/json","magic":"JSON text data","md5":"0da84cfe392e65737206df915e9d04ea","sha1":"1c4cfb375f106a40cd700eb7f244832d1db62b59","sha256":"b7ed2bd4cf6dabbaf69e908d944eb3603cc8cc78a6e21aba02be8a2999b0462f","sha512":"f9282ee0eb50132e6bbac3621691c058ea7b2a8fca1822b07cbe1fb9775942a616fdbff59c8e9362b9526fb1dc9b732a375b6da046bce0a4d3220f667f783ec7","ssdeep":"","tlshash":"4cf0a042aa11b23fa18b50c0dc73decd2055e952522c0838fdff1aa1c7326206e9870c","first_seen":"2026-07-17T09:16:40.17181Z","last_seen":"2026-07-17T09:16:40.17181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/zany-zebra.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.193Z","timestamp":1784279772193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/zany-zebra.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/zany-zebra.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khzb2hxwjvr\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kf2s0oCOp0z6i95Iga5DZOLZ3yG45BFoCNlr9j2NTnjPGJtUyLtZClmeXKm7JdkNUBCmkGOBhANXKvLuX8Ho0CWClt7YfugdCO78fx33A9RY5xrqG90bmBhJOvY9TknJoQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8258038244c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25767,"size_decoded":26769,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"faddc0f8395128039bc3ab0eb30fff77","sha1":"497a6e2700dff2e48b2acd5e5195807451a21282","sha256":"5d8dd8581210d2e2867ea7bd2d49f2e64c0c076b28ece2aaf59e296de674efa2","sha512":"56b9685259b10ac37613872b45e46263574316b996faccd8e1911f1fb69c9384e4e3c540c3998b343af5ee0c512305d73fabea38b77bd5ce9a5e046df00e89a3","ssdeep":"768:q9Bmp4R6Yhc0QJDWEfTtFXQY1W/zlGbpPReDKG:cQ6RZhc0QBWE/l1uGFRe5","tlshash":"70c2d08a746cc146cf2d5f36cc039e4a9340def4a695c1bff606ae71635e1b498e01ab","first_seen":"2026-01-12T23:19:23.781434Z","last_seen":"2026-07-17T09:16:40.174222Z","times_seen":3,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/15-golden-eggs.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.203Z","timestamp":1784279772203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/15-golden-eggs.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/15-golden-eggs.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khimxmm1nsx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=js1%2Bh6GqaCaKnnWuqSGT6A1geRGe7ihKs%2F47HBCgRp%2FaxF9aMl0MO1Zmp%2BP7IrO%2BQmaa471fjZ8nCOQNtB3J58mvbU8RvQV2rkZ%2B%2Fcr2zPW2Jkegge0Sbhv5d10fvhVXLw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580482d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30849,"size_decoded":31869,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d2e1cf8aa335f8b91a40adbf486e8258","sha1":"81c6369fc3776daca1cb1b16bbf9f5a965e9b4c6","sha256":"859d42669e3c80b5209d4ffb6cb123d38baaacc8e7d2741d9f6c5ba38a70a3d1","sha512":"8f9c3b0e80039e1cd5069fda4ef74ce9ae8ef81c6c3baeaeed0042d3d60f7531ba42f1b9f78331aca42f5ed26a0b3a41f4481170b0153b6dcea1831f9d11c740","ssdeep":"384:K2q/TX3tTeXsmAqv4vso5G70SdrBFfFk1X+2xkb4dE5ZHg2Vt+tM4lgZuQMNJqN/:Krb3QNgvsd7xHkEPZHHiZlgZBgJ4pBf","tlshash":"39d2e1c7e707732ba8cd0a3e4c24f16b38a96a77dc551ca02dd17708ba9b5c5b400763","first_seen":"2026-01-01T08:17:55.630089Z","last_seen":"2026-07-17T09:16:40.176592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/river-dragons.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:21.160Z","timestamp":1784279781160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/river-dragons.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/river-dragons.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:21 GMT\r\netag: \"dh52khwlff4osou\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbMx9%2B6tgZSGFgWva%2FLsPh0ldamdlUvORuWimhYHvQ2Q7SS3ydzLjhAbFwb4V0oXZpnSBrnfSmupr%2Fo2OXa3A7bMtP4BqxjsPCNslu2pbR8B2oG9ZzbpcWq0srW8a%2BuGJw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825b84efc4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37182,"size_decoded":38195,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"44fe4736d76810c7ccb1343b474b9cae","sha1":"9bc437db10d3f1bee8b9277948fa1a46fe06ab57","sha256":"c4275831c29e37fda1566cabb183566d81ef5d04cd5875672060789334373fd7","sha512":"5aff51ee62e1c16b48ef5d30a4ebcac122032128d29adaf706927115b7f207b647e0c89ceeca786b487cf4f6dd47d9699dd5b8df6b08ea64ae7521e7b6d2b089","ssdeep":"768:QmvS6thW9CQQ3XPf/QjFFT7TSR2hAMGEDf2WF2UuYi7uK9onwfm73aHclAdTiaw:9K6XwTcnaFVTSWw6SywO73a8lAQaw","tlshash":"47f2f1d61b4cab02bf7e0439ad7562d24610664bba8e8577b11717a6738c338d2fc6c4","first_seen":"2026-03-16T14:22:50.819587Z","last_seen":"2026-07-17T09:16:40.177888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.282Z","timestamp":1784279764282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 19 Jul 2026 09:16:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7HqiA1%2FW2Lf1ZQiikU04p%2FtlVw%2BL60C3gkLMfSCEYaJRE8mOFJ394Cd87JEo013r%2BEM%2BAxAf%2FzPBYm7zB%2FS0aK%2FzKkZS2Oo68pOb61dYQDUOssoeKLid4pvQ7kUYiMxeag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nserver: cloudflare\r\ncf-ray: a1c8254ec9734c11-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1302,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T11:43:13.928122Z","times_seen":399537,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/images/text-block-3-bg.e02f2b7e.png","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.584Z","timestamp":1784279764584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /build/frontend/images/text-block-3-bg.e02f2b7e.png HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/build/frontend/images/text-block-3-bg.e02f2b7e.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52n4je5gapawz\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2tNlzjjpVVikrFa%2FlQbHu4ftUZv2Ot2FX0Bc%2Bz%2FZRHtl3bgGF1CdEzp%2BQQs%2BFBTRg75YRqmx41quE%2Bc5ypwNCBaif2zRCjf2JoVz2XuAOU%2B9n2iWG0mrIhbD2rVvISi7Fw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550a9e64c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14147,"size_decoded":11472,"mime_type":"image/png","magic":"PNG image data, 1440 x 492, 8-bit/color RGBA, non-interlaced","md5":"6f62c24117634af99f35f88d11894678","sha1":"7be13bbe2def230f608d04c09780005f615668d9","sha256":"317ec0aa5769282689cb6903eb44f35fc1444d96a0badf4f9ecfdd60bbd85747","sha512":"9ed9ce17423524f7b248cb2e82aa80aa163940244ee293d3ecbbd38be262ab21f2fe522bbcb58b3acce7c18858363e0a52b4e17253636f71cec8b0c7f967ccb9","ssdeep":"384:xJ9ZPllqnlGsJvKPn5k7ETlp7TjL6ey4uMaDdE8/2DoG242IchkTU6AibQ3o5TX4:Tl6XQDHA/JP2L4/YAcr4","tlshash":"6f524b249b0c4ab3cd7f4ff83667a7306b350b98d42441475235dba2ddd3b98a4a27ac","first_seen":"2026-05-18T23:51:30.759583Z","last_seen":"2026-07-17T09:16:40.180803Z","times_seen":5,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/banner-jackpot-69b94e961d9256.19824555.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.602Z","timestamp":1784279764602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-jackpot-69b94e961d9256.19824555.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/banner-jackpot-69b94e961d9256.19824555.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh54x7i1wmps1lpo\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WLGFeqRuXqP5ULDsqcVYxcEJgmJjyaP3M15ly6YvvrbNhicUB5mTwWgh2SA%2FBiarO9g4l82WHdfp30bAKVwx2AlGoQhpLxf4TxCSPSwYdOzTkrQBx26mwP8XmAC3Z26Vw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550c9ea4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74796,"size_decoded":75843,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 380x449, components 3","md5":"9738c7f0003fdca18d3cf461bfa5bd7a","sha1":"cbbf7da67142179dae7384955b7bb62bb6c5cdaa","sha256":"5bc571cfb1646090fd2fb8f38bb396ccacd19b8945796de0fd62c61e6038557b","sha512":"6e2a722879c1ed90596650477381750c971a02e6177dc3e1194977409a1eb63e900bbf915d977ee2a84534ddd8fa5709a2b34933131ee2283824a097597b0e91","ssdeep":"1536:8lHdTW+Cjzt2yIRwgiR+NQBVPkSzSBrTBWt00bretHQhX0rB5vwat7FkQ0WlP9P:EdaJdZikR/9ReBHBWt00brswhX0rBKWl","tlshash":"897302d5bd562a638b4f011ecc3d6b46b86edb799618e6f434b808bcf968afdd00500d","first_seen":"2026-07-16T11:19:42.020286Z","last_seen":"2026-07-17T09:16:40.181703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/phantasmic-fortunes.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.202Z","timestamp":1784279772202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/phantasmic-fortunes.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/phantasmic-fortunes.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khvqgvssk35\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XBJ30tQchtwuDZpq3sO8xyhSjlVIG%2BP%2F8YY2jK3kMAgZKKxuGsY2alILqA8KG6HzffK1hCxNhjIJ8kUIc8DA6h92WGgAFRt9UzY5nmO3sRx99Hep86lb3aUhi8a9iIqMw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580482c4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26033,"size_decoded":27048,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"61e6d49435dba609b9ccf63bcac712cd","sha1":"34eeb374bf0f54477d3a1453c411c05dc1a33387","sha256":"6e2b25b7b22487c3f49182cf721c2a89db8fc94135a5e815b16668adfcb17912","sha512":"40ba999bf02a9628146a6d9af416e3eb162b2ed70ac059f498beab944b7afc4369ffcf5227badbab197dc17229fc28dc3e4ea23e8c17aa3a22cb871b9595600c","ssdeep":"384:UYvpEfSWo2nbYYrHwZE4NTS0TyHvGtfh6KAm9OYyl6+c6AaNKSAvM3JH9fp64P/c:5iqW9sYrQVS0TyHQf79f9SAAJZP/7g","tlshash":"8ac2d0c71e0e43c3dc6f01546edcb121385da446ae602c17b4e66bbe6b3c4897ef6066","first_seen":"2025-10-09T01:23:42.720645Z","last_seen":"2026-07-17T09:16:40.183711Z","times_seen":5,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/birds-on-a-wire.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:18.143Z","timestamp":1784279778143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/birds-on-a-wire.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/birds-on-a-wire.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:18 GMT\r\netag: \"dh52khkagyv2mk5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w35W%2BpHoFZ2ZUSKCTYRV1hTO0R7nLOvdzEC6VMSznYcimCBRFRDEw8H1B0ooVEmFAvkQFixVQ7ub8579%2Fvt5wqHZRYgFsgGdehemAgE48mJuSNFgvQNOc39p6qYE0sBJSQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825a56c764c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29237,"size_decoded":30248,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"48220f3ebf4c0abefd54b4232d8d2c7c","sha1":"f816ab28ddb4d0d49deabb445b5eceaf12a2da12","sha256":"03f5ed1221a0f6f77be03d91bf21449d2bed2efdc74c2031bdc64ede7422dd09","sha512":"ebfbc94a41ed8de71490255ddf102b2dba24534f28e167ebc8cf8a3aff45915fb229bc33dab019f29df17c541f1c35b9142a4d2ab21a25e368fbc1f36edbf658","ssdeep":"768:GUWrdFK5Of5IJZe0ycqhx1hz0IYzVWp5w5P4bfOk+f175C:GJrdSi5IJ3ovhgFzf5P4yf175C","tlshash":"28d2f1d044ed9326d9bfa9f302a560d0f3bade135e638a12315049fa0bf9767298cc35","first_seen":"2026-06-19T02:29:17.575399Z","last_seen":"2026-07-17T09:16:40.184714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/winner/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:18.751Z","timestamp":1784279778751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: cs-CZ\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"506\",\"938\",\"764\",\"627\",\"396\",\"563\",\"913\",\"497\",\"314\",\"905\",\"861\",\"868\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8Ny%2F70tj27XRcpYD3TN5NtSSzSklUSYS92zo4hD9Puf6y1j1cg8w%2BFPgkyDTLqct89%2FqbuCivjAJ1K2g9DJ4z7gjx%2F2UAHzZKWwSgFcSfqEARLLM7G543jpVEKCk6dbnw%3D%3D\"}]}\r\ncf-ray: a1c825a93cd94c11-OSL\r\ncontent-length: 211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":1196,"mime_type":"application/json","magic":"JSON text data","md5":"d0fd852a2a1bdc722a0183a791eabb7e","sha1":"e98cf943751354c7653cf04a3366e358e86b8fdd","sha256":"be9218ac0ae1c819933d2c8259c3736132887a9d9403c754b488587cc9c8ba2f","sha512":"8369b48c3ff19ae988271fa6affd066349adf14e1adf5a782c614e39d0eaa5b81afe65f20a23df5aaee32d52b854fd17f1c29b7fcee23dfa985d47714dcb7e24","ssdeep":"","tlshash":"61f0a042ab19a63fa08310d0ec77dfcd1048e862216d4438fdbf19a1cb364146e98b0d","first_seen":"2026-07-17T09:16:40.18576Z","last_seen":"2026-07-17T09:16:40.18576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/golden-osiris.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.230Z","timestamp":1784279779230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/golden-osiris.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/golden-osiris.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khqph4mxobx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqlWYCEtBuAtQBRwt%2FrxaWGrIUSZ1ifm7D56mkqjQwy9x9a2Yer45OPQFbYgWSguDwJ5%2FGBmsgzu3%2FrGyKbr%2BY3INM%2FIbJI%2B1sAiD0I5BaP2QiqFmY0rutRSAH4tOSHlxw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac2d2b4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31533,"size_decoded":32552,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f3d22e88998e334e0457b99f51d958a7","sha1":"4bbb1af7ff52d8bbe9c8c82edd8c76d3cf65b8b9","sha256":"5ae264ac1ba092f233029a244f2ee5942d2e370f67ff60ada30730a5233cf88b","sha512":"80f40ff7ab75c8a719d29a16997e97257a8cc8ee6c2b3d1efee9b25732cc17f5aa5d595c73ad471555f688e9bfdc2548f3a0c9709c0e227f50e937b2677e5a8a","ssdeep":"768:ptlYPEECqViVyZIXCF7tE+wK0IqOmG0ztujbxvt:cNnayuXCF7G7K3qnZxuPv","tlshash":"43e2e1a9b23014973ebdf13a5224dd26a7542fb84283e72b334d4124b71b5c5da316f5","first_seen":"2026-06-30T02:37:59.019107Z","last_seen":"2026-07-17T09:16:40.187668Z","times_seen":3,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/cold-cash.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.327Z","timestamp":1784279764327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/cold-cash.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/cold-cash.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khmeofzfoer\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hi%2FhsqGAJF5z5zccnbSIEvDztcDItR6vHSF4WDK4STohJpx%2FJG%2B1hfkWWEhmP1M5R%2BcM56YF2HeB%2Fqwu%2FQa0c5e3hiJmlx8%2FQEhhqhIj0naFQcQGweszFLNWQTq2QB9Xmg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f09944c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31635,"size_decoded":32650,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"73d56dc3959dd9535b4bdd43818e3bf2","sha1":"93e618bf74fba49f11fcc4993877a74266e5aef7","sha256":"65dc2daf71c8205b8e4f32eb96021437769b1634d65373a304e079c7baad261e","sha512":"1ea057ebf1eba3ebcb8f5201e632298b30bf5af943155905c1a8de23d89dbf1d8ec8ba0c2108de855c25c773591fd28e019f64297a357ae3425738ae625318da","ssdeep":"768:foyX+eJmwne3PmTz4VuuxVDYFyzYXNFCK:QE+ImFxY28nCK","tlshash":"3de2e106bfae80bf7e7d28175588515982251f222ce04e3bf523b39cbff815669210f6","first_seen":"2025-12-01T07:25:15.245529Z","last_seen":"2026-07-17T09:16:40.18858Z","times_seen":3,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/undergrad.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.333Z","timestamp":1784279764333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/undergrad.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/undergrad.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khib0yk87g7\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgM9VgRVOjVzvfDOT%2BTc0q4QcjlwA5mcP%2FRi3hKKX5uehewJKTCwKLTdTjLvaVGGZ8SH6HZumitLfl5cUka03FkKbg25t2QbxXD4jiQmlkFg%2FHCRKm6lODa2TM4scYgdAg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f19984c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9655,"size_decoded":10664,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"62e6ce7da5672eda46d2e96404ae1332","sha1":"d255d60719f8a5222b3b0442474b6ec94b07bf5e","sha256":"447a289b5593b723fbaa0db0c484b18f176b259f74722cf1a73642ba1b365d47","sha512":"fd396355762d2d48cb51ecfbb0882ff2ed3e27a983ac9c807dac25934cb7292a1bf6cbe21d3af59986677683e89806e75213652bd39079ed7e5d81fa4a421679","ssdeep":"192:t9QCL4i+Zm/eaWeFlKG/rLpI/bcq4S748dVV948ZNz0kgAmOC3vs:c6+Zm/ePSlKGzLe/bF4U48Hwil0dOC3U","tlshash":"3612bff12364c51ddc2e0d3998ad0b969acf5e2cb4d017452cf7b88d5f3c1435ae8146","first_seen":"2026-07-17T09:16:39.686893Z","last_seen":"2026-07-17T09:16:40.190576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-3.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.355Z","timestamp":1784279764355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-3.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyaenwk11j\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VhTEkilm9dsb4lA%2Fc5ZEQslIbKaa8IIAVj2LLh80VPpNV2KP8I7TdxJ9JBJwFkiiSwgE23xZBWnR12plRpYCkdM4v0jg%2BkH6L6f3O19ETUBMA%2FOHq%2FGSY5zIrzt1tSyyfQ%3D%3D\"}]}\r\ncf-ray: a1c8254f39af4c11-OSL\r\ncontent-length: 694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1351,"size_decoded":1722,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33b94027ae50b91d2a3a44ec8e039a69","sha1":"f9e407e96eb2aa87d114990348504be1862fe020","sha256":"1073180f688f90b2de978352e506c3281fd5c14197d771dc45bd8d0db2f269c5","sha512":"53b4a8fe61fba98872373276fefc13d7bdb072558673878d9a219ac88993b870b892208bd7185ff1d527158cfbac38986d6865b37dc86208c5d1fd43907f6a1e","ssdeep":"","tlshash":"fe2123e692dc95c8da02d7f4c52ab0d2316f25fe2b5ec76da3e4ae643c1402c850e997","first_seen":"2025-09-23T10:56:20.416179Z","last_seen":"2026-07-17T09:16:40.191799Z","times_seen":60,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/unicorn-legend.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.197Z","timestamp":1784279772197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/unicorn-legend.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/unicorn-legend.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khyn95uafay\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWQCLxdXQJzHHQU3OG4LGMt71X6cDGkIK9wqwvLjHr2vhxkvKUGqkl54o1e2wqDauAML2ZT7jIjH%2FO%2Bx2Nk4TObzAMxMSd%2FFah9ep1p%2FEsFpBP1p%2FvWl7%2BLL5g%2FSx2Z0DA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8258038264c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19834,"size_decoded":20854,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"4c539967a4d0fd3b502c585317d902b3","sha1":"f1f524624d34741e228b2493c82ef88907ccd537","sha256":"2a74b2b87a7839c6e638c015992edff576273971c522188e2d2df87c7e9db8b5","sha512":"57798fe18e577c0036b81b64ef8c226945a70425541706c094c8894eb769a28baa00fd0d414c7e307599ba5203045c026b0805a7330365730b0f2c91a244d8db","ssdeep":"384:TRODEt+u3+Tba1nww7yJjlrEijg9I1Ez6Qokr9BF6rW0e5HOYN:dOCuMnwQQjCil1M7r9Br0e3N","tlshash":"5f92d0643e389e97ec6f637ce313e113b20358005a51b5287fa865135e737a2a375672","first_seen":"2026-06-02T00:44:56.563919Z","last_seen":"2026-07-17T09:16:40.192662Z","times_seen":3,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/squid.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.173Z","timestamp":1784279786173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/squid.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/squid.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khhz4aif27x\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wd1TSAaJZpLa9zzWCE93Jq1O8WzuHVRFNYgne2CA%2Fm1GRBayUKHtdCpAMLq62woO%2FGnJfjh9S9Ba6PihIUXnx%2B3JgYokZcpAGzTveK4O4nELLnGD9fjbwMQrwn7mHYv8cQ%3D%3D\"}]}\r\ncf-ray: a1c825d79c584c11-OSL\r\ncontent-length: 2744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2877,"size_decoded":3768,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"c2f1bf391a151b972d029c6fd78d14c0","sha1":"63fa7f3d0c91cd76e6e475e6f7655a1ebf27b9f6","sha256":"8ab1d98d4d06a17e6ea26775644c6ae87894b2d2d77a95a253dac46bd93e8e45","sha512":"50f7a28adc95d52ddd1a18ad0fe34e5ce2852189703f76c9d3ec55fb6bf650850aa39efe100c5b7987ff4d252c6e5e138881694549ada332a79d83d4b072cb81","ssdeep":"","tlshash":"86511b0126776856dd3e7bb350954d92bb52beccd9860777309a8b859b38c602c129f1","first_seen":"2025-10-26T01:21:03.209816Z","last_seen":"2026-07-17T09:16:40.194561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/blackjack-classic-28.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.298Z","timestamp":1784279764298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/blackjack-classic-28.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/blackjack-classic-28.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khkf8folezz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUVvB%2BFAp6HP8IKUQyRiyhMMCVfvygPl4NEMF5590U68UOKLyzFB8UJjZ6dxVBRqohsj%2BbbBE39lbmHE%2BSvZAhqvtCn%2FpNLlH9vHvNlubaNcX8A1cM53AWSKUZ%2BXKXqlTw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ed97e4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19439,"size_decoded":20461,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e352ee987fb519ab2301529ae35351a3","sha1":"42e28dc77918ba90fc428fe88122d5bf21294ae9","sha256":"c75bbcc50acdc2a3db09bd1a0c977820d9eff4214e4b4bd51a5438e86ab788ca","sha512":"740fbc6f440de8a6027f7ee004ddb255e566def6098806059a1674c73e91051d363dda5e01f3db8f004f35c7cd976e462960b67215597a676e3ed72b91dbf037","ssdeep":"384:X6flZHgSM2WOa2Wv6w8zk7leGvLcuc/Q25YYezIrXLOgVb7dGCc3kT:qflZHg8TzMe+czbez7W7OkT","tlshash":"3292d05a29f60764f84ce0ba1cd2d8e6b523dd9725869f993cc2b71d670d088a8013e7","first_seen":"2025-09-23T10:56:20.325976Z","last_seen":"2026-07-18T03:24:45.56322Z","times_seen":42,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/gods-of-slots.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.290Z","timestamp":1784279786290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/gods-of-slots.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/gods-of-slots.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khqfy6zvi5e\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k3r7ta7A11PXcRmiPEOowLsDvtJYGfpGVUJqinqnewPZLJnl0pFEtBYLEXmICrbo3xNDVediv1pHsomxDHSr6u1sLJlsfTgnCsjrLyxXBvSGN1QlW4NxJEJ51iU7MtZMaQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d85c854c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23522,"size_decoded":24527,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"5058b9f09db5944263c73f5c95c70c0d","sha1":"6dfc4e730948c4e739f134299bea395fd0c6254c","sha256":"745a29de594db6bbcc1c8e5076dfda8abbfb8e602d8b51b464d07aea5b553952","sha512":"dafa2d34a429f0333351dd1a70e652e051741236f3d00dd58e3cdb2be4caee1ef4193d53b4884142836d72d4bc9cdab356bc6384220baa667d23fefb5e23a783","ssdeep":"384:Ix9xQ5meT/HboY0EUoSFCpRmHebjfRpfoe+Pr/cpxUeVW0xzfBoRFx87:gvQ1TfboYfUoSkpAH4jZpgRPyVjsa","tlshash":"5eb2d115b8b83ec1c52d0bb340255a3d5f6af64096e5ef0990e0ffa407e25ed9e98235","first_seen":"2025-12-25T23:59:48.624802Z","last_seen":"2026-07-17T09:16:40.197898Z","times_seen":3,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/runtime.js","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.284Z","timestamp":1784279764284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /build/frontend/runtime.js HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/build/frontend/runtime.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52n4jbrpu81jl\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2F4JAgsD8S0vxvxFj%2BSAnhSxBqvZ9D%2FTfxcR6GfmU49gl5DGSlpRjL6Jj7MdQKDnXFdshK9OOkSYIEfM8igpR%2FvPKrfhq8aZ7GY06PtpMuBZKnqCj6jTkRz0No5zClsmhw%3D%3D\"}]}\r\ncf-ray: a1c8254ec9764c11-OSL\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":2064,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2001), with no line terminators","md5":"02e2fa878ad5ff0ec64aafc1deba788c","sha1":"2d33cf41828593bfe3b3c16b56b0336944549e26","sha256":"97a1575c74188c7ea756ad742df7f21f9d5c4d8ff6363f940c8ef0edd490efac","sha512":"10d01c41fffa766dd97a8f302b844d2ccb39bcbc3f21359026a2924e0aecb2a52f05e721c91afd312235492c26aba982995790478ee553d2a259e3ccfb614814","ssdeep":"","tlshash":"254196d722d8b4e663b84d4040ac8787f91e6536355de8a1eb91c9e1782c8b14ca7f34","first_seen":"2025-09-23T10:56:20.429759Z","last_seen":"2026-07-18T03:24:45.617029Z","times_seen":108,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/tiki-madness-100.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.314Z","timestamp":1784279764314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/tiki-madness-100.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/tiki-madness-100.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khydq878m5w\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFFJi3inR%2BI%2FUwwDxj%2Ba8HtK7fnmTJEPw%2FRHklrJsudilpcuwN0kmfHPVXDKAr2RsGIQsmaQViRUfgE2WHvef%2BIth66CIHdx99tEAuaJB7iaXIqqW%2BgH5ZuRd0GbccVmgA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ef9894c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28724,"size_decoded":29744,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"61d4107761b0923ef24ae5d91872690e","sha1":"df0159d6e078b65b52c5dbc6e2466cfdac92199d","sha256":"580334898e8e21f7a8fb3518cc5c6f5c73abd988e17ce221909ec45b65dc48bc","sha512":"606db9786f7ce5b2ac1a78ec4b1cdb2ba1158ddc1aedefb54e897cfe6798811f4e6f1f8bab4533ba24fde82412a9b5e20e287cdf4d667b66b21195e8b41abbd5","ssdeep":"768:hUsRleSKW/TdmCkkLAlTG1G+geOD2+iksm:hzRleZWrdtjLAlKBbOD2+iFm","tlshash":"b4d2d139fa61a107143d2775e46fe7c6134988a4b0fb5b43dab22ae01fef160cb47199","first_seen":"2026-01-03T05:05:42.421871Z","last_seen":"2026-07-17T09:16:40.200298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-7.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.360Z","timestamp":1784279764360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-7.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyf64q31f9\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2F9SZSxvfnGXYX9mjxg%2BzRQ5idwZPvhVE7M7%2B3QzVmEPLVonNJ0oVMTFe%2B4orzqJC0uSLVot1qqxrt3s%2Bmg8YqQG3jSieqJm4CUtMAg7Oya%2Fkx9bCdjLFMtRJ4UUeBB6Ww%3D%3D\"}]}\r\ncf-ray: a1c8254f39b34c11-OSL\r\ncontent-length: 865\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1845,"size_decoded":1897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8b3615d2aedb57b2a8a05743dc19942","sha1":"de888fa42355b9981c9ef7aeacba110777869dda","sha256":"591f7158f493bc901823bfcb261ebc92a07cf2efcf01f4ff8989cd38c8bef8de","sha512":"d2ddafe3922b927381b35d0c4ef55d62d183a475432567d3d8be4acfc293319a92b3678da38c39970279ae6a455f1ddf8f19d2ede4b6d5e33ff7efbb86f7343b","ssdeep":"","tlshash":"113100da7798e3e0c947d3f4d83fe86a36513c762f06c988d2e43a68d6016dd988c852","first_seen":"2025-09-23T10:56:20.336269Z","last_seen":"2026-07-17T09:16:40.20274Z","times_seen":60,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/18plus.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.378Z","timestamp":1784279764378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/18plus.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/18plus.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxmlbsy1ar\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zeriv0BFPfMoyXeoN5q%2BYrGbf16qL6I48vklJtI0BgL2uuahiK%2BawrUZ6l0IOebMwfUw0b5TRCnBKh2M5T3aq07CeLCegyyj7najK9kbr4xdWekD4bu3sYagkWGxMDGJ8g%3D%3D\"}]}\r\ncf-ray: a1c8254f59c64c11-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":1694,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b42465519420fe87bade4adff902f4de","sha1":"064e45920531b0b5ae8902f43ab5a6fd82053de1","sha256":"346dccf80cec2eac96a6102fa7a1043465537c0bd8a044c10bf5974ca3392739","sha512":"46131fd6a08de31eafdd955bf3b696e98766c31bed4e10c889ec1befbfe1b3552c98539a6e588299c9151c17872ec803cdf8cec5ee527ed7e97c69a1909263ae","ssdeep":"","tlshash":"d731ccf7abc872e4d64657e6a07a7518f67530fbbb5acf05818826687a0117fc0ccc44","first_seen":"2025-10-14T14:51:49.128463Z","last_seen":"2026-07-17T09:16:40.207049Z","times_seen":31,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/buffalo-rampage.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.321Z","timestamp":1784279764321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/buffalo-rampage.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/buffalo-rampage.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khlckpf9h11\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFwwq0uDjaMyOB%2BVTWboVZAOWX3nVmHNPsJ6u%2F%2BCLqwhkLbmSsS6P5mts49%2FPkcmn05zWDSO5PdjphbMaBG%2FZGvq90e3hFu3pdkWGUqAK685wcNx4RDxrVkn72qFG5eEOA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f098f4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22069,"size_decoded":23086,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"e6759f878fa0e8be18cdd44f92f5b250","sha1":"161da410c99eb18af17af45a1d1abd12411381be","sha256":"e1430577087fc307e6a4cf50db427c0b2a453b891b255f96a886f41f0e92646c","sha512":"ee752258bc8d63cb64e8c3f4df9d4505f35d736d02a723b29407131050b09aebdbc10da5a482862c362f06269e83e94672fb8cd3a3e0387d1599d3805c36e0f9","ssdeep":"384:3AvIiaMhrO+pUoYgS6ViYhP9+SiQsZch1UZYZV6lPMoLV7sF78:3AvIp2r7VEvSJsGhqZY00ok8","tlshash":"9aa2d123d4d7e2b8f56e18393c267cbc7f495e5a8521ca183c52494aa33bcbae7d0451","first_seen":"2026-04-10T09:54:21.508272Z","last_seen":"2026-07-17T09:16:40.209432Z","times_seen":3,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/dolphins-luck-2.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.200Z","timestamp":1784279772200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/dolphins-luck-2.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/dolphins-luck-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khnj5wydgtt\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsMb4qET20uePSSM%2F%2Fc1EKyQo%2BOz9pgjVxurpBQe%2Fz4OJaid9%2FswQb%2Fs9UghW2S2zVNnNU%2FQDTxxCHKJw0Ai%2BsnIGn1GKdLPgUcD1wJtHn4DRuIdbvULUg6kilD6hVV%2BrA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580482a4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21809,"size_decoded":22834,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"8b63963a27dd6a7a07bd8f77ab4dbe01","sha1":"242bc8a13ecfed054541688d1735cb539f58d5b0","sha256":"0003881df2aafea47f6782492a5d804436f4130e8f034e62943f0e74627bff18","sha512":"5ebcaace041016b9f529484d6140caa211e8755d622552bdef58f7cb5dffd8273d761d3fad69c11317e595e4948295205efb53b630bf87ff2fddb3ebff96d6a0","ssdeep":"384:uk0/wiq84n+c+EkDZh4UxN3hfVxDmL2qJER+CvyiUTlTFp42:ukES84y3thRLtxDCYR+CvnqpFp42","tlshash":"92a2d02ba308f5affc3b0f3ca552c61e42bd17627170ad610787e67c5f254072ba65a8","first_seen":"2026-04-10T10:02:45.76949Z","last_seen":"2026-07-17T09:16:40.210399Z","times_seen":4,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/mega-jack-81.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.238Z","timestamp":1784279779238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/mega-jack-81.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/mega-jack-81.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khuqqvndo2a\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vH0gqztNZHT3H3uPCuViJEvvSkVFNRmZyMuLRJI8Gw9%2Btn0hurJfxQYJAqmDFBmipeZIfOSEuwbqSSlyflGRYy%2F%2Fj8Lk4OMdcsgg2XXLdrGTgUkn4ZsTGivGwiLpP%2B0ZZg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac4d304c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31186,"size_decoded":32198,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"370b58b94b945ead08e09aa0fed31b77","sha1":"facb7e95dc659fb3e1e2b75609bc93cfc598d166","sha256":"ca0e9ea1cd6989393ebd8f91ae0b03b0a381ffd2e866a4800b0069c92b4be644","sha512":"25b0235fc4212f25c5bb337c3aa98203124ab06d49199ebbf20df53042b183287b1be1cd76cae818d30a43eca47854ba6281b8c61de94a26c6e4a28a27bd82db","ssdeep":"768:0JysI1lH8SVGmNk6xDz0HuRkEaCpXdA2eGuFouAXTVG:SyrrfcBuRVaKXdA2eGuFfGG","tlshash":"18e2f2cd13c96419a05ddf2f72aa283d3b79669ef0b30428d77900255b8f8dac6e0776","first_seen":"2026-07-08T10:52:34.95629Z","last_seen":"2026-07-17T09:16:40.214956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/logo-69b94e969a56d6.06704869.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.293Z","timestamp":1784279764293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/logo-69b94e969a56d6.06704869.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/logo-69b94e969a56d6.06704869.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh54x8f4nklc5rd\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvTPzEIVTg6IUSxagkk02C6XT4zX5kVTBwadoHcOJIvzOn9AbyYKA7PAWQnGyqpLTGW2El%2FA5ZykZVijn05%2F4y5NFoEUZb5j%2B%2F1fa9kKEXd2%2FL4z%2BfJy2ViOuFBRM61h3A%3D%3D\"}]}\r\ncf-ray: a1c8254ed97b4c11-OSL\r\ncontent-length: 3347\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7465,"size_decoded":4408,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93bf60c532d2c3f96b8bd29af98342ee","sha1":"7c77a2a583b1841af605e6a7d96f0a6bfe0a0d83","sha256":"15c3fe8e4a658db084d0b84e8589f61e0ce1f65ef0de286b1835f6549400b085","sha512":"10801879dfce9354420cfc48b66a18665050ac259d76314d7c51de1b137f5e4c78b0d7b3b4765805a69a01e7ffa58719faa22070d50e5e27ce29a819f0e14999","ssdeep":"192:kKAow4/s+pbZ+2A+tjEPrFPZq077e02qiw/DoVEYbz:b/sgbyvX0K/cVEg","tlshash":"1ff192dc1f796ee889c88bcfbf1260edba17e1b289560e05c29c1f5925c2c6c9905d93","first_seen":"2026-07-08T11:58:04.216325Z","last_seen":"2026-07-17T09:16:40.217447Z","times_seen":4,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/keks.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.324Z","timestamp":1784279764324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/keks.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/keks.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khstolrac5w\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFlZrRRUbGBZzj94UflKJ5Xp6lh%2BEFPKeqK94OTXPmpXvovX5RRIt1PWvXB4jzoNesPhQ55rEX6uPdxAx%2FatokkVmCtsKjm0ZvBbKL8pCOb04ep%2BUodOvP8mq2FM3CIoyg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f09914c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15764,"size_decoded":16766,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"435fa608619dc2084fdb4f3a8d5733a5","sha1":"4b9d6b8608f798857a82ff83149e993c7f010380","sha256":"c8846a219341540a50ff7db16fb396910ccf149f8e37a90f0bc47f445d374be3","sha512":"c26768454be01699352826f7e97c73f844bc7cd976d22c068f547d2f7d6fcfe1eedfc584b4b0138553ec8286c62dff25d2a460d8b911527bc5d7b2b5b3828b94","ssdeep":"384:6NSvGtFfjL1IqyWSDE3H4nTigsCd7UtCdtRFbRUpl83JQt:xObNIqeE3X+uad0sQt","tlshash":"ff62d1e1d79b8c25df3c6a235dc853483280e7e495a2f7238eac5925172e087bca3565","first_seen":"2026-07-17T09:16:40.2184Z","last_seen":"2026-07-17T09:16:40.2184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/18.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.381Z","timestamp":1784279764381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/18.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/18.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxmlbsy2u3\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3GO1Hpj%2BIMrN1S3pZo%2FPQaekv%2FZXLt35pf455ZXdYWZl4tL7N6h9G%2BlT158jKnKO2XAXxjy%2BtN5SfApLmmiiEnYs%2BINbg5Avu55eFGHJ4Y3hrPivHf2dgL5kadjhEPvfmg%3D%3D\"}]}\r\ncf-ray: a1c8254f69ca4c11-OSL\r\ncontent-length: 1225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3675,"size_decoded":2242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71ace1fcfb0d140bb221f1bc54968527","sha1":"0bd6be64e7dd38faa2dd1234b76065d6cc80609a","sha256":"c01ba57e02b7ee032930c7756ad3af600b34c6b06bf2edba619f0cb41810c906","sha512":"665c083447e8b2361d2c90e79e9211d9a8ad4b3539c15a7121ca9a17edc48b613feb246c99ca70798ec341c473cad29bd2b2342a982a5de3152a5e7f45f0bd32","ssdeep":"","tlshash":"3471f2f983d4e2d4d514e7f4d536c2e6396324bb3a15cf5c02e55ea8bb1242e954ccc2","first_seen":"2025-09-23T10:56:20.428584Z","last_seen":"2026-07-17T09:16:40.220962Z","times_seen":68,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:10.731Z","timestamp":1784279770731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:11 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YGmlRJmdm1zB9LpHuo6UlawVjl0KTKYK%2F7IN0rwdGX2KpMu5VN3N%2FvhRAGzyyJgj19L%2B92i9SInVVDhxtgGA6UgAzmfaI9pIx7%2FuiKmoLgj%2F1cE4ujV14r%2Bdaa5dPparw%3D%3D\"}]}\r\ncf-ray: a1c825771ef34c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":1038,"mime_type":"application/json","magic":"JSON text data","md5":"005ef1ca35735e2e8ae62793ca8a75fe","sha1":"8707d9798782a81862f8922cbd76adbdff237c21","sha256":"9d3c5e17ebb4e77600379ee76e98058fe81f627d24c190e5922e6e404de26fdc","sha512":"816409f00d46a403d55f44043b058a3fb164b731179c72f52d3e79b0865d2352fe1c4b267891f1c21b0fce12b981bb8eaea5f876a2a57683cc030ee5dd26f03a","ssdeep":"","tlshash":"6da024ddc400054f4f330505141f33cf50140d430550171037cc7c71077010f4007c40","first_seen":"2026-07-17T09:16:40.221941Z","last_seen":"2026-07-17T09:16:40.221941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/sweet-alchemy.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.234Z","timestamp":1784279779234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/sweet-alchemy.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/sweet-alchemy.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khxuocx5mzw\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E1PAlsoHPqfe9DO%2F%2Bd1jnwPtkhIJ9Mtqy5gzMpaqpC8wYheBwsg7cwWfnmI%2BxpOyrWvzC7v%2FLVgChFOp46DKiD6UiJZQV6dPdMJEbF70bbLgyiH7m3RzEc3brWXhYsMX5Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac3d2d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29804,"size_decoded":30817,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4766b478dc04071270550379844673b9","sha1":"fec0b2b57fe14b327deb04f8a26ec083aa6d9cca","sha256":"b05ec084ae24fa13e8f4b269e38cca147d1c14bf6e03e9b9517e20e4087bfaab","sha512":"bb6fe7649af76b1c3d2cbf6344437981321c83e83bb4a09fe9faa139ef3c68e8684e88bc13096b8f689ab5906635d2833ed0d2e5546e94e51515020222a58a3e","ssdeep":"768:BxiuyvPLmE4q3rQJx0urMwy1tsaUcnEbndhX4Np0+6:/ipqExursMU8hspY","tlshash":"afd2e20930a3d82db2dc873e710e5524ff715f9f39517b6734aa21242aac18b85a45ff","first_seen":"2025-11-17T14:10:19.202209Z","last_seen":"2026-07-17T09:16:40.223932Z","times_seen":3,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/next-arrow.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.330Z","timestamp":1784279764330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/next-arrow.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/next-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FEYehh9opvI6phZsuRVWDzPSaAByjawGUfwiWvaG7Tk1s6rp0sO6VR6larsaRBPup6HZlIFyPBAhIgGCpGbyquPGPzAbtBQd30d7xtxRdtaS04bsgV5oQGnrEzg6%2Fxufg%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52kjyop2d46t\"\r\ncf-ray: a1c8254f19964c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":1161,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059a19b3bd2964e622f6bcd07e993043","sha1":"03dea1a108357993beefdc6629ad794ff696360f","sha256":"6df08c0f113a37486ca85fb1e08414f69a42c3f1aa89089f0fca4d9d6a065065","sha512":"3e0ef09639d2f763e561b0614f6b7029bef7bd711e0ce9633234a903db292e1d5d5a98ad77dc5d7c7e89e763459935dc0e5699ac6f0289814966909798e2b82a","ssdeep":"","tlshash":"13d0a76653084e2cf2228a20f729733520e65193994c1454d5261e31695499f6c7f5dd","first_seen":"2025-09-23T10:56:20.418245Z","last_seen":"2026-07-17T09:16:40.226476Z","times_seen":81,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/michael.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.342Z","timestamp":1784279764342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/michael.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/michael.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khgzead055t\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9n0hKPq1eubF79ZKbYtwyZlajaChailuJ1DAY3tU%2B0MTZb5pQdQ1rnHIh2726Des3hVfvr54DHEWbmBKO7EcWFoNG6t37mQ0IoJHhE0MsDQUiLgU4qUBPL7yN4pU5gi75Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f29a14c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6689,"size_decoded":7692,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"ce6c393fbee3554c72483c45905a84d2","sha1":"c08172a18edad50701ef51655dd3d8ca80257930","sha256":"b8d27d46de7859d7a790d852fb8b498427101a72fc2117db9bcb3f79ada088a2","sha512":"47f93810e1598befb5f732a36c7859e29fdb931ca1739a0ee8db1ee7879479ad0dc85f120338670c26042c4077123f9c2fd053a510605265aaee1f36c40bb770","ssdeep":"96:eJJr2UTczcQEHSamQJ3BI0GR/eWiLJ83SxR+viRcU8VopUtqEMgxPMsYHGNa:eTwcnSUJ3n9LJ8DaRMVopUtagdMsYn","tlshash":"5ad19de99dc17903dc8d77be2da89212c3289b50158acfd038c1052c63ef5846cdae79","first_seen":"2026-07-17T09:16:40.227926Z","last_seen":"2026-07-17T09:16:40.227926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-9.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.362Z","timestamp":1784279764362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-9.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-9.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyhjv4u16g\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDJ3W8ZDGAUxCVWuBVTsiX7bY9ZMTjpGJtgw2BqmiRe2tTuB59k8qoht8Yp9YbDdnTONR1XGZkT4oY1vjJ%2Fjo2Cz2bLEFbmOqTBQKOj3O3WDwnvqlagjQT%2Fo7%2FFXEjRrCQ%3D%3D\"}]}\r\ncf-ray: a1c8254f49b64c11-OSL\r\ncontent-length: 534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":1560,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b102749c281526507c5490e83fdd185","sha1":"a454c193891fa7a94fb760360ebc1fa01dec3cbf","sha256":"3e2a708374909f4afed3afc345369af514c01e6fa6c9e8db3a40660971a82e92","sha512":"4178d3b1d6077876db67c432cef840fe113f0784fcc6df57b067dd71389307306a807ae0262e958fa5a8c625d1ddbbadec7d54a045faae16236deca33cdaade1","ssdeep":"","tlshash":"133166e582d5b2c19059bbe8ce39feb239463c375e73d726c1a62a717a00058cc0e8a1","first_seen":"2025-09-23T10:56:20.486839Z","last_seen":"2026-07-17T09:16:40.232759Z","times_seen":60,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/rich-panda.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.188Z","timestamp":1784279772188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/rich-panda.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/rich-panda.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khwj1opxn7k\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rruNeiRJl9Mz3Z2jHwYF60h2T2SaMQb6OldWvRwF1NJqwwlXL%2Fe83hPfpisLTFcSwsI6TaoRBYH6Ix893HL3ed1X0IKehnuDC1bunpJ%2B%2FFe6bxexTp00ya9UarPMdJWqEw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8258028204c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30080,"size_decoded":31088,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"88252e49e5d1c1b88c79298019ba0165","sha1":"8d2559f52e52ae45e24062912ffdd3efd648d17c","sha256":"94331581a9f33e114a04a0e1e45393415619b34494099c4c4f895b7df6d4732d","sha512":"0961cceac5f99c99a6826bd2becc1d442bf88f9f36ebb222d50dc488c5cf5f1abf40a1cf9ca7f150de871e221428cbec6fda0d7ef6167b075f40caad918d5b8f","ssdeep":"768:GYZ1xqqAgBmgarFX0a+N59TGa/5C6zC3Yh31ewqT8esKM:N7xqqjBmgaKaG57/RSYGdsx","tlshash":"23d2f10be63087d0a1ff523b857b847e3a5225304e666a8dae87ca6a013cd47ad1dd15","first_seen":"2026-05-13T21:36:15.892203Z","last_seen":"2026-07-17T09:16:40.233862Z","times_seen":3,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/rumble-rhino.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.309Z","timestamp":1784279764309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/rumble-rhino.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/rumble-rhino.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khwuycrqo0a\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzcZAc4cP9seSVCTFtccBIrWE3xO%2FS3WYovNlWzZGfeh6ibOSyYAcnH6B5TbpIa91vCgsDC111jB6atLXMnpLAooUG30fwY9%2FqmMsh5qU%2B9IE6iXr0p2PVYM5ct892%2FMLQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ee9854c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31114,"size_decoded":32126,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0e55391e8ac09726c1e67de0daf56ea9","sha1":"c43bcc126bca89b0fa53dc01a2fb0115e6ce5b92","sha256":"9a5790b4a04fbe80b40bbc6ff3e94497dfcea5d4b300255baff966479cd6eca4","sha512":"9ee4500b5248d0b1d8c15bdc132d14b28f38c29c64c042fbd8d998be53d7745975225224495e593613a585186e16d05f1ee7381efb86e9477be9821ab12d4c59","ssdeep":"768:Ih0Ow/Hr5HzjcAXce7Lk008LM5/iWqCu2rIEGcdt9hh:Ihvw/HRVcefkggiebhGshh","tlshash":"75d2f296518c1193ad6b113d518b682035d0d6b3760ae91f0482652b2f1ff3ebade7bc","first_seen":"2026-01-12T00:47:41.76429Z","last_seen":"2026-07-17T09:16:40.235964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/go-bananas.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.201Z","timestamp":1784279772201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/go-bananas.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/go-bananas.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khqdkgl4nig\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdUuhsHn4%2BYeE0L3PIKzxI%2FfUyzAsm%2BVgiANwuESpbZu%2FHftONvV%2FMfqHlIHDjPF5mWKoTFxO%2FdRlRn5zN1KVHXMSSaRDKQw0MFZcAt10itK0qI26m9sMP4P9ZuO5oQ7Tw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580482b4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30472,"size_decoded":31488,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"9c52769d1f978cc35494883242f5df15","sha1":"678978cee19d94e1095ad77d5b8e47f2f05543cf","sha256":"4a58720fef4c9734757fe9d0d38829c2f9c34940cfb8c078dba9b7282eea4e2e","sha512":"d8463ed9a85d3817783201af23fbb71f8457fac6985c8e0114d798f4e22d3d99ef0039b5b2554d26c10c48396507a5c818187baccf1a495dd429f6f1a256b5f7","ssdeep":"768:eicya9/9qtyrd2LC+w/nDDRKtb9LkvoVA9QKhc9Y+7z:eicyq/AAJaw/nnR+JkvoVA9Qsg/","tlshash":"22d2f28e7625189170ec523f4745f92d46b94b5a51d2bef638e3ec3423059edc2357c2","first_seen":"2025-11-17T14:16:40.580888Z","last_seen":"2026-07-17T09:16:40.237934Z","times_seen":4,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.745Z","timestamp":1784279779745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:20 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:20 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSaboyZsYMFHdm%2BVJx%2BK2ECTyHt6God604eA0kKpByJOag%2Ff39d%2Fg258jgEpDpHPAmANDp2CgMLlkE0g57NgrYDey80NjwTwuyNtycSdmK7hqqii9U3fQydxmefTcoTi1Q%3D%3D\"}]}\r\ncf-ray: a1c825af6d9c4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":86,"size_decoded":1035,"mime_type":"application/json","magic":"JSON text data","md5":"a470dd195bf8459c89ede8596e72db2e","sha1":"31b91e15bf5658154cb157344888d169376fb58c","sha256":"1b2cc2afd755f41e55b22cce377125048c113c6d96bc946697a1612181c2722b","sha512":"783c29b11fcb2627eab9ee9a3d65c4f854d16ce37dfc2107e6ab520dc85b7c19e3de8c1536f9c5f530710ddd2cb5129a7979ae14b4a15bdffd04bfc8369cb1a5","ssdeep":"","tlshash":"4da022ea8800080eab33830cb8cb32c0aaa00f0300b08b00238acec3cb3830e0033e30","first_seen":"2026-07-17T09:16:40.238639Z","last_seen":"2026-07-17T09:16:40.238639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/spectacular-wheel-of-wealth.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.284Z","timestamp":1784279786284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/spectacular-wheel-of-wealth.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/spectacular-wheel-of-wealth.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khxe081trrk\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CTjDx1hdg11Yd9iVqJYxver7gYGimcTJZ1SFTuTL7iInSwGq96ZgLwh%2F%2FEcM%2BcvtWL%2BhUXLU0UhPInlnntoBUWo4Kwo%2FFYpJXYSV7vXjworr37JcHRlstN083enzdzklQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d84c7f4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35984,"size_decoded":37013,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"dafd7eac281412b0f7a35776ec9fb9c2","sha1":"88c5f370f869b292fd6dcdda1996984f5073bd0a","sha256":"8a2867174c4e3a1acffb25383d5774212deb1b30deb19584be2eb489d3fc3a19","sha512":"39a41c8341ba0204fd899c8142292e3b8689facaa622153083e2033cdb767d5f4df81ca09c35d837992221f09e99a19e95a2b6c46e7d76be85a76bd456f627da","ssdeep":"768:rm46U/g5AMsdPBRsEo8g5sUZyzKA9P9QZS6jLau0sU7jlnwE3VIqCS:rmRU/g5AH7g5tZyhnG7U9P3pCS","tlshash":"b2f2e1ed7748c526e26e523dc3386a767794ef517ef062d73813aa2427310598a0f2e3","first_seen":"2026-04-10T10:02:45.681052Z","last_seen":"2026-07-17T09:16:40.240949Z","times_seen":2,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/treambula.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.344Z","timestamp":1784279764344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/treambula.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/treambula.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khib0yk8693\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WibLDtci9BppTUFRguDBk0ij70Mb6dPN%2B%2B5QDcy%2FhCXizC5aJegvxdR7C4%2BarCSXsYmYVt%2FmyB2YqRITOwIPne1U4L%2B08laZC7%2B60pe3R1hz0XsOZJVbxHYNkhUIspjaoQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f29a34c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8103,"size_decoded":9120,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"04b04de335e3e24883ce140beb1d6afc","sha1":"f8180cca74a9691e3240126b073a89b32d602506","sha256":"2873c68b9295b021f1cbe1367c76799bb0370b01f613dd5f6c6b168f85ecca54","sha512":"f1556dae64a9b7a3e25ff4b2f89c5d6943e581da7619e8a0da9207d9e14b42a3bc1a52c943f1e5d3a95f2916ad120a2f0b84f39f2b7243f483e606aa74eb1e77","ssdeep":"192:swmXY8ML+3dBH54pBn2dnDV0m1v9rYmP1MIK9dLgNZtCy25yaPOpv:sHXhW6d5ipKhF1v9ciK9VSnCy2D8","tlshash":"e8f18d8a1611e986d03c76ba65b3650a3702bd714a782bdf28878f143335ac38dc2d9d","first_seen":"2026-01-12T00:47:41.845256Z","last_seen":"2026-07-17T09:16:40.242671Z","times_seen":4,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":853,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/drop-stone.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.345Z","timestamp":1784279764345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/drop-stone.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/drop-stone.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khg6thfv4sx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A2gfSd0u2TE0XnAe%2BittDO4gjXbkNkH%2B7s1YcjqhSTD6NWFsHu8R8TcMFNLIfj6T8Rs0VY1iKbcwVywISVK963VnpuQYvYdecHsib1UTw49yfEqZDnPQ9IvMsoqg4u%2F43Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f29a54c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6225,"size_decoded":7235,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"f1a132a94957b718c850f3ef065cf1d8","sha1":"2d9967e5d79627e273d30e5ed9e218e5a7cc9f13","sha256":"6928eacaf2715eb1d4c8e33b8bcf7fe35aec93d52f2581aa3374a7c5e455884d","sha512":"cc369665c010e757dfd017ac1b312daeb1d326da3a4bc0fe499b69fce9f858e415edaafabb87c0951eac966b5a8d7e067e456e6c280303090cb8b65e4aba1ea1","ssdeep":"192:wi6i8g/9XWZYW2fZqREQXDcY+3Xqq871MVRE:tJ/trpORXAJ6q874q","tlshash":"09d18e0b37e52814f2bf20b95d2dd3400a28ef97a941be3e68029e5c5f7b0c01dcc648","first_seen":"2026-07-17T09:16:40.243435Z","last_seen":"2026-07-17T09:16:40.243435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-0.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.352Z","timestamp":1784279764352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-0.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-0.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxyhzur1bg\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xz4VxHwbER0R5xpZ3d85cIxqFo0U4XkQTFhV%2BmmP2y6qnExK0iNWrc94%2FAYUE5oF5LkDMBGxR2vzrmh47SscBHLkwZwyxxq4qXGcjXRJ9uCIBLBbFI8GfgLRX%2BN89n8kvg%3D%3D\"}]}\r\ncf-ray: a1c8254f39ab4c11-OSL\r\ncontent-length: 713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1708,"size_decoded":1739,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa320b6007f49925b128402df3ed2b3e","sha1":"d4905d93611121b3de96c8974fc6f723f5c53a12","sha256":"28e7fa0d8ddf5a3d49cf6766a8fe272dd4a382c3d3e35c0ff0fc88ae1d889a69","sha512":"d4b5a64ce4f96a76ccf7076574431ff4650e79bac7c22d53406000e83ff9b61820386084ec2bfea29b59d850f3e27e99b7f83d166c1ef5464b684ac498d449d1","ssdeep":"","tlshash":"6e3152fc33dcc5d4550be3d0d335180a797b38f96f9ae65d80e50914eb141ac4ad8884","first_seen":"2025-09-23T10:56:20.277213Z","last_seen":"2026-07-17T09:16:40.250914Z","times_seen":60,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-8.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.361Z","timestamp":1784279764361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-8.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-8.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyf64q316h\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKs8LAHqCUWeGzTWfX9hP58lu%2FVAFNzqxfFkVHZQc05XU4W%2F9LBr1CijqQjJLS%2BboGdNg5vKIeuJoY9U9xEH%2BS6O%2BvN4YPhF%2B1YKFDN%2F1%2B2VjXuWYSVHi90Ri0Ly43KlWA%3D%3D\"}]}\r\ncf-ray: a1c8254f49b54c11-OSL\r\ncontent-length: 682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1529,"size_decoded":1718,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"763cf41016fb36fd4e6ecb70afec92ca","sha1":"4457569ad0393c21813aaac73f12511d5b9e6964","sha256":"547e02336706c25450ce64cadfeea78c83d84162eede33a1c2d95c30984fc3cf","sha512":"bc4ccd2b40e5770cff41c0cb5b615c9a60f69ea413eb2fd5e48ea35f1c161e86ccc9316469c84e69a9d399ae55fe8eb5df0ea4ff51c9dd20b60cca6688f27623","ssdeep":"","tlshash":"033113fb934cb9d0df0ab7f0a66651a5651228ff7ab7c9dd82e12d168d5002ecc4c911","first_seen":"2025-09-23T10:56:20.417198Z","last_seen":"2026-07-17T09:16:40.253628Z","times_seen":60,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/crazy-bananas.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.318Z","timestamp":1784279764318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/crazy-bananas.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/crazy-bananas.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khmsyug0lt3\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHZuBMctt%2FlETTWZtYbqWond3mgSiiEIJe5A6oAIbJ0%2FK%2FYNYJEgp9LkXpWFn%2F31xrhPspyzzhVcNm%2Bt7fzGqEp2ayRJCAS3RnhcU2NZ6UONI7YahOa%2B0p22fM7uoAHxYA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ef98c4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28263,"size_decoded":29280,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"db70493c5fd5455a8d9fc955da20560b","sha1":"69819d0a31cf226421224d9aa04433e96dd4ad41","sha256":"4de17e8b8b843904fca83a374c75a0902712ae002ffc59bb46f4af2dba75f750","sha512":"a01c140ad36ba3de1db0cd14a16ec11cd22a319a492172e679e89549ebeca63d6d3a2141bbec4276ab31e2d6903b8d137d475f555675627d6e0bb6154f345e7a","ssdeep":"768:fblf0Cp2KuyaGPNcPb2QSJ1LPMO5EzAoW42EjX18:xf0fzDJPb2bLJGFSEjF8","tlshash":"6fc2e1c37bf4a80c777f873293325764526c549eda17649d68321e083e333a36d9a87a","first_seen":"2025-11-17T14:16:40.557417Z","last_seen":"2026-07-17T09:16:40.254657Z","times_seen":3,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/previous-arrow.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.329Z","timestamp":1784279764329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/previous-arrow.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/previous-arrow.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QswMTBuezlg6iakU7olCmDqGr6mjOYUYt9geEswcwyMA%2Fo8miorGqnyX5o8O4YpjfJ5MEMIR77UVi67ns7RChgQh9%2Fx9Vf8LRjuINXs24MwI7%2FQHEdYIZ6gwcX8OsY4Vww%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52kjytgj6n6n\"\r\ncf-ray: a1c8254f09954c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1161,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c984c402c33c19defa622a555ab1ca13","sha1":"0806b39e6f47d810a71a7284887ba8dcbe29551b","sha256":"a2cb3406d6dc745a6f438ae2b5c381141da3dbe56e664949bea2dfbcadbde1e2","sha512":"e3b4bf714c1b071b3d531ffbf3f2331765cc7409e1ac764a2d958457ea315415a5050b17fd2612b3f9b8555242b9329882d79554bce4f0638b0855fb6b9c794e","ssdeep":"","tlshash":"6fd0a7a953088e3cb2218b11fb29323570ad61a359881194da611a31a65456e7d7f6dc","first_seen":"2025-09-23T10:56:20.491613Z","last_seen":"2026-07-17T09:16:40.257393Z","times_seen":81,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-1.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.353Z","timestamp":1784279764353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-1.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy39goa17d\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=894HrvQH1RBKmPpM3%2BMp7yaYubZYZvl9%2FnnpdCH5YShQHKSvzW9whu6RHo4g%2Fye0Nl9srNUTuDUuEnu8z61SOVRg2Lhcg96uGvtkoLLlko4yo%2BTQ4oVEkyeyaWER3pfkmA%3D%3D\"}]}\r\ncf-ray: a1c8254f39ad4c11-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1561,"size_decoded":1647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8de41f5da8783028edddb1f521f0398d","sha1":"78b41d70d90a89940298e7b3b65a8fdff911fa9f","sha256":"f3018c6592ef85c6177eaf5368ee29a093e8e755e025061c7ee22555f329b0b9","sha512":"d11bbb2f2f9445bf5df0ceb5d5da933637472f9c1681f4156155f586a50e092d71b65a396ee923028f97c8143daa3005b345fa796f68408cb7fb43c0f4a9d705","ssdeep":"","tlshash":"2731a7eec0d1a2c064b973fc8c3176e4654b3c7a6eb7d3764447d1a27e240988c0d959","first_seen":"2025-09-23T10:56:20.40165Z","last_seen":"2026-07-17T09:16:40.258216Z","times_seen":60,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/winning/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:11.716Z","timestamp":1784279771716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 109\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":109,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\"],\"locale\":\"cs-CZ\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZI%2FeGAHdg%2FKX2re54xbBwt1DObIxHbijhgX%2BtP6IY4Rey8BBLuO2qbo7ayIPtlYqcykBSaEXCiqhWUsM5b%2Fdtneguo32nake%2Fbi4Z%2BLzV2iI2sByev2iJIWa%2B61TfX71Q%3D%3D\"}]}\r\ncf-ray: a1c8257d3fc94c11-OSL\r\ncontent-length: 616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8695,"size_decoded":1607,"mime_type":"application/json","magic":"JSON text data","md5":"9008507c446aaa401eea12baf5941954","sha1":"64c31314ebed45098d5816d97fedfb7ffd5440e5","sha256":"d7c69daab0f3d5f8433bb5f4364051d5c64b067d3f3a5c30ac9ef38013ca6944","sha512":"c4f77d1f3bb8eb4dbd3f61004c38797c6929cb83213efb3560fe26a73e23e8feca5434705e087591a368f349a5117e31781c16c5121992bbb0f88a2c1a8f25db","ssdeep":"96:eUfYPkvfHCY5hf6fHCYffSfHCYUx8fAfHCY7f0OfHCYtf/fHCY/fSufHCY2fwfHS:eXPknBWscPoA9H3ejYfTB+","tlshash":"f3029f66aa62d63f72d3a0e0ccb7ffdd1458da61a02c8534bdbf19a2c3234106e9471c","first_seen":"2026-07-17T09:16:40.259026Z","last_seen":"2026-07-17T09:16:40.259026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/roaring-wilds.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.237Z","timestamp":1784279779237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/roaring-wilds.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/roaring-wilds.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khwlff4oow0\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkjzAnpTc%2BmJ%2Fuu0CAKTG3Kiq%2FiuWBGbmWI%2BXHnFqmtzaiC27baQEQfQGxGS4ggK7WXhzp0wT9ZgGNvO%2FqCdCkif%2Fe15Nrk%2FhslW2YEuiyM8%2FllFhANBxjY81lp0GOKC%2Bg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac3d2f4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32256,"size_decoded":33279,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d037e688eb6080fc1143cc747321a2a0","sha1":"1aead96b2681cf5d5234229bfe78add0aad3d3d4","sha256":"0ed42867b8f61ae5a2850b5affec91660aef8b5ac0606c0e9a7d31d4c5eb9259","sha512":"e86452eb5860be0788d29345b6d33e3777f821b34c2af6a8476eb19566c306fe65df9a4dbb52f7c46add29a3d7f59ef73fc3127e42ae6786fb22df0fa4a972dd","ssdeep":"768:xy0psVqaPWb0QV1pF9w7VnRnyYXUk2Lfbr+3JNS4+II:xyjS0QVhOVn5JURb6DSvII","tlshash":"7be2f1522e45d3a17aef3afd25a8e103d79b8ad07bb302314d58b7533b7a81807251f2","first_seen":"2026-05-18T23:51:30.684908Z","last_seen":"2026-07-17T09:16:40.260984Z","times_seen":4,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/play-green.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.300Z","timestamp":1784279764300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/play-green.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/play-green.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyop2d4jz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTq7ua3vesLG1x71QEF9aNPK5GjVlQSuHicwq5FoRryCJ%2FUgCH0WbFOJQqnhq%2F9VQ%2F2f4N7bcvEE60KMjqkdihu29PkaUa%2FqcH5AsCPwlgd91PT7Ds59BB98gG6pbsWoIA%3D%3D\"}]}\r\ncf-ray: a1c8254ed97f4c11-OSL\r\ncontent-length: 344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":1363,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef71ce3378289fb255db406156262678","sha1":"bbfa96c0f5732006f3ddb4868b606374c71d1b57","sha256":"e7f7ac71134aa0dfdf47990ad3f2e0b4de0f5efc4aa9cca528ad0019747e5e85","sha512":"42561dffa655ba2fa5903839adeb82365c2918f05d6e4441c54894cae46cdfa0685ee369adc6f989b36825925ecceee3a30bbe457f0fb8b64f89732f15b23624","ssdeep":"","tlshash":"1e01f4fb27859134e1543f45dcb49264600170d6bc65c275d1f71e1dd270c4e44946f3","first_seen":"2025-10-14T14:51:48.927534Z","last_seen":"2026-07-17T09:16:40.263006Z","times_seen":28,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/mamma-mia.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:09.134Z","timestamp":1784279769134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/mamma-mia.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/mamma-mia.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:09 GMT\r\netag: \"dh52khulzetunjt\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XY2%2FjRWLfwNmVTDVJZKo3w6pGwTWOFqoPFfe%2B0OyqrM53SAo2C%2B5RTr235TVh8IjoxL73JDGdQlWJjiH%2FkpRf1lqhtoL6ozx9uHDN012S9Pevc3%2BiivczOIDI6WlXfOJrw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8256d1d4d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30521,"size_decoded":31532,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"1c81bd9567c22368ce4cbffa12d68349","sha1":"a66ff2db1e5b613dbfc57a82f1dc54145267b59b","sha256":"46c3007dafa04ff8b0e1c42b23e93826212087bdedfb2c8147855ac894901c6d","sha512":"b4ed1bbc7fc5efad5fa536eb2c5dc0d92cf8d3199375086ae8162a3bcb265cde1b4902fefdf7ccd48a076084797f433f5976f2433af8191cc71e9007ab25e54a","ssdeep":"768:2eyGyZA7BPY8tME8LPfBTUgD3kTslvKh+Rgx+LsIXGrVktNp:ryG9A8uE8bpTUgTG+C1xMsIXGrVYNp","tlshash":"9ad2e19682cb5a03f2ae638183187e7f66062e9e94551f0b3a1c6c93df9c784de7c431","first_seen":"2026-07-17T09:16:40.26369Z","last_seen":"2026-07-17T09:16:40.26369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/plocek.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.212Z","timestamp":1784279779212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/plocek.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/plocek.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khhbayet6yi\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mq4bOovCSl%2Fm4CvbFp8JIUhtPq9tlPuNG%2BmMtlzznCpxotGLDt9fiax76iToBTslsu6bR3NOtbe%2Fn2xi1dw8X0dI2UqUhqvgg06BvChUZ%2F1Z447Nu0tIZra3sRWeLckpsg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c825ac1d254c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9018,"size_decoded":10026,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"af30aa077787a8ef6e3e7372d40e92a7","sha1":"c61a5b7492ee12ac2b635ab8f08ce3e9d764eef7","sha256":"8e25db5099031d826279530614d3dcb6ce9790ed89ad20145f9f97ba1c4b9fda","sha512":"fb565fd88e0ce7fb976fe6806dc05a1081fa3a060b30dafe3ceb52721e8b7e9aa5b3b15ae675e0cd6bae487c1f9ef393251e28ec84fb8bca9edb81007eb6d91d","ssdeep":"192:ncqo6Y8iNV59fF8GEykqR3i2M0HWtlZVdOvsSbi1Xm:TY1NlFxEBei2M0H9vs4","tlshash":"2312af470b905352e14e327107b8b3a6b050b63ed1e4771a3a761c8beff73a92695068","first_seen":"2026-07-14T13:54:41.522455Z","last_seen":"2026-07-17T09:16:40.265355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:25.852Z","timestamp":1784279785852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuF9gWHWYb7HO18JE9tF%2FTLeHRUbZAzOeK9z71E4ufBd1SzRPjTmBqfn77iZPz3yfk2ya4ln0SRF%2By3FDsGnCAXqh%2FjqR%2BpkMi%2FQdzbaCBqribYTWcBWmbl8Q5BBoC4iPA%3D%3D\"}]}\r\ncf-ray: a1c825d59c1d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"b2780ef1d61affd5a7eb7f77fb6b251e","sha1":"4333a89af5d44b38e84ef6cdaa7b00a612a27db2","sha256":"72b2931fa2089dfa6bf93d3a44a56a8665db32c381939ab7e1cb81446028709a","sha512":"d9c00c7d1ac899f4af90c1531c0cec597149c3ac7cf7d7f97d47a6de700b659acd012f99c4217a4d03dd16d118d95b9a25329dc4263463021f3634501ca55aa6","ssdeep":"","tlshash":"5eb022cb88c3bcea82bb83000c2f32c0e03c0e033ff00a0023808cc28ca000b00abc00","first_seen":"2026-07-17T09:16:40.267332Z","last_seen":"2026-07-17T09:16:40.267332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/bonus-poker-10-hand.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.282Z","timestamp":1784279786282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/bonus-poker-10-hand.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/bonus-poker-10-hand.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khktiu56ezc\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrszFT7Fp8pEgGPpvP2y3gllJMN8KIQ4U9z6OPFuTUFIgTAdail%2F6n9JoIDRkGxaGhnOEdHW8gvlO5MPEo2ZwaQhMprwBk0I90QhNL03vKzeB6CsIBwegSnAnsrGOtzUEg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d84c7e4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19416,"size_decoded":20429,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"d6f6167d33d6d0b66350dcbdee694c56","sha1":"abaed5505eb0f1d8d2a3e49aeea70b4029f11334","sha256":"dae696416bed7fe22d05f3102deb3b23fbca2266ebed9ffe2c3b6f28a794219d","sha512":"1073df574901bc8741e1ac9eb25f06cf40e42db6d183266a8cc5fcfea345ff9264079e902480a3bf464aab5b00694eb5a7380e5076d0148469cf8ed4169ffb24","ssdeep":"384:IkGu/QLFgujby41uG64C8D0ebGtKxQ0YUOGfMfYPCWxJEGHjSGu34H:Ku/QLFVjbyCu38DhGtKo44QCWxJE+jiM","tlshash":"9592d1b74601f81ded3f05377a0e0694c93ce168efe54e22665888740b2b4579b63a7f","first_seen":"2026-06-11T03:08:59.283398Z","last_seen":"2026-07-17T09:16:40.268649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/book-of-tribes-reloaded.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.288Z","timestamp":1784279786288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/book-of-tribes-reloaded.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/book-of-tribes-reloaded.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khl7t8lqtpd\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BG3GCBVWy%2Fmk1JXG%2Fp8eC8Mdd4jaV8RbKESklV1j7ahEz03UgVxAsOuTuFtbFuWDLrRFf5GegYHXQNmtkpybP3auqK4Za0VWVle8iwMwI5Zip96abCjygAKTPezsxzEwA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d84c824c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38497,"size_decoded":39518,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ec0996709136ea15ef618cbccfd0143d","sha1":"48d875f266b111ec546ba0d2f8098fd3e23d4874","sha256":"fb583148af676e01dfa4c7a309ca3cffc37d3eaa79fc88dd422629b4f1f8b742","sha512":"56843921651399506b35dece1cada78ff65c52da055d8bba188df1e08be753fe5d8ac3d1260edf092fa1a6c4ee5e8e6dfba94bad02b8a5e17ae4dd07441309d1","ssdeep":"768:o3hbla4ehOzUdgF5mp27A1Ukxy0pocBSwAcHSzPadq+:ox5TTog7mp3UkI0JAlcrx","tlshash":"0303f20c63155c8aaf8c5eae007ba338437ce8500a7e6a7d9797c220cf36da639d9557","first_seen":"2026-06-01T02:18:17.46018Z","last_seen":"2026-07-17T09:16:40.270018Z","times_seen":4,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-5.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.358Z","timestamp":1784279764358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-5.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-5.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BP8xDg%2FARgKhxbqKfAvgXVyjyDwRQM0VrDi5dErQ21w52UzJekjQqUmIhLWorCdZ5wMKiU2lTxq4nRZcYVrjn7YvmqQH99HjOwl6ImMrsIoBEAoj1I1EBXnmzf4Ddr6PQ%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52kjyaenwkdb\"\r\ncf-ray: a1c8254f39b04c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44437bc074c7c0946c518a802a0250db","sha1":"1b42f0ef63627752dc0d0b2d0f835e062484ba3d","sha256":"eeeca5b3e5758a03382583ffd0130b9640c4d4538dcdc7da1f6af5a943b522c0","sha512":"fa0416cb6707155a511635b8e2289f0e3ffe04a23b8ed026ff81cad154aaf0f8f6e1912d3ff48996644eb27a4139ab062a4ff6c671e22d5b2bf756e5bd192183","ssdeep":"","tlshash":"d4f05979b34820405a2cc73099dc7cfe316f322623845088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.362497Z","last_seen":"2026-07-17T09:16:40.270524Z","times_seen":60,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/1.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.371Z","timestamp":1784279764371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/1.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/1.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxw49g01be\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RR46ZCawpBv%2BVqF6MV4N8%2BaquQk8EL%2B6KqNQ%2FEHCMVI7JmWX7f23QPeUD5w4TaPHMTuOUI%2BXJt1F42fRWuEvifbjdBrWnWGuugMEp%2BddDh0zTAug%2FFHPIZTDwFzQxCidIA%3D%3D\"}]}\r\ncf-ray: a1c8254f59c04c11-OSL\r\ncontent-length: 712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1706,"size_decoded":1735,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7939ced2f00f966d96df6259b176181","sha1":"ccb852adadddde6148885995f7a9830b41fcbcca","sha256":"dccac0c3395375b36619af3a3f58b4246a3c9e80539f383873f8c9d0805a17fa","sha512":"faf4cb8a3733e770bd494bbbe39c122a91d77795282db091f4906fd9de4c5cc0100ed48a1964d144d6bbfd616caada42feb7d86e625a6c1e0679df199faaa817","ssdeep":"","tlshash":"a63150fc33dcc9e4550be3d0d335180a797b38f96f9ae71d80e50918eb181ac4ae8884","first_seen":"2025-09-23T10:56:20.41091Z","last_seen":"2026-07-17T09:16:40.271159Z","times_seen":77,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/4.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.374Z","timestamp":1784279764374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/4.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/4.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jH6SfSL87rnn7OgSW9bK1l2GXGoLcDWCgcch7RjdtDYLiqOXZqG1jG8rPHOR87GTuXNymmETzxKcs79ZqLYqljH0EgesfWO8lNDOE%2BlDKYZ7YmTETEtjxWAQTPfte26J8g%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52kjxw49g0db\"\r\ncf-ray: a1c8254f59c34c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":1265,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ee164960aff929fe6f50fddd0dc9a4d","sha1":"8239329ddf338f02f75e9a930189bd8fa50cc526","sha256":"8b584f54de8fc8977262beff46978fe77aea372ba290013fd1e0ae1f003182ec","sha512":"640a338fd999b248e62fb14060095ab32ef993607390aeb786d9e8526b7d7f8336210e8b6ee3eda946f9fb7553ac2b57d328efb7d389b03a105765cedfb82143","ssdeep":"","tlshash":"86f05974b34460405a2cc73099dc7cfe316f223613844088e2f95cb4e4512a91a069e5","first_seen":"2025-09-23T10:56:20.288287Z","last_seen":"2026-07-17T09:16:40.271735Z","times_seen":57,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/banner-square-69b94e963b36b6.68015560.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.594Z","timestamp":1784279764594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-square-69b94e963b36b6.68015560.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/banner-square-69b94e963b36b6.68015560.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh54x8f4nklc1dxg\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLlfhc53UmaDj57zPgLUd%2FBFBpPaq95hJB6M4R8iQShMqvqOwE1KAGzVyGIBcXMFdKpd%2Flgq3XQOusyWeFYhB1Pcv6Xa2A0T1mSYvWAa3uRk%2FQhXcaFoWq%2Fb4q8hiI%2B0cg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550b9e84c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64708,"size_decoded":65757,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 360x334, components 3","md5":"59de7d4feeab028f7bdc3399c8aff823","sha1":"80fdacfebf1e6bd93209d0b7250fb90603064d40","sha256":"89a7fb6f3ad1c841a1bcaaf99158e76d85a201bec110cb4bf75bea5b58dd1474","sha512":"4afc6975e4694dbc483c2703be56e8f9c806430797b98835446c809ccb79f83d4bd9528eb08d57c9afebafa3400f03ab469d7f877a70f9b10531e01eae9bf6d3","ssdeep":"1536:viCtcznX4V6Y88nfmhMtvv/dmB6sHceGSl4S:rczXO8886XlFsHPGS2S","tlshash":"6d5312da6b6242344c61045156c308b6b5b124b6fb202fad7b2d48d1db3eb5efca7c4b","first_seen":"2026-07-16T11:19:41.93475Z","last_seen":"2026-07-17T09:16:40.272328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/banner-popup-69b94e9627ee00.80469453.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:10.714Z","timestamp":1784279770714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-popup-69b94e9627ee00.80469453.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/banner-popup-69b94e9627ee00.80469453.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:10 GMT\r\netag: \"dh54x7i1wmps2a9k\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ortFXjdnW7oHQZv0EHeyKyrBOfqDm8Z%2BUfq%2F9v3p%2F2IxRh5RvGAflZQ%2Fr8z6djvzGM9PhMXJPlwhNybq5m%2FLxTFlWICvaVEe3mz%2FQhdWeyqFAdo2LA21jFMBLfXQS57HFA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82576feef4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106616,"size_decoded":107671,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 450x345, components 3","md5":"ed5050dcb7df767c18dda206856e1b60","sha1":"0972e4c3ab4a0b65412629a71f7334c12d4964dc","sha256":"323e73830ca4870f4be8960b00e0124bc579f25353930f50588722f6b0e05746","sha512":"0901c978a7f7b1f25c71dcbd40fe11f87a248dfc7a348d6b9b53f691c9196ddcee8cef0beb75c2abb33ddd18784eacfa7953f88315071ab1dd77f5cd2b6a3848","ssdeep":"3072:UkQQE0ebkMKbmtlSq3c/EWRdy91tBqguVVsYEML/eqDg0:UkBE0e/Kbmnrc/jfK1aFV4C/LD","tlshash":"1fa312e98e371dc3783312fae4a21f995c292b35fd1206ec6291211be7d7d8b2e45c90","first_seen":"2026-07-16T11:19:41.941397Z","last_seen":"2026-07-17T09:16:40.273558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/images/close_icon_alternative.30d11eeb.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:10.717Z","timestamp":1784279770717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /build/frontend/images/close_icon_alternative.30d11eeb.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/build/frontend/app.css\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/build/frontend/images/close_icon_alternative.30d11eeb.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BqgtwKInAY56HWjkMppyOg%2FcG%2FbNcKAlg0u2sMDVeVxp56bUkC6VIFvGuCsrih9iUX3qewFlQX2VK%2BLYzNHy%2BNgZ1RzVt2jLF7V11XIeWmBGtdQy94BSd2bzt6yVY7g1Q%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:54:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52n4jbrpu85z\"\r\ncf-ray: a1c82576fef14c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215,"size_decoded":1180,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f9483da40b704e14271539a745abb95","sha1":"66fbac8132e78db3073210c24d70368931194f0f","sha256":"674f051b16abc0fc18ecb639d06d5ad9d3c8cbb7fba4dbc01b86d52a110037a1","sha512":"85ebba8a7956f2cfc4e8ecb92f07f4d8352e96cec0d520b10dfc3073b11056fd59a5c80f464d3b2416622c66583491d02f0508d9176835a04ed8b57040370cf0","ssdeep":"","tlshash":"bcd0223e32084d2eb0208620e7a83135506a61435a89205ced3228332201a6f7c3b6fc","first_seen":"2025-09-23T10:56:20.51039Z","last_seen":"2026-07-18T03:24:45.619013Z","times_seen":109,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/burgher.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.168Z","timestamp":1784279772168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/burgher.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/burgher.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khfnrm5s3b8\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2rr2eIPK9%2BfK92AhgUgkL9oZLgeR8D1zHDLExW4t31buVaTcY1uz1jVxKrAfxI2uF6%2FK4cmoAHzUgclm8raivq69ksw%2FONvS5cYj51nBKiVG%2F77Bp16DFjPftRKrP9hNg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580081c4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4292,"size_decoded":5301,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"57e3ac0aefe023bdedb99d80459bb890","sha1":"9b3fad3a77ce524de8af0abaf734104e8f6bcc3c","sha256":"07b44b136f7f28755b8d1843ca746e15d46974ec345834bc674a28c535438eb4","sha512":"00972d57f332995710f6a442e3c5f7814033d5950839c2a526aa3f211e6aee7932d8c64a0e0bca1ecf535df93a2ec58d7a90c450fed99059cb3c88d972f3091a","ssdeep":"96:/QGg+m58sfojbnWpGn3Xi4y62vcsCBeB0WONX67gzGF:/Qv+mWsODaGC4vtRKaY","tlshash":"c4916c5ecf090714d47e17b459f4ce0a1b2a1c203c11a7ae31f059485b6ebcf2d956a3","first_seen":"2026-07-17T09:16:40.275257Z","last_seen":"2026-07-17T09:16:40.275257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/jackpot-quest.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:24.219Z","timestamp":1784279784219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/jackpot-quest.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/jackpot-quest.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:24 GMT\r\netag: \"dh52khs5v9nop36\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2WIrgbw7XYDvKemSZy1U%2Ft941%2Bk2clTHb9WdX8gNbwxeSMe6zcHYEJWY2A%2FXtFGSn5AKn0cpt%2FxZjlbzlVMpxvZdfXeLj%2FqbDO8RI1dsjoNQal6BnejfsKNv7PDsFafaQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825cb5ad84c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32514,"size_decoded":33529,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"b27e1b344a1357bee7ff6ba2254911ca","sha1":"cda78539a178f41a726341399c61b697f678f847","sha256":"dc765e5cee31d9b16ea03e10bfeb94c09f8f4aed3fa7430439f3de6191a9de08","sha512":"dbc7eb6792bdbf05e668cbf73d3166cc44c63d3f347f0095c4a352570d262c9d771c19ed0b03af993a5ca9401a13ef97cb218ad6c74bdb7e038cd894adcb8020","ssdeep":"768:2Xm5yNJ05V+bGVsx5mX2m6nlQD7Y7SfeuyjFq4164C0:2XmsN2rKis3nlQD7SKyZq4kv0","tlshash":"47e2f1f56fecda9e9c3f0d124073b572f40d2d32219247699ea065040baedf587a7d90","first_seen":"2025-12-21T23:52:24.825378Z","last_seen":"2026-07-17T09:16:40.276713Z","times_seen":4,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/temperance.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.336Z","timestamp":1784279764336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/temperance.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/temperance.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khi69hqq57h\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5AhWF%2Bv%2BGp34RU0zuLuDV3m%2F68goPmUr0r51E2%2Bs3zK4k9hXHt4jDY%2BK3sWh%2FLa%2FFa0nGUtVF22Yp%2Blgi6n81umLmCiWOw0rljuoqNn5lE36gX1ZgFoUIUBxA4R%2FcidLQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f199a4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6749,"size_decoded":7771,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"5a9da7160057cff927095b683bd0ecb1","sha1":"e1ea60bcf1b1da6a15ce3e93eee97b2da22b13ee","sha256":"83b66de528aba735a6c66d5655d8c6fed7ccc2335232e6f320cce407ea099010","sha512":"48476cdeb8e4700ad20823c12481331e0882d81044233132d6284314579db78c7a104d384e9e9874f10a80e8cb8eca1bbe1d460b355f3da99bc45371c78ec116","ssdeep":"192:OpSEPkkzuT6WG42zmMqvjBUIjZy6xyj0yPoIG5PgV:Op50tG4fvjBzty6yPPop5PgV","tlshash":"6fd18d14362eba53fc0d163a635d1d4d21517d882953cb37aae13e4737be7c683b8216","first_seen":"2025-09-23T10:56:20.425874Z","last_seen":"2026-07-17T09:16:40.27811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:07.731Z","timestamp":1784279767731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:08 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FsAX9okYyAYFlukVSjnaCyJr%2FS%2BdAQHFSrqHb4qHRYOvgtVW94E4VmVhCuy32etSsAmmlwVUTjHDzImRpqXTahEWvZuPbWTeQsFLYqVN%2BA7yLS7cxMAlxm8hKZXR1q1sg%3D%3D\"}]}\r\ncf-ray: a1c825645c4d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78,"size_decoded":1026,"mime_type":"application/json","magic":"JSON text data","md5":"05e03ab58219cb6b9503965dbcc0fd4d","sha1":"df725053563ac9860a3608904abaae68c9f6cb23","sha256":"744f75407c7781496166ef909f8765b44e0a332fdf6150290446fe813b13d6e4","sha512":"ed204179b209b7a47b46cdbffeb407cd2847662ebbe3a04c9f04b0f3d3c9040c63ed6a6e96c3a12d89923958bea5da3e710a745b9031da7866f7d740ed2d8d51","ssdeep":"","tlshash":"a6a002fee84469ce97b326085e5b31e571740f9722a97d18a7ccdc824ab53460427eb0","first_seen":"2026-07-17T09:16:40.279683Z","last_seen":"2026-07-17T09:16:40.279683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/riddle-reels.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.231Z","timestamp":1784279779231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/riddle-reels.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/riddle-reels.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khwlff4olnx\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FygL%2BQxNCZgwmyZ3hDj33Rwcsz49iZP2aOUgDjZh1q3jIs0HnE2%2BOjAGcT%2FWGCCMWayewMomN1scjCpHjmrHURoXFXBYHxFgrpfXodYBnBl0hm4GcASOK2gE1UhOIBgfMA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac3d2c4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28077,"size_decoded":29087,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"d10f8d2ce524221d5ba7998d03094f88","sha1":"a09bf93845948b46a2a661d8dd0774a4dec167e9","sha256":"32b07c4daf5c57deb6dfdf507d464e09e7a2bf023006ae8484f1f0ae182da006","sha512":"30548ee4291a405578dc947be0f3b638b8671990822366c5f990920a4f40191c99b91ddbcacce898d4c5bc9dbd10737441c6e9684af54bbf5423317e34807595","ssdeep":"768:woag7uFnVro0TbCRCXSAjJfKAiBxfryBN82E3DO0R:woP7soaSkpKAiBxfuBN83TO0R","tlshash":"d4c2f1757e7a2259d4c96136365eca021d21530cb9d76a2eeb8e0bec1c37a0ca3cdcc4","first_seen":"2026-07-17T09:16:40.280945Z","last_seen":"2026-07-17T09:16:40.280945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/winning/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:25.748Z","timestamp":1784279785748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 112\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":112,"data":"{\"exclude\":[\"302\",\"1501\",\"1425\",\"1192\",\"646\",\"1569\",\"2391\",\"1122\",\"1070\",\"1636\",\"2108\",\"1308\"],\"locale\":\"cs-CZ\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rfy0jXgwo4OSo6qWiNkQws0zT%2BXOVU3Mv6AonJ%2BL4tuLgzomUYKmKX8aDjxAQKya24l7VBetd2dAucaOJmorn6Sr0ep6YYLR37hlRw7zVgPkZj4iW9MQdh8OpVP4TX64CQ%3D%3D\"}]}\r\ncf-ray: a1c825d4ec0d4c11-OSL\r\ncontent-length: 640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8750,"size_decoded":1621,"mime_type":"application/json","magic":"JSON text data","md5":"6845b9adee7022a425199794038068a6","sha1":"13a1ab2437bbae089b2aabc0297f03c5a332661c","sha256":"cc57279b73b456720a8ae4352c2318e986bf4fc0009635afc03fcdd8f74a1cf8","sha512":"acc6198dfc327365f439c1eea3af6aa48b1ded9c27ff41a205bed28dc8bd69d10ad0c70c3cca0b29b8912ef1ac5509eb2c77987399390949aadfe989bc7f42e1","ssdeep":"96:dfLfHCYtfMtfHCYvGfM7fHCYNfIfHCYJfffHCY2fMQefHCYef/GtfHCY5fMZfHCY:pUTA9IwuGJAyCXRB","tlshash":"d702a066aa62d73f72d3a0e0ccb7ffdd14589a61502c8534bdbf18a2c327414ae9471c","first_seen":"2026-07-17T09:16:40.282115Z","last_seen":"2026-07-17T09:16:40.282115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:28.857Z","timestamp":1784279788857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:29 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gH5JiYfhdn5iK5p9hE2LXBITqMpGl0tDo5BIO7FWblUbWJ1M%2B%2F%2F0ed4Z%2BEvmD45cVPzpgdnkvSBgODKcehGJL1VchEOhkuCUYIOqmXjzLEoW7tZSS%2F%2FXVboB2jc7yQHWcA%3D%3D\"}]}\r\ncf-ray: a1c825e85ed74c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":100,"size_decoded":1048,"mime_type":"application/json","magic":"JSON text data","md5":"3f6fc8739709a8bbe72058a6fec21cd7","sha1":"ecf81e08735978cedd1f7484cdb98cd1d7828b4b","sha256":"3d2e3953c6eaf7121ad7203ad826d8da775955945f92d26225de3dfa0dc4bf99","sha512":"38f0683de086964fc396069558fd888c94df849c2b347b2400ea2c89f34cfd76411d7ae06bf40509ac6ecaba8ffe6ccfbc8a062174783690f9f781b1b009dca3","ssdeep":"","tlshash":"62b012b740003c8b43230800df5631d0f06f8d8344510e403ae0b9840a98a030023d28","first_seen":"2026-07-17T09:16:40.28337Z","last_seen":"2026-07-17T09:16:40.28337Z","times_seen":1,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/arrow_left_icon_v2.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.295Z","timestamp":1784279764295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/arrow_left_icon_v2.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/arrow_left_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fk3xFoKyoEKTSrnadyzx41Q0u3zWIqH9cMphq%2Fqwhzn0T5LaaSp%2B%2B5wfKQZS%2F%2FyYbZJ2SAD14pyIbIna3rL%2Fqadl2caIdVtX1k940Tle7ytoNE6E7lGP5h06DCbWHKbnMA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52kjxoz27q9y\"\r\ncf-ray: a1c8254ed97c4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358,"size_decoded":1198,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d43950a1d8af3589210fa71aa5acd465","sha1":"29a98044aeae858e3c7c4621dbb0718360eb02f5","sha256":"bb897b7645e3d2de927772e4153777864daa5a85e584a6b8e05d0a90182aace5","sha512":"1e06cea8611ea8a204bde96441c6647395e6690052673bcaa32c5201cf0fdc8d3f32d02743e32b34f7d70a6fb5f3a11993809e007a7fd54c68c3f10796c2f853","ssdeep":"","tlshash":"04e026a5230c8c3cba224b28f71873768465129346d82198c9321a32694856e6d3f9d9","first_seen":"2025-09-23T10:56:20.446845Z","last_seen":"2026-07-17T09:16:40.28456Z","times_seen":46,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-10.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.363Z","timestamp":1784279764363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-10.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-10.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy39goa29u\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FprIrxAa0WrWMJf%2FKm9zbo%2B%2B6ZZhylW2TLDgcuUESrldJIGDUAeq9kbHNRcdhNRZFDeO48%2BracUro9pgI25oOriUI3h5efmGAE9wG61Tvw%2F6%2B1OmrhcrjJiMCod0uUS3yQ%3D%3D\"}]}\r\ncf-ray: a1c8254f49b74c11-OSL\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2946,"size_decoded":2375,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf19e0bcc8b2548cccf8f41676d98487","sha1":"3141412148b5170366857d4458eb3a06999878fa","sha256":"fa71cd3e8c51271d865c74f200eddcceaff5aa1caefe4f67c6e9e0e0ab0a7f7e","sha512":"2235b1ab0256802dccdb6e07a39cef8cf01df0869ed130a1a125d07632b8c7e932d873668b7e23819f80e0e607310a53f1e0da0d8261c46e6c0a9d672e11a9eb","ssdeep":"","tlshash":"2a5189f652d5b2e0c107efb0e923d5e9724e34bf2f6692c64049e9a4e2952d5c89cc50","first_seen":"2025-09-23T10:56:20.513339Z","last_seen":"2026-07-17T09:16:40.285141Z","times_seen":60,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/spin-party.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.221Z","timestamp":1784279779221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/spin-party.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/spin-party.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khxgdygliy5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PVvnJtaUmQGhJkc4gMPnBtMQz0hyL5TzkE6BGbFxFlv55YC5vkKPMX7P%2B0jnT2SS0gVaE3RW6FcnOFJ9tXl8t4fdWlX2mAsvMi9vbjpKO8YYg0TR4zzJ36RgsqDS%2BvJ7qw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac2d274c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24557,"size_decoded":25563,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"2f01e887d230abb9cb0cedcc3e6e210b","sha1":"d146f51eb531de91021eb93e3da1ed50a60f0cb5","sha256":"47e969907bab843f4c2e961c490530b403145666379d938cfa6de5562234d11c","sha512":"2863715cdd16cd52b10c116c527184582bf0dfa89f143da6d8ebf9881d787608d6ac24a9108caf524c4aa1e03a34b12c487d81ec90df591d9448bb409aba83a2","ssdeep":"384:15rLAjaW6EOuhcO8c1pA2a5VYE8FWCDqjGqvbTnDLADlSals60jKLWIRIHjtiR:15rL6/cO8iW5mvFAGqvbbgOVBDtU","tlshash":"81b2d0351a286037cb0c6a34f407519df56ec299ea1e9e078287e98cd37d89d0a217fa","first_seen":"2026-07-08T11:59:44.455514Z","last_seen":"2026-07-17T09:16:40.28572Z","times_seen":4,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/blackjack-classic-3.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.286Z","timestamp":1784279786286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/blackjack-classic-3.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/blackjack-classic-3.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khkf8folezz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLhJ%2BwDjUKqw%2FjfsaHgjwv%2BwDaxWXU7YbazZPJLPk3vhynnqkZ7F6LmQbt6o92ZiFYLxWLLkGVgB%2BVUOeGiEKbwOVerKAkfEVtf%2BydnrHLFVG7sY3KYd24kn2hH9n0Bd%2Bg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d84c814c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":20462,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e352ee987fb519ab2301529ae35351a3","sha1":"42e28dc77918ba90fc428fe88122d5bf21294ae9","sha256":"c75bbcc50acdc2a3db09bd1a0c977820d9eff4214e4b4bd51a5438e86ab788ca","sha512":"740fbc6f440de8a6027f7ee004ddb255e566def6098806059a1674c73e91051d363dda5e01f3db8f004f35c7cd976e462960b67215597a676e3ed72b91dbf037","ssdeep":"384:X6flZHgSM2WOa2Wv6w8zk7leGvLcuc/Q25YYezIrXLOgVb7dGCc3kT:qflZHg8TzMe+czbez7W7OkT","tlshash":"3292d05a29f60764f84ce0ba1cd2d8e6b523dd9725869f993cc2b71d670d088a8013e7","first_seen":"2025-09-23T10:56:20.325976Z","last_seen":"2026-07-18T03:24:45.56322Z","times_seen":42,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/5-knights.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.311Z","timestamp":1784279764311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/5-knights.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/5-knights.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khirp3fki1e\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRqE9oQEnbGeUowR5N3D0F2j7t3ps58SCc8%2BK1pFJyNOCvMs44qlvMZYZhW6vU%2FahK28x0KNrp%2BFsPzEi0JZ%2Bm4veFlbkWxWfUOegxp90j0vt64qpQOF5JPjqHcmtjk21A%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ef9864c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23378,"size_decoded":24387,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"656ef3cf29f05a9cb48644d0297a9986","sha1":"d22b0e8acc3531d38df1f036a84c200f7001aaab","sha256":"f8155ebadcf9cf5f3b642836664851922b8029a5ce7f72655fa3a4017afd1f9b","sha512":"820ed8b4ae6bce33556fd84fff52af379171aafd61357a5b8aa97f218eecf7f90f137cb9fee87bd24e4a3e2b211cb930c78f34ef10c224c1ef7d20799ac5b10c","ssdeep":"384:IUgW4Gg7GMzdXvrTn9t8492IPukaa8l4Bj6ZyyiYelq6T+S5VuECS:G4g7GMJfnzJ2IzVCoj6ZzSq0VPJ","tlshash":"6ca2d1a03877a5a3e8debab617be6150d2314b30d1cf950438b8e44ceb6c49d6de54b0","first_seen":"2026-07-17T09:16:40.286308Z","last_seen":"2026-07-17T09:16:40.286308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/baner-1-69b94e9645a6a7.09568000.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.580Z","timestamp":1784279764580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-1-69b94e9645a6a7.09568000.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/baner-1-69b94e9645a6a7.09568000.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh54x7i1wmpsbvu8\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNlsroxH9Y%2B%2F8mWn%2BWg4n5BZ5lcb%2B93CVyphYoWBTOJ5wXOWuUsYXK54PRLQe9qqWJWFzxQDG9gXRg0yViCvqhTiHWeGXweqLe9WfweL4mVzhN%2FddvvQq9rO0JUsEzfgPg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550a9e44c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":554480,"size_decoded":554262,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"e9a1295b12fcd20ed52ff728a98bef4c","sha1":"b99c5f14298d535a343ecaaaeec7d1cddcd799f5","sha256":"2c0dfb4cace0b0837d9e8323107be4a02696bdff1c602e3546935b9bf139a414","sha512":"7b16f177d41c8e4bfc95e138279ec254385ab57938c8cffed65b983504468d67479dcb59daee4973201b55f74c01f75ea6c2700165e97608422bf27d35cb6bdb","ssdeep":"12288:1MN7NsTqOSRqbsapjjHvDuC/WciY//q83DFTxAr92CL7FcaRN:ChN6qOSErLf/tdq8zBxrKBRN","tlshash":"fdc423d0ee0bc97b4b781738568b6a1ff7b0afc60118d3b4451a7032e65e325b8e61d9","first_seen":"2026-07-16T11:19:41.956555Z","last_seen":"2026-07-17T09:16:40.287723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/lucky-streak-3.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.235Z","timestamp":1784279779235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/lucky-streak-3.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/lucky-streak-3.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khu0jt4zl2f\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2B2XBsPmd34y0kkFKWMjK4BCjIS9af%2Bix5Jb73u9%2B9fCKlsNPG4qRWEhypdfXdU8%2F%2FA%2FBYWUenIkt%2F%2B2ldI0Ka0DWdS8Rm06LPM0H5hOHewgfzSDV4qCTj%2BUmggyzHrxdQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac3d2e4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27303,"size_decoded":28327,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"b50799aacfcec9e28e399950f833b02c","sha1":"b6713763fa6ef07991cf1aeee4faff53004724e5","sha256":"627519423b6dc26f0acaba741807e7951dfb3b83f8f323714e8340721887713a","sha512":"f91718ce29ce8a8d5a3333e4d3a51656cb8ba01d99681047927454c61d66d7836517f39520a6756fb872efc1f1be7eb9b033b1bec4a01d67263014c6d1a60204","ssdeep":"768:eLKdtvnoOhKhoX0iiAwggoKb8/jnN2EzUi6T0gXMsEQW:eG3/7WiiABN/TzUi6T0gHEN","tlshash":"16c2e15503d55988e43ec13804a33938d0e4de2d9bd88a30f44baad9e33954d7afb23a","first_seen":"2026-01-12T23:19:23.757956Z","last_seen":"2026-07-17T09:16:40.289293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/indian-dreaming.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.240Z","timestamp":1784279779240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/indian-dreaming.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/indian-dreaming.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khryq2fevcd\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwFklna0rrqgluRLGsepErBMpULNLllOQfAsulMRbyV9vCvhYrtbu6cP3vg4NZvuSwLaU02XiYFw88azEEVTm2SkCGhAiVWOcYC4BtWxx9UXcNsBwwcXN7tqXv7H%2BocqLg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac4d314c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40621,"size_decoded":41630,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cd3f3ad4d4e58edb863ff885e64f0eb3","sha1":"c5fe60f90ccc4cd61284e86c6242e54ebd774189","sha256":"09edbacd6ebde85cc195d7eae4949ffddd7a51364eebb913e9f6ece068ab5f10","sha512":"771084add18c57db99e9c9cd9499789f20ec19290b839cfc9c66c5cf2661e2a8f1a07a32cb9b04d7a33cceabe0549f6fd684db173379b46248b53ac9aee34e8e","ssdeep":"768:kZRjdnR2TX4sdXCEiCI7vLBgpr74rT7VygCkqIaoLWCVNArM4Qyv9iZVEd03WIn:kLjzgRClR7VwKTZJZqvojARQyv87H3bn","tlshash":"1d03f1870c234399c55fef309fa4936352e0ca3d7abcef21ed64d99a991d192c7601ac","first_seen":"2026-02-04T18:36:07.400611Z","last_seen":"2026-07-17T09:16:40.290748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/aztec-treasure.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.292Z","timestamp":1784279786292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/aztec-treasure.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/aztec-treasure.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khjrf3kzqlp\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BIPQHU%2BlegRnhfIbV2yFio59Rvm056mBOmotffMs60oOG4ESkzZHTqIieSeyRWMsLeBfPl0m%2B%2B%2BnC0Ach4NCNEvfbbv%2FkPcN4GrPc8rrMc2V5BJ0T1nfGlb0%2Bm9gZ9n%2Fg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d85c864c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34477,"size_decoded":35499,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"a083d21fae8efd12437e675edee6ab46","sha1":"9fb60b21a3a71c16e97ac2d9ba81369d378748cc","sha256":"362426b5024327f3d8c4c89fb4f71c9fceb74fdbb95f2be310e3ee2fd91d9e9d","sha512":"ef6c7b478c249effcc8d58f618c08e1df82a11826c3511298da7e2f8fa3c1022cd5c326c5ef505c2c99649cb6fe5514f4991fcbff4f2dd21b037d63c1203f69a","ssdeep":"768:9271hMmSWvbRK8DZL4lUWUy2WIsjSeqRSgjMMqQkzUbe:w7YmH481Ml6+K9jf8j","tlshash":"3cf2e08a9cc6ea6a637d823c641435193a340ef66b0add05477c66bc3f3d3b5fc46582","first_seen":"2026-01-02T03:19:50.865829Z","last_seen":"2026-07-17T09:16:40.292123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/totem-treasure.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.312Z","timestamp":1784279764312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/totem-treasure.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/totem-treasure.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khyg3ym0j6q\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQX5RrCdWddUPCoHTnphtkHfQanOcTsggmJY4eYaM2uKjqDA7Elf5ZRVlmcOEcrKF8YWpWiEeTn5%2BmvtnEuyAL7xxV6mCaiIZs2nL%2F6jSqx9qFl13vu%2Bk6Weq2pFdrDLRA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ef9874c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24866,"size_decoded":25878,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e413000626eb42def0c200dbf7751e96","sha1":"9efedcd4369ca175409ca62c436088f9b5711312","sha256":"f5d1f85cab85a55ad9de9d337fa139b7a98e615bcf7e20f5bcc08f052a5bade7","sha512":"04716ab9ee8108db30d0d3d23701c8b0ff70890c2f91e08fac6d2941f72e0ba1d3e99482cdb89043de41d8c3094916f217d08c5c85ad72268783a599f2d22b06","ssdeep":"384:DsY1ZVJ8DJ/U9fMEOBz6wT/yT+mcsJt9IteXpR74o6yZCAUDGXojXAUhKr4FomOc:DsYIJ/IfZAMAsJgtYR7tg7DZbQm","tlshash":"59b2d1ab797ca332d6091e37c4c9b1b5b390544533266dc7f505989c77ce3a88964a33","first_seen":"2026-02-01T01:43:14.04973Z","last_seen":"2026-07-17T09:16:40.293647Z","times_seen":3,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/live.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.350Z","timestamp":1784279764350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/live.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/live.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J7svlARW7adQpJeyep152N8qCZX49f%2B0czMb%2FnvykuUe6cFSElV69Zs2SDkaIN%2FFiS1ngJ%2BShQzQQZBRDDVFbCZgZV7j07kUGfDpd8VQrvQ3g0Q%2FJWa%2BFvbBRjlDItAuEA%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52kjyjxljm6j\"\r\ncf-ray: a1c8254f39a84c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":235,"size_decoded":1142,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4b1d6bd9eb199da2a8da2fd336258a","sha1":"3409a3abcfeeed1629f32e912dd2999905e0f6ca","sha256":"c93aa5ef0a425835222b705e5d77271351b56c48a55d8812244f78acc4a2b10a","sha512":"da202b7ec7b4bda755bdcd3edadae88d74f79c4164fc98b8a3e6ddb451b185ad7da9454d45a9ae3733edf48548418d413084795ba07fecb68fbb2816bcb157dd","ssdeep":"","tlshash":"cad0a764c24cd82de610c4a8e63b75a013db51c6038d3315b4801b2ae1185df34bf1ec","first_seen":"2025-10-14T14:51:49.240721Z","last_seen":"2026-07-17T09:16:40.294302Z","times_seen":28,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/3.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.373Z","timestamp":1784279764373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/3.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/3.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52kjxw49g011l-br\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdalZXosE7pMBSQHVp%2FtJY2YU6j7%2FDF5ZllvjCFSMU%2BLfG6xtHvkXMGZpvRWvkHvroMUwpvqiduETGJYWfnsZ6zRgWAFYQkrl7IUEHY0b4zHBxVSjUQPlBJeZumhgRh8aA%3D%3D\"}]}\r\ncf-ray: a1c8254f59c24c11-OSL\r\ncontent-length: 691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":1704,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cca30d934324d88cddd9876b5070785","sha1":"d867219049c7945dad6e981df487d16f0494a826","sha256":"83b991de4d7f807eb05532cc2da05df845425fb1f4937e8599a951c612dab690","sha512":"b794792d3223d4173c89a16993c89fc8e8b38179bf9efa7abba1e95719b22ad7ac65efc8ffb96dbffb62639f5ad08d849d190b894fd071f4f444252431772b63","ssdeep":"","tlshash":"282131a792dc91c4a40387f4ca1e34a1329e25fe1b6acbec53d0ae717c4916c854d9c6","first_seen":"2025-09-23T10:56:20.346607Z","last_seen":"2026-07-17T09:16:40.294936Z","times_seen":64,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/bigfroot.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.204Z","timestamp":1784279772204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/bigfroot.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/bigfroot.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khk838gbho6\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6a6cp0SApH3zgZ%2B9Sjdq8sgeQjUFIHMypezuQyPbDbEooXG4TWb5%2BNtIruigNMNXAmBhIOCnRiBQHh0Kqon1Zaw%2BF%2F837WYI50wuSPGrBsS4iZztNv4Cq%2BMFq6efuyRMRw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580482e4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22902,"size_decoded":23912,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"dc0f80885dee69bb74a01264b4b8ac39","sha1":"6baf0880c819d115b0773e7ea2fe72139573d3c0","sha256":"27517dbdb9f0d15411c70f80a1ad85f0f6e2d66fd5663bb4b7310d3d44d18748","sha512":"198ba26d39c430ea5a1d44a07c4f72938f457143f8e12dc228fc74b83de47c7ce8da97da0e5e418153da272e5ef3e6c32e9a1900036890b2a215b5c6ddd7f02e","ssdeep":"384:buotEUknqy/m/tpeXJASouyv/w3idJvy8VlT1OzIRBxnsmKUlAVIqX5jPLBK:bPEUknq0mgJAwuwSqG10IRnx1DGTBK","tlshash":"0ea2f12646a48a4ff1bd11a8901433736d242e3566472bf6aec189fbe314cbf06c94db","first_seen":"2026-06-02T00:44:56.528274Z","last_seen":"2026-07-17T09:16:40.295561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/winning/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:18.747Z","timestamp":1784279778747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/winning/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 104\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"{\"exclude\":[\"2367\",\"336\",\"1912\",\"155\",\"819\",\"469\",\"439\",\"186\",\"189\",\"100\",\"41\",\"1362\"],\"locale\":\"cs-CZ\"}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7nbdeOuEqghWQWFtw6akxoJEgANi307rkMCe7iWAEoC%2FcX7gMp0Z9bjbIzar8L2ilaQXOYOB1nEcYRLw4mD93Q79jtYOTo%2BEnpWzlJJ7gmtX6oSyABE2mkpeS9wlJUqBA%3D%3D\"}]}\r\ncf-ray: a1c825a92cd84c11-OSL\r\ncontent-length: 608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":8682,"size_decoded":1589,"mime_type":"application/json","magic":"JSON text data","md5":"83103154d23654ebe381a2d33bf63562","sha1":"975ff1f414577ceba6018b11e9a01ee169f6ba10","sha256":"267b599086a6ce84c01b96b9c59f0fa021037d5c1c725356ecd0e216efc9dbbd","sha512":"6f754a574bc13bdc3cd96d43066da934d57b313f132ece0050244845898f5e628f4be667929a5b70536252c377a339f8d4d91844d8d0e9b7a8a8e32b05b3ee6e","ssdeep":"96:afgfHCY0jfsfHCY+f0fHCY9fIfHCYjfEfHCYFIKfDfHCYy8ffzfHCYIfNKfHCY9D:XcGB0WttJFX25BsD","tlshash":"d6028f66aa62973f72d3a0e0ccb7ffdd1458da61902c8534bdbf19a2c327510ae9471c","first_seen":"2026-07-17T09:16:40.296968Z","last_seen":"2026-07-17T09:16:40.296968Z","times_seen":1,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/sky-barons.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.228Z","timestamp":1784279779228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/sky-barons.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/sky-barons.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khx98r8ahxb\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJaWEqoL9cE5%2BI0IUYaXIRqSiXDYVCRyYPgXd88YJXzTiBF0AMFKiu%2Bysg5cXZkFdBaT0bq1rzRjaJx5Ijidzo4nCU2WComdmqAqT3FU5OaaQmtBMzjDXarVJAntPBVNiw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac2d2a4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23231,"size_decoded":24237,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"73af52be73c0daaabc7bfdff3cea50f6","sha1":"d0ac2a47572c36e91068acad85f9a793cbe550fb","sha256":"3d3c84f97c9404d7c959e0a95d642a288c31ac558be87e83088bbbf5b74b9555","sha512":"9dfe1733d5792ad0e1fefda9d66bc1bd4066636e8d84fd4226d377e6388f5b8e3f84bdbfecce8d94d656eca623f83562bd904e5809e0a85cf8fc8f0ee53c776e","ssdeep":"384:oKlM7E4jJG+CmBO++mz9fkY3cUq+vDhWNFATuNdZuatJBMblhVVwTyh+L:FlipYmBO+nz9fkdUq+vDhWFeuNdZuajT","tlshash":"cfa2e111b4709e66fa2aa4f6d008cc75e0bbdd1f31265b63b05be61b433e4552dfa2c0","first_seen":"2026-07-14T13:54:41.575606Z","last_seen":"2026-07-17T09:16:40.298316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/arrow_right_icon_v2.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.297Z","timestamp":1784279764297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/arrow_right_icon_v2.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/arrow_right_icon_v2.svg\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YrWwmMRZxwPRnWsCV%2BE%2BgCmJCTBlF7f0UCep%2BUdgpCIB37xweUQTFVXpAJz5bQqh6Ucu1EqTn8epqWTlCXrFwfFhm4LzLEpoJcTJTnnipPIlAmv%2BiPrdHYYF18RbIWa2A%3D%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"dh52kjxoz27q9v\"\r\ncf-ray: a1c8254ed97d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":1183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8716201a632adef0156bf6d3f2fbe369","sha1":"4b88b95b91c6597908d5da128283ac4c99544cb2","sha256":"6fe8a1b7dfa91db87484fe8b87176374df446f3c337ddee4ab6418fc9ccbb69b","sha512":"077a28d2180d098fecebed83e2437b28f7ceebf4bb302f0d1765c979b53c314e2e6d3364080fc249c61b9d1c2eac86bed248d14597c8c2b91facd5e49e5338d8","ssdeep":"","tlshash":"d2e0209513084c3db1320710f7587338356a518345483544d9311d31350495e7d3f5d9","first_seen":"2025-09-23T10:56:20.268091Z","last_seen":"2026-07-17T09:16:40.299944Z","times_seen":46,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/secret-forest.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.305Z","timestamp":1784279764305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/secret-forest.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/secret-forest.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khx23k00mwf\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjgWwcTehdbr5HnhjGcrsxYnOyTYj%2BIxPR%2BExsfVA8tHgfIEyrA4hpkpCV%2FHL1mUWGxCeV6EkEMkiFfk5v1%2FYtfFQPcxyTU0SGMbMFHMZe8M0I51e0E95ibj4I0vobbFPw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ee9824c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29679,"size_decoded":30692,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 364x265, components 3","md5":"aec3888429721b277a9b3ce2cbd01c73","sha1":"8ff44b79c2519032619ad180288acba4553dd9a8","sha256":"9551da5fc88bcfbde7642420002e7f876f44dd6fb3972ce79495bb0ae47db83c","sha512":"ee35c3a34bc8a5de689f3028e3a54b6aaf98840874b79b42346abd83fe8ebe1eccadf4822c57d2a2f4251a6e716707c4be1c86fed15c7a286551243fab2112ff","ssdeep":"768:RvsUi2G+ij8DWS+588DqCIQBhr/r3WFOqhk6pE:RvkmD/l6zrz3ih9pE","tlshash":"2bd2f1447fde8a108baf97be715163263a9ca2c690e1ed7a19ad3a69573584c1c8c0b0","first_seen":"2025-12-01T07:25:15.391432Z","last_seen":"2026-07-17T09:16:40.30066Z","times_seen":3,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/rise-of-egypt.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.319Z","timestamp":1784279764319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/rise-of-egypt.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/rise-of-egypt.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khwlff4og6t\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeeUPJVTwJY5NtwSbpq6hF9Z7gQEDkaPdG8KBaCDQ%2F5Bzgc884xJ%2FX3rz9q0Pd0dSnavQJtLPgg8a1bMKMmi3Qqg2mR5daorJmjAApf6TxToBWQxlLd8nIQxUC9qeJxHPA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ef98d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20981,"size_decoded":21990,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"ea424ded8ce26bc51d3e45a2091f7f3d","sha1":"9c5634d356f1b7522a8d713f99c78eaa24c2a163","sha256":"52fc69a694e48966c6b98e3d8314e46ec3d87ed703bcd375f2b52e0ce3a658e0","sha512":"623d17c815aa3501ed2e436dc642b71e7986619f65c42fba6890207760c36a644cd45a49d37e6bfc56e89e320c57cc77353e03f3cd08bcbc90e5be9264da0d35","ssdeep":"384:nk9aey6u7AFwftXl6jeAz8EhdxAOtPGPIQV/tSuggKod:4mvhtXl6jeAztnx7NtmloJod","tlshash":"1992e1630cc95a64d3bf4c2e2eeaf3a0b141c6817a39067e5c51f5e327a65204cde3c6","first_seen":"2026-05-14T22:58:26.695873Z","last_seen":"2026-07-17T09:16:40.301963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/star-orange.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.348Z","timestamp":1784279764348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/star-orange.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/star-orange.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyy8006wf\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L149wbUiMIDytv2jSjZIKx%2BqPPL3ibfrJv1bDwYlyUSRgvy7goWu1%2B7wyF3jjKk2%2FNoh6l00Vg7KKbrkH1%2FGcAscPCUqAuU7zuWItKYmDUVVLwCzDFHx3FQv2xbJvz8D1g%3D%3D\"}]}\r\ncf-ray: a1c8254f29a74c11-OSL\r\ncontent-length: 596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1167,"size_decoded":1616,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e058ccae66c074feb39aa15eb918ece3","sha1":"fe7e013d2a19720a882150548e452774cf7336cc","sha256":"7bcc44100e6d2d24d53400ca206faf196aa26f8d1cebd4d77e623fff2878dd09","sha512":"2f3e5b6b248ea0f5475a223e0367ba26ef5d94fe65f569167b7e02cc0cf170d6ae395c3d086d28e5e91faa91994a693ff98b8533483ffd2df2cabb82b1ffeb9f","ssdeep":"","tlshash":"ca2149e73298c34adb0adf50d9327614f20a75fa9acd434de1b057e142a91fa4d08dd7","first_seen":"2025-11-17T14:16:40.658326Z","last_seen":"2026-07-17T09:16:40.303649Z","times_seen":11,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-11.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.364Z","timestamp":1784279764364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-11.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-11.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy39goai6\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jVgVnpN%2BnGa0AL%2BBRm373S%2Fq6f%2BYuA9deotCA%2FIQeS5bgocNkuW1qHNrmKM4x26%2F%2FR8EqvQO9Rkx%2BxMg6xGfxpzb7bo%2FTKYQh5ZIgdY0sLr5Q%2BeOjQC%2FQu5ycT6fvOfaA%3D%3D\"}]}\r\ncf-ray: a1c8254f49b84c11-OSL\r\ncontent-length: 345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":1387,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4327c132d11b1333209b3374fa394f0f","sha1":"3801506e26c63c9927b3d9c51c342c6c3c21ddfa","sha256":"6001367bab33ec48507ae4dae10ad400329cfd0573a810ca4ec152139b49079d","sha512":"07bff970dfe38ebec44266f3903c23d82550da0777e8a774a852af6e87b0763ca43efa19f04fff5abe1fbd88a5c4862b6dda2c8296ff0a967722520d71520e7d","ssdeep":"","tlshash":"56f099da76f4a40a8a1443819117b2412373e1bc06acc898f294f3f8ba0ce8a5e806cc","first_seen":"2025-09-23T10:56:20.387521Z","last_seen":"2026-07-17T09:16:40.305896Z","times_seen":60,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/hot-diamonds.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.190Z","timestamp":1784279772190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/hot-diamonds.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/hot-diamonds.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khrp74sceye\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjU6QMvf3oogglVJ2HSLzElqr9jUNSF%2B5sQ3Qb5%2BXHGkoC9qit%2BnIJgb%2BM5XFYYHXgQUcx%2FmiV8Z8BRsMs3uZgkVshsITPgqlUiuMCR%2FGPVkPRwt7nysQq67u7n%2BaO6DYA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8258028214c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19382,"size_decoded":20400,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"369dca48bdd39d4804d4cc0c6f352c22","sha1":"27d21413faa38abe7376e85c454dd6a314678b52","sha256":"1bae1df3f980225944d58819b1c4b87829f6f491eee5dbfb6a91feba5cfea406","sha512":"92b1eae06d00699a290f47b6af14f2e93a310795fe8a79f51e94bfb038fb02be1deedec1502bf8ff751a73a8f233d7ca82b219c9836d386baace72bd23eea7ff","ssdeep":"384:FfYmcnnXlh0+6zkcF5caXv6mWovUuN93/bln20Cmy/7Hu0SF2du52KxFOEfJ:FgmcXn0+qp6mHp/bE0CZrNS+u5vxkEfJ","tlshash":"ff92d01f9f96a563e63daf78d5450d021a5a881f9d32183b5850ce68ca137e3cec42be","first_seen":"2025-10-14T14:51:49.18472Z","last_seen":"2026-07-17T09:16:40.306585Z","times_seen":3,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/road-trip.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.281Z","timestamp":1784279786281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/road-trip.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/road-trip.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khwlff4ojxj\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCVz2roI94u5FE4%2FLcrhVB8KdCzwkBAJQPPytTAp%2Fk2POVSHxblDn%2FaF7qRyrcfHYT33Lot33pODgrgw9X2KSISi8Ez70SwYef%2BZWCLgmuRfqFZL%2BI8%2FymqyMUalTA8KGw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d84c7d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25831,"size_decoded":26844,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"de61f1b4532b796da0ccb1b5ca6971fe","sha1":"57826dea07685b648ca103b99ade6c9287570e1c","sha256":"cc9c9aa1d4dd57108f8b567f49e497d46f5ae29d9da455cfc4ac53fc2a727a58","sha512":"b41c6cf25781c62b7692bb6d03dea4a2cb9517407f44364fada96b6bf5decffe2d1ffcd244d54a59125058c696a9e19a3b949ad0f7877234c82a22944457a818","ssdeep":"384:tpezyJPW71zNx7/oYMFYqlsja5yIuPYC5bwIIahFP/x7pHhd5RHQGtgHjq15:tczqKzN9oYCf8a8JYCVJdTHhdtgHI","tlshash":"38c2d04a590fdf74e4ee9bf3a425c634d286f6e019536016e1e27da48213d21de3fc1a","first_seen":"2025-11-09T11:22:30.390864Z","last_seen":"2026-07-17T09:16:40.308186Z","times_seen":3,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/hot-party-deluxe.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:27.278Z","timestamp":1784279787278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/hot-party-deluxe.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/hot-party-deluxe.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:27 GMT\r\netag: \"dh52khrp74scgds\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=asgsJeUNEiNHVru6v83gc278rhH%2FXnUe5ZvaVPASPbmpYhYDvIjVUCoGNEYJDbgBUclh1Q%2FUU8vH4apeuO3TFJfIXmZWc19LzJheDLfud7qTtxABhTffwk0tKLw2k5FhnA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825de7d834c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21232,"size_decoded":22244,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"0fdc5bb241b1b30d729ce376fe6a743d","sha1":"54100e2a94089a52e378e8a83377627dfd077ef2","sha256":"5a6d893e6029e3bd8e8fa734399672c917520e943440c588a2c4830933d088c6","sha512":"404172016425d2e2618c46e113f68c3ab16af41a0cd4e5078001b86a92517bb1c90c7f54cea9c075b57d0e6879c2752d13b1a9625ec5eac7503397c6fa33a3d5","ssdeep":"384:2yUBApSUlIIpPXBRE6ronyX5TSI7yM28VqQnq1bt+gj+0Gb/621:Zps4PXBRRronKl7yrhbtTGF1","tlshash":"3c92d0aa5647bcaaf56f88b035c60f7f17252ef0c7362e01d38c58912f162d658272e0","first_seen":"2026-05-14T22:58:26.760173Z","last_seen":"2026-07-17T09:16:40.310141Z","times_seen":4,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/ken.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.331Z","timestamp":1784279764331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/ken.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/ken.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khgs934q5g1\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfJimbY%2BDSGpXqBZQh3nqHSnnQESMKzXPz1LwY9GpwOVSYd1AuZjFVa%2Bj1HoyHyQ%2BxIjxVySjL9fz1Y9fV%2BT8HS3iNYMeseNSABOKLJm7rJEPC15Qo5HZUiMdF%2F1mvENeQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f19974c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7057,"size_decoded":8064,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"9b118f9f3a60e9e562bfb6a942e0325d","sha1":"794bd0d86cf07e4db9e120c697bbf197593a3d0b","sha256":"07800358ae475e7abed8c638af69afe3e3957496b60060c7711b03a95f5300bd","sha512":"f6fc4e3f4e5165bb834383d9c8ab10a1deb674822b553122e41bf579099b5dd57a72da1cc081e1a3081729299c113a9367a9d49d145c636fed1b9b8ebbf11adb","ssdeep":"96:tTMWxkId1htLhbJ1kI9hFaCAPtWM4F/fVcKu3zyNnxNKRiDNVe8R8cDJ8WE:hMLoTtH1r9hFwPtCF/SmZGsVeJZ","tlshash":"5ce1aeb327e0b118d42f13726f3a1966ae10ee4818541bd37e441a9d8b273b5f9e3889","first_seen":"2026-05-13T21:36:15.969278Z","last_seen":"2026-07-17T09:16:40.311615Z","times_seen":3,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/open-graph-image-69b94e969dac57.74276561.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.346Z","timestamp":1784279764346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/open-graph-image-69b94e969dac57.74276561.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/open-graph-image-69b94e969dac57.74276561.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh54x8f4nklc2r4j\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uAXTQ%2Fpg36nVshTF3qZePW%2BSBsBt%2FiwC0lO2TPun2Zm1ratIR4Er%2B2YvwSQhPp8UqPOREx0HRZr5on2F4fsacwdfAv9%2F06PKUPym2kqDrCDQKUeOP405aCsNtBXhNek2SQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f29a64c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128467,"size_decoded":112302,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1200x630, components 3","md5":"7826b5c92f20aa5f8290851663623f8c","sha1":"b2e3cb78a4766bfed017cd4cbd0747501d6b5e92","sha256":"ec43659c2134cd3cb185da54fc88aa97b4ff5a32a4fb8b164e8441334e3df620","sha512":"78f0f252af7b3479772c1d490ae96268b95682ef4cf8e6b717a81c176a4db4feede063e01e28b317fb09fc22be96fadb37cd44279cbf0308a3cc163c32ea9feb","ssdeep":"3072:XkdKe9rT4R5+ZXduCsftSlqoybzGB5rlb//KE93GUlcYcRe:XRe9rT25+duCSt4UGBHXPJlTL","tlshash":"e7c3f1b9fbd7cb29539f602e507d7db79b158ac888cd218746831f22aa48f35984317c","first_seen":"2026-07-16T11:19:42.013017Z","last_seen":"2026-07-17T09:16:40.313356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-4.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.357Z","timestamp":1784279764357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-4.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-4.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjyaenwk19b\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0f9AQJBsPD%2FopBX52RumtBDr8b36TGyfAFKqot0XE3ryg3KOiY0H0ix3ROK0tv7mL3EZXoZGRjQPfD1yWfLc73i5%2FifUULakzL3%2BOiT22aXN2kBWM%2BUJBu0ODzXjihljWg%3D%3D\"}]}\r\ncf-ray: a1c8254f39b14c11-OSL\r\ncontent-length: 760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1631,"size_decoded":1788,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c0d00c1a0b62e6e96a22de2fff89967","sha1":"753515c4ffd89eaf7ff41f11248f995bae2a5591","sha256":"d648926634c01101e834df3c9a37578267bfcf3baec1596b26bbf26f80d3947e","sha512":"5a6fe9b7f97f5e60971bba64e89763906658b881f4d83193463d763707754f60857ade205f0e47da391c84b4055fe987248a1b18e2d53235148308828b1e521e","ssdeep":"","tlshash":"593114f563cc71f0cb47e771d82f10a37f7220ba234deb5a63d81dc2662616d8189980","first_seen":"2025-09-23T10:56:20.432683Z","last_seen":"2026-07-17T09:16:40.314787Z","times_seen":60,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-14.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.367Z","timestamp":1784279764367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-14.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-14.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy5n7312nr\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgWzsy4IQ8xVlQz0QTTDqUxaBTJHCDRavKM1DOEeHgf3vTfBQLWfpmjsFPj4tl97UW0ClP0NW%2B1lKWtj0pd0MfZSXCeMVdB7nxCZc8k347cqK2Oem7ERtdpadceHeIkKLQ%3D%3D\"}]}\r\ncf-ray: a1c8254f49bb4c11-OSL\r\ncontent-length: 1375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3447,"size_decoded":2399,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8868f668d3136afdb9880eb4060f5a6b","sha1":"bdae8cf240610b282d1d9d6c68499736dc9ec8e7","sha256":"4ac5eb4fb1e8d08409ae5f4fe1b604b94bb02e1599f601e7c8905be30d5a48d4","sha512":"3e7582fa02e30cbf1fbd3a1da22ffdb54e0c9b98f95f41cdc757e2b5c0891cda3d5d444f90be6864a5d78550e7d0e096261ed38802e50fe1107bc2174fa62e3d","ssdeep":"","tlshash":"7d6134e94bc924e4a9458bf0e5229b327f5738bf7719c7d58210eaf4fb0545cd285860","first_seen":"2025-09-23T10:56:20.342454Z","last_seen":"2026-07-17T09:16:40.315493Z","times_seen":60,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/jungle-rumble.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.224Z","timestamp":1784279779224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/jungle-rumble.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/jungle-rumble.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khsox4xrv8i\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOvxVzz6HEQl%2F47jcTH1OnJs%2Ft3gRgjA8JEcMQUleiw0q49Zn4GLtztn2Utv0xZSAkxoS69RN0FDRg9WB65QHmVNXwvDDnYccd%2BL8sfQ93GUnopfnnc33uwvqPd5EVCDhw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac2d284c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40482,"size_decoded":41493,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"1b77079b116d6925eae36885f8c17833","sha1":"f9c5649e4892e7d7a80d425dbd9d5d5c8008f7aa","sha256":"33371d5fd8247f821f5e93d72f8c1eb81a27e7fb6efe24c8c6b5e2071c4dc83e","sha512":"058a9fb4feb224ab578451b0c795bd1b88ce774e17e1ef67a49e6bda4248149de884d6b0788c958bb8155c95ce2a9dc0eb564077dd67308337b1259f4f328dfb","ssdeep":"768:kN5nAvWs2azPO8lmDvvqkysdOv5if5079AYwlrKj21y56A:kN5AvTD/6vikI8f5k9gn1s3","tlshash":"900301894ce65927e43e3579eb48d936eb00eb51f9d906bc23486d9eb73c0d245cf188","first_seen":"2026-02-01T16:54:16.015422Z","last_seen":"2026-07-17T09:16:40.316183Z","times_seen":7,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/app.js","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.288Z","timestamp":1784279764288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /build/frontend/app.js HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/build/frontend/app.js\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52n4jbrpu8zqo\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwyNN39mE41pejP5z%2FxhFShJyjE1JTZsQXQMIhgN94vq%2F8VqGVC9c3b0l2H4a2VFHlQNCykd7sXj2AiY1q9xMw73egQ6SRwRIxkg1RI%2FGq9cYyiLBFWuQXMgKAaKiQuiGw%3D%3D\"}]}\r\ncf-ray: a1c8254ec9794c11-OSL\r\ncontent-length: 7744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46320,"size_decoded":8786,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46259)","md5":"bc641daa5f888b2abcf9c26a70cc50ac","sha1":"d09fb3b321ef36efcfd83390d8650a46b1603ca9","sha256":"b507975fb46606f64eef43106c6a262327d1d3c4a92818a1945af836e37ad84f","sha512":"32393634c90ee49a6bb094e51019b59f1d052ab9f90740b45df0da490803e3002a5b6b8fa8e57eaaeedf7c5ef78b64bc3d1f088581ffe3c51e1195bc8f2ba25d","ssdeep":"768:jCGaiEG2C0kHTb/U+bbqcb15FPlxcX9hBg9mt4yMLF4eXc/FD:VaikO/fPbFPT9mreM/V","tlshash":"0523b68db280b13205cba262416f520bf2757456209ad4ecb576c8f1beb8cdd51b3f7a","first_seen":"2026-03-16T14:22:50.889077Z","last_seen":"2026-07-17T09:16:40.316879Z","times_seen":15,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/tetri-maina.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.307Z","timestamp":1784279764307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/tetri-maina.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/tetri-maina.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khy1tk5flng\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtokIHJOQ78LAX4D2Q39GbBaTmz4%2BYz%2FWmY4IGtZ4RW5w5m5A1OzE2KoO%2BACkFVR0nHdbAy7n83sfViR83fCifKQkQhBqOR8qd3Tl3YHvS%2FDGXnQlkaR4uc1o%2B0mlJy1vQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ee9834c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28060,"size_decoded":29073,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"cf977ecc4810012599f102d4f1663acb","sha1":"1f307a5385f56e34f389b1e8d17718cda568bfc7","sha256":"e37a4f9042ae30f26d8ee54b731a95105874ace60de26a27dc3295fe8099a6cd","sha512":"df24b5fc36636576a6eb84403d36de06096d8f8559764961afff03f5d143b54a0c6d4cbc551b67a3cff59df6c53cd000cd6d2b88dde230b1dd646c6a7a25a895","ssdeep":"384:Ws2ts1Z3vjW7Vh1S+yot5rDnt1MFrZ2azHSZTUrDcWzrfLtyhaM5zrs5CL8Z+fOY:WU6Zh1Nb51M5QasTUHcWjfMKrNHS","tlshash":"27c2e17cdd318083fa4d80b140e5dab00e5aed6d4c3c6dd8aa5ab9a727fe904038b16d","first_seen":"2026-04-03T21:46:18.191926Z","last_seen":"2026-07-17T09:16:40.317555Z","times_seen":3,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/hot-scatter.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.322Z","timestamp":1784279764322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/hot-scatter.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/hot-scatter.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khrp74scoyc\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17LV5T%2FYIA6JM4Tqns29mwiG%2B2YKQUHvbYDz3L%2B7e6EMJTzl2mm2EIjtdgCXFcsli3J4yw4C2HIsfTsxyVEIQwJsHjSzCPDnSvTpB0GqSVLGuGpNpubAz%2FRQexURflYzFw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f09904c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32340,"size_decoded":33351,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"73aafeb3d686ecdf52f8a9b9af131d32","sha1":"7193b83a9828db9b4b04d022807a6a074f900c24","sha256":"e6a75d4fb0e73a829c9545b5148c16c3d1b4e794789787098e3a117c40a0c02e","sha512":"e5c83a0ddfb8938e0a65691ca02e5b154aef43f09b2a331c74e27bfa6d9176666f1c223f6dd7a9a8aeb8cbc6508048c3bc9251ecb25c00f74fced0fc568541f7","ssdeep":"768:vpf2KEazGV0otMyy7KGjUSK7SirIUo8j4UlL5FB:QCMdMyy7KGY7vrjo88UlLl","tlshash":"dce2f1e46f0b03aaf22d6df71781d325cbd3fb049431e69558630d396ae23530d983a2","first_seen":"2026-07-17T09:16:40.319065Z","last_seen":"2026-07-17T09:16:40.319065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/play_icon.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.351Z","timestamp":1784279764351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/play_icon.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/play_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjytgj6njl\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykQ8EJhiCi6HZfX95RQRXFdrjO90n1p02GvG81C4aGiIvA1o0vXuXT6fnCRALmpgEvcLWWy6xQd82KVRJc7VraK6xUxxaLdmG%2FrTcBYKqChUgOHE9yPnojcYmSzvfqbXKw%3D%3D\"}]}\r\ncf-ray: a1c8254f39aa4c11-OSL\r\ncontent-length: 343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":1355,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1becf64ab38054f7190d96aa5e33ef3","sha1":"42850c0f349d3e2877ec33c7ea56c46a9da253d9","sha256":"fd83378fec0e980ea08347fbbda859be8c4bcec9268f42b8138b7378a3876891","sha512":"1c6ac795da14dfe35d644d8afd10f72e5d4088e54408e8bff9de13ebce425486b2102871ac979bdae345c8a2699a558ebe25fbdab506274b35e1fbc160490b97","ssdeep":"","tlshash":"3e017ba03136a239b6006864194a014d6f5e40e2760ba3d38e917e0278a305a9d394eb","first_seen":"2025-10-09T01:23:42.719096Z","last_seen":"2026-07-17T09:16:40.320617Z","times_seen":36,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/baner-2-69b94e966b5539.91868393.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.582Z","timestamp":1784279764582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/baner-2-69b94e966b5539.91868393.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/baner-2-69b94e966b5539.91868393.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh54x7i1wmpsawm9\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1r3W41%2FpexOTkJ9Q4RxEVT4K5BUBz1haaQNVpFdoOveuO8UhKmwFtCjdGYBjX8UjZpURIr70v2Dwjs51kqXJtIavxQfilq8I3iZUwMZrbivoSWB8NjvxAqgN%2F27blwsNw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550a9e54c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":508833,"size_decoded":507364,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x680, components 3","md5":"d04aad5db36594207485678e46c0fff9","sha1":"7eca6f0862ccb8b3c1b0c501bea9b0f231c32687","sha256":"9a8d30aaf1f0b9c05dc3cdc1c38032211dc0a93723ca4ad15d373df3f94280b0","sha512":"a4b4176b550ceef34eeedee91c5485f271dd4e9ab76cf05666990cb4dc5f51ce15d9f5e1d5ed74e06242033e1f12b73ab2853719490435b85d366e40535c4c40","ssdeep":"12288:CbS5o5eDyrmMm+Fft2LFsGItgx+URxv/C3GMQoA2Pdytz:CboeCGLbGXx+UX4GN","tlshash":"04b4233fefaa1d37c57c412a617f9a6d143213132086dad08b127029e7f8689e3d67d8","first_seen":"2026-07-16T11:19:41.987919Z","last_seen":"2026-07-17T09:16:40.321342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/2026/03/banner-rectangle-69b94e9630a3b7.16004677.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.600Z","timestamp":1784279764600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/2026/03/banner-rectangle-69b94e9630a3b7.16004677.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/2026/03/banner-rectangle-69b94e9630a3b7.16004677.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh54x7i1wmps2fnl\"\r\nlast-modified: Tue, 17 Mar 2026 14:42:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbBVLC8njwww2u2Jnxrsrt9J%2F8QUas81cdsDwjmdrkq2Ke1cpERju1IsUNx56NNENnkpGYyY6g3i%2BTVneJnoykWAB7Oodyxmv1eO9g%2Ft0O0PY%2FiakGriVbgFBh%2FmdV4MtA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c82550c9e94c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113601,"size_decoded":114658,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 636x340, components 3","md5":"549dca1082ba15f0edc8ac352729f923","sha1":"eb2dcb9623909d826fc99bae524cb4aec9496f0c","sha256":"db9b19df8e2aff3b0a63df64a96dd914cb385b67a26075ad74e8bac2b3c16feb","sha512":"39ca01ffed79a64df9603b79f6486cb069739099ad32cbcf73d8cd7b5856464d072e51b25df33d58ae336fdd7d501c05c5d483289a0e9db6a46abc5896efac54","ssdeep":"3072:G0YfkW+nRMLuxxx1bw8jQDmIcS15Gwojr47:G0VW+nRMyx9wFf11MY","tlshash":"50b312fb978796d6160eb414a89d4ffe6dd79842ce7c201958222c99df102f8cc2da7c","first_seen":"2026-07-16T11:19:42.05207Z","last_seen":"2026-07-17T09:16:40.323456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:13.734Z","timestamp":1784279773734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:14 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCOOqPrd5jyiY0GJfCqKuaAFskfeUSJeNLJFgY1nQvYwRTXsBJTVb3sniP1y986UXzd2fpotw1bJG4tem7%2F9PnpGym6x%2BZpUylLWpoYRz2zENQ2eRg0Ka9D14HiD%2BLdMUw%3D%3D\"}]}\r\ncf-ray: a1c82589d9544c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":1028,"mime_type":"application/json","magic":"JSON text data","md5":"19a3f416accd3719cec2db1c0f094f03","sha1":"0d779f9e8ec0a452e517b90c01a1a0bacf057bdc","sha256":"367db46cf6d721af3a1a7d06232307568bd75893dc4ed17f7b53f37089e1fc30","sha512":"f47f9763257580c1e94d0f89c2fb9dda6d1e9456d1e58ea6194b1f6c86fe453ed44029018f8d6dc6207ecaa316cc61f44c4e608d2ff5b66faa45663c96f49192","ssdeep":"","tlshash":"a5a002db8489f89bd3731724599b32d460640f4711f59d15abccecd54e646070063d58","first_seen":"2026-07-17T09:16:40.324912Z","last_seen":"2026-07-17T09:16:40.324912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:16:01.704Z","timestamp":1784279761704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=3600, must-revalidate, public\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: geo_country=us; expires=Mon, 17 Aug 2026 09:16:03 GMT; Max-Age=2678400; path=/; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-digest: en5fbf2ac8a701f0ed099ea7da2bc04c85\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BhakO5%2BvCAEuWWYwtqIbcTZOmiGrMggVbeRlYRC9Za2d9uCnCSfQG3YMSaEcYkdZEVr6CVOuTvcsFvdfwfIMPYLTCo8lVyp7Bn1GCrU9Lv52n5eB45uW9CUm0gxMHd%2BJrg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1c8253edfd31525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":156274,"size_decoded":36862,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4514)","md5":"36e4ffb1513f0de52645fb8b91c0fef6","sha1":"e1c9a4c95060fe15013955d5f6f802cc6a5636ff","sha256":"34683bba0d41642e11d4f160bdaec013a0d000ccd259ce7e4dadac73e36b356b","sha512":"91514c3293fc7e3de57e25d2ee2f7a1d568f49c1f729767c4651c067d260e8faa7795809b3387fc7f3e3cbe042b539b20bf076d8f4cdba7ba4f1436aaa2b3201","ssdeep":"1536:1THtS3nA8ndVdFWfkCWqMv5c8vMpJQDHo9xk2TlqeKFRDxN74Q8I:1kAkdHgMpPv5qQDHUxxBMDsI","tlshash":"e6e3e6ed26f158a304c742c22f715b1a3ee6d613ca1a4a40f6ee4f891fd7e69dc23449","first_seen":"2026-07-17T09:16:40.326344Z","last_seen":"2026-07-17T09:16:40.326344Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2333,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":2303,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/dragons-myth.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.301Z","timestamp":1784279764301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/dragons-myth.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/dragons-myth.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52kho4lin8eg9\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ubw5Kx7KuUBSHWvsCvgCqNyvm62dJ2LnCzzHOzLfjQ4QrE8TN0dqiSVIRFbMdGOpvBH46yKRT04cpU0BXx0e6iS2sesJRrMyDUHDuZ8Zabnhvgem33uVLqkuzciogAOCcA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ee9804c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18729,"size_decoded":19733,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ba2e1908e7cf8c15e97c1f67b6828ee0","sha1":"3a1d592d07a61ac9dcdf7f2aeeb2a5ad1cfacd41","sha256":"32f4fc653da06f9fa09f1b07546157525a7703279b480fbc89b82bfd192e80b2","sha512":"0cce5775aac41c04b69fee84f57ca36e3ae2c5da773dc0b6b9f34d2fc07bd6b0f1bd8ad539e44a6ed201306d46f7546ff3a22d94abaaaf01d6538fde77cb5075","ssdeep":"384:Dp4/AkUD5ujwYokrxHjxh4V7KfZ1szOkh37WoDmdSLVyNWo:DpoMIwZGxHjkV7KRiakF7W5dzNV","tlshash":"1082d09c86b2dd108a2d71f2008e2fd0eba6ee8e349c1d5df2b06dd597a8300a4302e5","first_seen":"2025-11-17T14:10:19.066216Z","last_seen":"2026-07-17T09:16:40.32823Z","times_seen":4,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/jolly-beluga-whales.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.303Z","timestamp":1784279764303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/jolly-beluga-whales.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/jolly-beluga-whales.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khsmjej0qnn\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=290sKejG2kcVlRleUGXgBCjPQ7J9WK1mobCChfDy1bB%2F6Ir6u7xUv8v1Y1khr2pscC2Cwe67VByCorhwL8GzfLSMOc9jfLcwZZQQINu1anG8BU14sT9dRJiM94vwLFlBhw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ee9814c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34547,"size_decoded":35560,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"cbbcd800bc6655de95081a83ee5e1b22","sha1":"676e147af3b2846554688c20c2701aa3302d17bc","sha256":"952b52845894c32c7a1b62140dc311369d2a4013c6e77b255ca09d55ee642e2e","sha512":"47bc56739cf9f44287f00cece9f5878d48140e10d0c553ddc8d21001938610f466b41171a6579643796b79c4b3880438a5f3d34e45da2a7b3d39b5c5417fe6b1","ssdeep":"768:wH8C8KCtpea53gkXmCAv2I6DQpVFFwo8xKxMbbPjTzi:wAjbNgk5AuI6DQpxwjKybbPri","tlshash":"87f2f1cf1d645f4dd82e45fc146e1b07e80c246b8e4b1ab1ab49316092bece6ee52277","first_seen":"2026-07-17T09:16:40.332334Z","last_seen":"2026-07-17T09:16:40.332334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":914,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/tangerine.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.343Z","timestamp":1784279764343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/tangerine.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/tangerine.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khi69hqq4yo\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57Ohxpjr3TjmVZPalXLwqMK3pzjPJtsa7O0zF67RZPVYywUJYJs%2B7ogXJE2Sud0JKhl34fBvMNcFUVtBzb38RmHN6gA1xpOWV9ch6hzDIerL7MbI2HZbN1t1u5GShRUGFQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f29a24c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6432,"size_decoded":7437,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"fdbf117d32c649c7b19b4b242560aa0b","sha1":"84d16a7a15d4c57bddd05d6b035f3dd2b6c6bb80","sha256":"39a967e6538e7252a31ff3b3c108bb5aeb3e66b6728788329560f1a909c14c20","sha512":"47eccea3076f8c7616c322fa292f65a6594b2f566841babaf5c9f422c724aa316251a6c111950ea3f68cd92074ccf5657830ac1dacb83dc535269afdf44accb0","ssdeep":"96:j6ziNP3ehZd0rXh2icDs0iMpvbB4A90xG+OaWykXSZnqYrkGpAND2XVYW:Wzue2Y1o0LvbB4A9WNFEiZRrkGaNhW","tlshash":"afd1ae721359c4a0fe3fe434013da61aeec257c6369ba4fd25eaac44877c3b46d181d9","first_seen":"2026-05-16T12:53:29.928958Z","last_seen":"2026-07-17T09:16:40.335252Z","times_seen":3,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/flags/.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.349Z","timestamp":1784279764349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /flags/.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: private\r\ncache-status: Souin; fwd=uri-miss; key=GET-http-rainbet-cz.com-/flags/.svg; detail=PRIVATE-OR-AUTHENTICATED-RESPONSE\r\npriority: u=5,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xY0YicLSdzjIXkoDaTC2PYDlWRVEK1pKakWpg20rMeUNGdT8%2BFlEnuuIvj8GbYw%2FeRrtV3LkMPp9snZD%2FKeoInpNPACz1ndppAxjoEZXwSF%2BKQubRxjXvadYnjc%2Bg2WYlQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c8254f39a94c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":57310,"size_decoded":14190,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4514)","md5":"55f05166e38c2650941f2d5ab5cf9409","sha1":"c818d146e336146bfbe4ca76482f639ca6707dc9","sha256":"1c996143fde59686a13786b9299ed6f56d7eea428011fae390a7fa507f7251a0","sha512":"8c2ef6d2ee2c01a7ff53ad69c0bfcc915d12f3c871ef56732832929df7a60bf4c7910b1342b4f1750fc84704fee65ceff25dc94bba0bf4a826e05fa924ed4687","ssdeep":"768:j/usTTQST1N+oNJK+daluNf8LVgbFgXTxNGsTTQhTJNHoNJK+daLsy:TTHtqFRDxN74Qmx","tlshash":"7f43c5dd2bb008d548c847cbbf1215ae6c6b94b38d918904f19c1f496fc2d6edc1bada","first_seen":"2026-07-17T09:16:40.336153Z","last_seen":"2026-07-17T09:16:40.336153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/gambling-therapy.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.379Z","timestamp":1784279764379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/gambling-therapy.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/gambling-therapy.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxrcsmh8qi\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzwWRpoimwjo6pS1V4Q%2Fs0kwtWGObG2c7ceF1DQ0uUR9efg95orO6CS7ikkefyLQiMoDWbsTJCZ%2FVLYtKs5Qjxy3A0nSlrv8yMko5bkZ0AIlj8rJVaPVx2lpEDo4tSOGBQ%3D%3D\"}]}\r\ncf-ray: a1c8254f59c74c11-OSL\r\ncontent-length: 4642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11322,"size_decoded":5665,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"227ba6cc3a63172a4dcd11dd41e25a32","sha1":"4f4a04e5710e15f2b25a88cd803a1fe26fcb4bde","sha256":"56f3544eca45e25b4679c142aced2a4d5619b19892f836edaed193e264415af3","sha512":"bb6b03b36ec8739824c325b1005aadbaf52000f0c0ae77a1aaee73a3ae87ed6c4ec935726a59b22ed5ae10d9210671e124c9471a696c381f78fb3b478a85735b","ssdeep":"192:SqDNRz+fDeLzFYUVqaqQ8mce1HLMajzj3ea+novICc+Q1+sl:SON5+E/VumjLMAzj3wl","tlshash":"c832b6eab3e4f2e4f102e7f0d52194307bab38bfbb66d618c3956dd0aa1100c5a95cd5","first_seen":"2025-10-14T14:51:49.035077Z","last_seen":"2026-07-17T09:16:40.337703Z","times_seen":33,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/gems-riches.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.226Z","timestamp":1784279779226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/gems-riches.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/gems-riches.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52khq6f9cukon\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZBPDqzjywQ8ed2kP2G3PS0ChNkgW0Utm6TU1gGAxWQ2aJTKJvXL61M44QyPLU9bIy9VKwObJHO8UZSBWCnqDjM%2Bp7oeJwomM%2FJzPV13a5Qxy%2B3shxiZMsXOUdD8EvxMYA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac2d294c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26807,"size_decoded":27816,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"926987ff462be9c17c7ad24cac3fab13","sha1":"79af20328c38879c5528d318bf69f18db9643ec1","sha256":"16b129cc24c323bbd4d230374794bab588c236c606896474b75a99c35d94b4d9","sha512":"7b2cb6e1f31e046fad3ab047de42af02896da98ac09a416e4f27c6f61826fb7584ba93507e67c5ffaaeb1876aacfd65a516e63538c69f2808fce593b9ac745d1","ssdeep":"768:IsYk9NvtAQDTMMDM6+CNlar1OSzYcSWnxIdwq+o4:IsYk7vnvJlezzY+nx00b","tlshash":"20c2e150cb2194699d4dc03d4112be5404affd47a24eabcbbfa41b057b3474ab56d3a2","first_seen":"2026-07-17T09:16:40.33845Z","last_seen":"2026-07-17T09:16:40.33845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/land-of-heroes.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:19.241Z","timestamp":1784279779241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/land-of-heroes.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/land-of-heroes.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:19 GMT\r\netag: \"dh52kht5l9t3okq\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zetecoK1fF3TFN8sqc4XNPvDFmrDwDHibpxFVz7R%2F32RaTEZRy9pmh695pHt%2F74PWu0uiNxU4A6ALhQGTsPdqOt0jVXd3X1ZM1CVmcRFIgxtXunB%2F80FAnTOMaOP53V7dw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825ac4d324c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31850,"size_decoded":32862,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ff659edfba08ea08f5c190b9c92cd109","sha1":"3db20fbb25551998d39a52b7cd21cfd796d0e9eb","sha256":"7badf245fe1b083770be9f48decfe4236809a53d243024d0eaa9c9a423d87b03","sha512":"134f90b755a47459628d9f707bd6297d6c5637d428f9f44460903528cccd0c33cb47dbe36118f367bc0ce4a0f2689c63d3279fba8f2ae00b3a6d165164953178","ssdeep":"768:TRj+ZvUL1XuQl6d5J63SkKyc8WfseTMHiU8r/c:TRj+1UL1+Y6d5JPRrkesqr/c","tlshash":"4ae2f2d887e3e3b3d45f49b312391335a355e731358425e2feeea2592f161ec1818b52","first_seen":"2025-11-09T11:22:30.399282Z","last_seen":"2026-07-17T09:16:40.340321Z","times_seen":3,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/mi-amor.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.338Z","timestamp":1784279764338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/mi-amor.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/mi-amor.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khgzead052y\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPsCT0TA5YdOUFMWvfMYcRc%2BHcHVpLBsGgfJ%2Fn4kQ9YlZC6FCE%2FuJrCktjNjxso4veOgAgIKvyDWNBZMZ4Tjmp%2BCJiKcqMERT%2FGLvJiudH09jLq3hzOAybwZtrXGxYxYbg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f199d4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6586,"size_decoded":7597,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"5d5101b36399917fa9caf92237e42fa5","sha1":"9e19e6c2335ecaa8866ff098583898da16b70db4","sha256":"c059ae2387535df4f60d52975bafdbd9f9670e1c632ecd85d1c91c2748e55342","sha512":"6a8c3fc4ba927ac70695db27e382050c7c816ac5837c22d420f94b687205f86d301cb59d6311b92ad8112a189f32eb86d9d54a4c256faa5d637a4cd7f357e3f8","ssdeep":"96:AdN1r42xr5yaPh6+6ig6paSWgnKKzyuTs9QPGBmekgbVjrbxPsROVX4:y8s5DPgoTkPgKR4mmkmetxPYn","tlshash":"37d1ad8f8bfad1abce5d1b30360025336f032c51892ca69f76752350675aae20eb494b","first_seen":"2026-07-17T09:16:40.342004Z","last_seen":"2026-07-17T09:16:40.342004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/booya39.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.339Z","timestamp":1784279764339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/booya39.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/booya39.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khfnrm5s3eq\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FG5qMykGxZ6jTlAFWd2W4WjrHEl3lerEYMdzV%2BzLH3S4CJrc4s2ALK0sbEjHrZxWhnvx7dQqFsyC1uecXqcy7cYdFYn1JcO2r8a8FD4F%2BV6nx5gbAe8AGCtfVIUCEQyaxg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f199f4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4418,"size_decoded":5425,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"fbca1877cae9751aac2d12da3583d215","sha1":"203be07ee4ca23be48efdc9c3b5a445e5848dc9f","sha256":"065736a2bc183a3d8455822765bc8807c3b80aa21f9d9e42d73452d04784dc41","sha512":"969138e05845af431eda190664a16d5f8df65e5664dedacd1451095dea9f0f77d88ed386fc65d639aa32eb08c08a1823e64408f5a1283e12ebe758bcb33ae7fe","ssdeep":"96:B22CHCjrOSQUnmpy0Gl09OJUQi5ylBwTF:B22CHITQUnDq0+B2BkF","tlshash":"c7917d3a0f013900fbbe14738424a7584f28c7a221399fd3a5ac52699395bdd08c5b6c","first_seen":"2026-05-26T07:00:27.051317Z","last_seen":"2026-07-17T09:16:40.343483Z","times_seen":2,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-15.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.368Z","timestamp":1784279764368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-15.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-15.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy5n73116j\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7ecph62cHzMXIYI8aHsvOYyze%2Bg56yuSa%2Fms0CLBHYb3WBgdjDqMxSFeC2yWYsIB0goYN0SrYuRqwRyp%2Fqql1GB3ReuhrHr8zCIzn17lIGbh6d9YQ9QqeVpN6Yc9%2BMwZA%3D%3D\"}]}\r\ncf-ray: a1c8254f59be4c11-OSL\r\ncontent-length: 764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":1793,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b5069c2e7041940a7e01910ade8c30d","sha1":"5765b729a0b250a82c050f4360ba1c9319b53eba","sha256":"81a7e9e0fa50af39a89f5c457c405559a4564822b7668378caa4e84422ecfa96","sha512":"2252ae727da9f4c3789c5cf3936af343c3a59f79f3f0150195a9c0145546e2e0585ac4d2fca574c9baf41ccca2bbaed03d27ff478131dd500d286f25e31ccf10","ssdeep":"","tlshash":"cc3179f82bc595d0d901c770891690b4195e38ffbdb5dbc8c29148e0ee500bd0d1d880","first_seen":"2025-09-23T10:56:20.391686Z","last_seen":"2026-07-17T09:16:40.345025Z","times_seen":60,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:22.845Z","timestamp":1784279782845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:23 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkdqrxois1eu7RSZgP4NodhOp2%2BPEUYd6PPEL37JONXDKNLKTSDcayEA7PFTeUP06gaTOMT1z8GrUCjhiNjzE%2FIMtv653qdX%2BgHTju9smuFvskeMpufJ1m3W%2BwMCWeJvmA%3D%3D\"}]}\r\ncf-ray: a1c825c2c9864c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":1037,"mime_type":"application/json","magic":"JSON text data","md5":"c8e14f40eabde36a5d3ebc60445a47e7","sha1":"6a64c68cbed594d0ad71c0c5692a0c6486d45493","sha256":"c7c0bdbfbf6fa77707613578dd8a5c76723c64f69c3efc35139bf4f3c62dbed8","sha512":"1ba610d529eb5174068582f10d9aa55a0d3e43384edd72230d536302d5e1a497a3a60bb092b826cda7de36c53e70209c8752c24c51584817eb557654c886e2cd","ssdeep":"","tlshash":"0ca012db4005684901b31006286771a427ac090311544520d340584d04100060802e44","first_seen":"2026-07-17T09:16:40.345709Z","last_seen":"2026-07-17T09:16:40.345709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/winner/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:25.752Z","timestamp":1784279785752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/winner/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: cs-CZ\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 85\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":85,"data":"{\"exclude\":[\"842\",\"506\",\"938\",\"764\",\"627\",\"396\",\"563\",\"913\",\"497\",\"314\",\"905\",\"861\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJqXDhseaUEVK%2FU1zNsUEToE2rxo8HO%2FCgg9iNMX8EUr4LvvovDrSmrOJ16cGRdFXd0aiQ7uO3m2G7CctWGIWEnxTooFU0iDRCSZSotOpId8eAcWJsTY6re6GchVkiwENA%3D%3D\"}]}\r\ncf-ray: a1c825d4fc0e4c11-OSL\r\ncontent-length: 214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533,"size_decoded":1195,"mime_type":"application/json","magic":"JSON text data","md5":"f48f3827aa1ab731df91caffefbfccfa","sha1":"4bd93ca13cd91a9d40d4659284fbf75efc67ab0a","sha256":"fab1dcfcefcbdc51845b7d09ae04aab9162e87ef6665a7a5f6418b49c17ce564","sha512":"8b6974cd2c2eae57c3c4e5c2b9354cd09715479c3f9a854f1dfd4e57b3fd1a5bbd056c97c26bf84577f8f007868e1399eafa5b9bbf37841b8477458fef9c04ee","ssdeep":"","tlshash":"94f0a093aa52a63fa08310d0dc77eecd1088e962426c4838fdbf1aa5c7315106f9870d","first_seen":"2026-07-17T09:16:40.347044Z","last_seen":"2026-07-17T09:16:40.347044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/halloween-witch.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.280Z","timestamp":1784279786280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/halloween-witch.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/halloween-witch.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khr3rj3hdj5\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fVkdamMXeS%2FjESJZNIIO5XRzazWLqu2Fhn032GnBbk3vupfIPS9jdVYx00hU7w0HpjBVRLsxdrIAVQw8YFzOfc4%2FE9OByKGJaDgvaxbrF5NDSwkRSOQRUPOdJW7L6ZHYcA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d83c7c4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17537,"size_decoded":18548,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"f4dd3d4a4dac8889e9141be871286393","sha1":"4353e6ab17d12bce682150fb4b89f21002fe3c7d","sha256":"969c96109fba59823b640142548b10e21c934180a2c7dacb9da8de8bbbdf8070","sha512":"b8b4dcb9e507076d9ca18c039ad232439875206de850a26e77fb9935f8d69fc5b0ed49ba87810df1f26606267323d9fb1c0cb2bb6a02fb65bd136d9f7313c0f0","ssdeep":"384:KRa9fCTkOn+rzCSjQ9Fcpda5YNjIChS9DfAlhCRG8T:Kcpc+rljTpday9k97AfCR/T","tlshash":"7172c08683c22012693f6f3223c4b65db978e9b191bd2bb9ad11af3f5f524564d19130","first_seen":"2026-07-17T09:16:40.34849Z","last_seen":"2026-07-17T09:16:40.34849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/5.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.375Z","timestamp":1784279764375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/5.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/5.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxw49g0164\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0tWtEIGftKEc1EAgIwRAzjkTKHSLf%2BjFLWGTAn3XuJw90vvf%2F5b5SEC4o1wtEPGbO0z%2FDBm28DqAj5B%2BWIQBwLaURVV1YVmKMJARFIy30Ffxm9KCngBYdo5CwBs7FNTyRQ%3D%3D\"}]}\r\ncf-ray: a1c8254f59c44c11-OSL\r\ncontent-length: 774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1516,"size_decoded":1791,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff7e7234e38b79a92205e0b37771851e","sha1":"6c033732793847a59fcc1dabad944f8cb4aa3d80","sha256":"bd57a5aef62354d89b13a3bf165615553eb7aa3eba0cccbde9714b76f3de62f2","sha512":"ebc83059c795157ad0c332c1cac7c6a470776f9bf9998bd3a5ee0acf365a67ec52d81d5dea486f7ed43d513957fafa54c35b7f2c1e9f654e04a34d9047a57027","ssdeep":"","tlshash":"783167fb03ccb2e0f402dfe1d81578667ea638bf5e15d75e8215b960b51126f058c884","first_seen":"2025-09-23T10:56:20.29408Z","last_seen":"2026-07-17T09:16:40.349953Z","times_seen":56,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/images/plus.43e37ac7.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.606Z","timestamp":1784279764606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /build/frontend/images/plus.43e37ac7.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/build/frontend/images/plus.43e37ac7.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52n4je5gapeb\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AYNtRa3isQ5dE6Zn7JnqqlDWDPEgJ3JOsDylb4oysm9ZapF%2FDqti5%2BPW98Kgb96ZafpSg%2BOboWaBLmLckKVADCDGzLhFIN2%2FLhZv3ZvvHhgasNaKCvE84CohMhHxSSK%2Fw%3D%3D\"}]}\r\ncf-ray: a1c82550c9ee4c11-OSL\r\ncontent-length: 249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":1291,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"646a796cadd2dbdcf35566f787a5e050","sha1":"bc94144a89319dbe46b004b00c68d7975c21dd5c","sha256":"68aa0abea8559a323e42fea3fd266226bf8d331b54e68e8ef8af1ec1c46ee98a","sha512":"06f6083b4644559ecd1113212054f7853919d0f4261bea6827ba3eda6aa4cbc884a6311aa9e3a8feda46f6425b2a31edf5973f588ae13bf29e9b24c5ab2c0539","ssdeep":"","tlshash":"edf0599563cc4e3cfb254a10e3497234402a66a296ad4108f67123712a282ae693f7cc","first_seen":"2025-09-23T10:56:20.515431Z","last_seen":"2026-07-17T09:16:40.350602Z","times_seen":65,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-6.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.359Z","timestamp":1784279764359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-6.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-6.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjycsebb15o\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aS4wbjIxgXwaaO%2Fjwjc6XElPETQMuJYrBld1ZVNhch%2FUcqlvAE9K7bfWDGuFZRwisKEbFmuJ5D8VBSiSNySC6VMqwNbVDxJnG2yyt1DmvXTv8GbtxkHBntyaWiRUonHn9w%3D%3D\"}]}\r\ncf-ray: a1c8254f39b24c11-OSL\r\ncontent-length: 673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":1697,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76e7c6b9226162c6d224ba11f90b5749","sha1":"e72249560379454a0dc30e52889ff7ed088bd46d","sha256":"967dff8aecee4221a3f0a65e2d5e8a47a2a08c872506bb4dec1afe2a023453dc","sha512":"a81406975f8973c57ea41cf56a867c2ee5eb438530c93389338c2999b36c71e370a27f8cc9fcb5d8a5469bde2e8d260479df05b0de24e84658430ba4614bc6fa","ssdeep":"","tlshash":"9b3199efa1d1a6e0b4838fd898147354399f2cbe3f0cca598181f6e1bd68b5c4488ce0","first_seen":"2025-09-23T10:56:20.508848Z","last_seen":"2026-07-17T09:16:40.351231Z","times_seen":60,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/magic-mirror-deluxe-2.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.185Z","timestamp":1784279772185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/magic-mirror-deluxe-2.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/magic-mirror-deluxe-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khu7p0dal56\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TeN5fS04iRULDm5HElQ0OqWC%2Fd60lbCMvCSyrxscHuiofcrpPC2Sq5n9rdVVPezfWo5t5mRkk7F6kCvVxG4IoK3DmKIOkmoyEolZWnI%2BMtublplW%2B6elqFuucePa7Q6sQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580281f4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27402,"size_decoded":28428,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"46cea7447bab37ffd2b3fd22fc373a8d","sha1":"41a3e91df04a32dbeacc0d95f82e17842f2050fa","sha256":"ea5764949f0b53fb706e07ae734091ae456486da6edf81589bdd5101424f04a4","sha512":"c33287d02a9b1f2528c3bd16543df839e2ef1a51b916dc30d6461451e368740c450dd43539986000b46b18f13066e82d4e827bc6d46956c5b7f6adf9fa1d6efe","ssdeep":"768:DnCxyoq6rapwn3DeJBEw1Z5ytwGSCcvv6GsAfeQfllGiI:mxywrswnip1ZoWGSCcvv5Rdla","tlshash":"f2c2f10967e9745cf94876b10e6dafd483381f4427a97e3124bbb92133ec5e8931784b","first_seen":"2026-06-14T07:59:02.151545Z","last_seen":"2026-07-17T09:16:40.351938Z","times_seen":5,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/be-gamble.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.380Z","timestamp":1784279764380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/be-gamble.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/be-gamble.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxoz27q20ob\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywu8K6VQQuvdrb3kmRq58jLCHXUtMgub6A%2F7r7U15HXVNGucB7LwhKrEdOhv5ZQe0LfoBpemD4gi5SB%2FJqqQ15SSrSfyLFb1qxjVkcrZtR17k1uTyLCEZwqtvhHvyIVKyA%3D%3D\"}]}\r\ncf-ray: a1c8254f69c84c11-OSL\r\ncontent-length: 43518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94187,"size_decoded":44536,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2630e6331e38bb73b65c6f268ba880a","sha1":"c5eb4f402cd9a654c44f45232b9be73794df31dd","sha256":"c80089bf96fca7f674c0e8815f64b93db18a0cbb887a289545ff53bd1defe1dc","sha512":"e36f67c91873e96ba79af52959383a722312d5f0f683b9b6f5819f4f2d2ba7fd3fa731889effc3392533db1bac0aa5413062e6cab6e98c887e2a499564c9da50","ssdeep":"1536:sPN4zqNHCmLcT4rw1iXHu+H5+8omU0JeJcshTj/D:8N3NimLcMcEO+H5+8ogJ8BTj/D","tlshash":"6893202a1c5c6b4e33760daecb43243e6e8235eca29d85df389f75ecc2635509271da4","first_seen":"2025-10-14T14:51:49.415953Z","last_seen":"2026-07-17T09:16:40.352596Z","times_seen":33,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/build/frontend/images/search.5e828e81.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.604Z","timestamp":1784279764604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /build/frontend/images/search.5e828e81.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/build/frontend/app.css\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/build/frontend/images/search.5e828e81.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52n4je5gaphf\"\r\nlast-modified: Tue, 17 Mar 2026 12:54:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDDvb7XAi87d7YYkg%2BqHtZqYQAG%2BrZbxiLFY3yFBIzTb1zEX3KyKRBpibo9iX2jzTCB%2FX4Ol40NyV3SG4%2FNcpy4Qe%2F5PVeW24INnznSPIlAB1XKjemnvF1qiaA3%2FQDT0YQ%3D%3D\"}]}\r\ncf-ray: a1c82550c9ed4c11-OSL\r\ncontent-length: 296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":1342,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb40655e1c46dc85e1c6f5ff10ab4f1b","sha1":"4bc19332f42634d2f4a221db82e53c4f40fbfdfa","sha256":"02faa5971a2df82ce9308007cce207a3aad95919f160ba43986bba6e3266cb9b","sha512":"1c354b5eaf1ddb09092960cdb4d564abf7cf5d1051a9546ecf6c1e170c2d79e9e659cef8f23454549dc5d1ac0a733fd86af7f95d1d5d9d86985aa0214f80df55","ssdeep":"","tlshash":"a9f02de91344491cf0069f36ff057e7d8057787e7f8a1450c050907aad621de8922ad8","first_seen":"2025-09-23T10:56:20.272697Z","last_seen":"2026-07-18T03:24:45.540754Z","times_seen":88,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/twister.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.293Z","timestamp":1784279786293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/twister.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/twister.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khyn95uamhz\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmfZ3wqoE0WZc2ARcIl%2Fh%2FqX9miGXCH7bdPViRD9qxFErVi%2BtGtX%2FlbRLdtxSuScWmcrNB8ojvp6c7qanT0Cwxjl1B7iQMReclth5rngW%2BroIGXxQMS%2BewUOWH1yVCCfJQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d85c884c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29159,"size_decoded":30172,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"e4675bd67c68d53f30dc7f03a9f7e961","sha1":"a1b6f5d0e68f42a7b68017ea5be75983c8a0dbef","sha256":"e670db41f5c198d20442c8edff11336bd027cfd02b70c63a1c3a4dd13bd09d7e","sha512":"d5462b785b73daa6ce7d503bd0e9749ed2b27f93d3a0aa2b40369cfb06c48b7c063e15315d0600d3d3a4398d4306bc9a87ee927e991d99f71a562e6fbd617df4","ssdeep":"768:NPA8MLxpKw/22+Qadc/BTs6HzghSxCLSaKqxnVHc51jk3:NU//Ghc/mvmqbHmW","tlshash":"9dd2e1974bb5a4c5d5bc9ef8a4cad577db4828124357881c2dad3fc20f5e1bda242133","first_seen":"2026-03-29T06:05:12.84365Z","last_seen":"2026-07-17T09:16:40.353952Z","times_seen":3,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/pusher.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.340Z","timestamp":1784279764340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/pusher.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/pusher.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khhg2f8c4ey\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5yrwRogdoZ47OE%2F1cNTqDQSVlI%2BxvNtLQQzivM5dHbCq5u%2FW9bxXnT8ZZit91CtzklT%2FxF3YPLng1SDOyxcGrVPMt0UfO0UPbyLaV5YLs8DQXru3E48MmsbHvfzY%2BWXbQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f29a04c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5722,"size_decoded":6732,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"c10b57538d4c95448300ce7a5e447da1","sha1":"82dbea94148ad1091f728d2128df77365a800cab","sha256":"80bd0edb2a1646e2623e1ed7a1464be56d0eb06d7cec164bb7ac9041ffbe3045","sha512":"ba11e23009c86acbbf238e2868215bb9b84c6e1404c7455c2bc6fba255a0f8eceb91e3c3a5b21a0d8a76a4361a5e8d9f5c895e8178a08b4a3b0f27ac4de21eb0","ssdeep":"96:cUgDmkYFmXkjEmBX4EOZCDT7Ep0+D4qlp7tS7r+QOOl3CWQIdKVLmH9Vij:HgLkN6RZCDHEa+Btg/x3CWJdVe","tlshash":"c6c18e3e2bd82961c81f437199232ad1e09489e695749f1343c68f50e32d3d58cc0eb7","first_seen":"2026-03-03T13:50:30.628742Z","last_seen":"2026-07-17T09:16:40.355685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/apple-touch-icon.png","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:05.230Z","timestamp":1784279765230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/apple-touch-icon.png\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"depnh2ew9bswmao\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiIyEQjXrr3Mi8i5Pz71h7aoD%2FH3DjaIFmda1ksnKladVDVFJGM7%2F4R851lydvrZZsA4tUf95yU3fgPDSs9%2F8OkTegGIobSpbmjLq3cJ72HZzVLS9%2BB64LCqnGJ%2Bk8U4Wg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1c82554ba554c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29903,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5d07718e180fccb06278e168924ca478","sha1":"6e15a0cd43c05b3344f420c9c3cefae27df3745f","sha256":"fd0ca4e9284c27250808008a4543aa282bc1b9c32d0ef36c3f6fafbbc7a7bbea","sha512":"a8e95221e0be0728c8a17f9f889e90b3fe7e4413668c750192fe3b2ea2839bab9a858aa89982d8884638438f485f61020204aa40c58b96c542a1049e8739204a","ssdeep":"768:mLgFKbhP9iyRMUH0jU9Vvttv7FbDPLN4LQt9a1ToeU6wfBUAAalu:bKV9iyj0w31zNV9USdAalu","tlshash":"73d2d07899c28bbd606f456d0dca110eaa9eaaa564104acf3da87e647cc39cc1c0f5b1","first_seen":"2026-03-29T06:05:12.862655Z","last_seen":"2026-07-17T09:16:40.357957Z","times_seen":11,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/baywatch-3d.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.276Z","timestamp":1784279786276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/baywatch-3d.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/baywatch-3d.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khjykat9oyi\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBMldj7BoEwequY%2F166aVodTKjLZDzFc4SI4sDygtmuEa61hqN8pO9EMrnN%2FOmzjcEsZWsp5VKCboN60hOparIUgTP7Q3L%2FQi6UJG8Aee4lgAlLLha7Qgwz1ZsJ1Gtyp%2Bg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d83c794c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32346,"size_decoded":33357,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"bded90db50af40647d2143b8d79b6833","sha1":"2d7a116f3b786251d659fb686df17c34d5a84f0a","sha256":"473041f1e12cf768f8015cbc666abbd1995f617124d422138e2b4d16d48791b5","sha512":"c7ddff2211b644ea4b09f902b1b4149a951c972a7da02f683571416c898546bc87c560980e3187272c0c91fad2fd4e51b3397fa9509819d206d89c6eb4d389b9","ssdeep":"768:ORMqN+SAlpLIrmCg+lxLy+307aalWJ49L3QBBoDt2u+IS:mMqcSALLIrXg+3puY496a2qS","tlshash":"e9e2f13bbd83c4f4d09e293b98145566a750d5450a0bf3c6bbbe8c115e0acf01d5aba1","first_seen":"2026-02-10T18:41:07.231303Z","last_seen":"2026-07-17T09:16:40.35871Z","times_seen":4,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/dmca.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.382Z","timestamp":1784279764382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/dmca.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/dmca.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxrcsmh6v2\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMLV2mOiZJcXTw48Z3tsnI%2FTy%2BxO9cG7%2FcfnlqnS9vwCCHUytaTy8lNUJdJK9LwnWTEEttqHd2SSShhYbR4sla8fgukbLUvhOADao5E9PK9S7Ie0fBfQprYRJoxw3l7Atw%3D%3D\"}]}\r\ncf-ray: a1c8254f69cb4c11-OSL\r\ncontent-length: 3556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8894,"size_decoded":4571,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd080d755657ddba0a3f04a4e8f08f9","sha1":"15e0daa5d81ea5d512082de011bc8f4cf7673262","sha256":"fa7d304ee7b5398417be1ac03f89d39cc0598a48ed145581afd6a5180e58ad7a","sha512":"3084640dbcaddcb49f23460b930352043d762ec17cf27f34039a4e3e2e7044396de30026d06ecd96667c66d47ccab14b93ec7169b3facd8a4dde4e94dd58b26a","ssdeep":"192:a6m66FkmYlYoDVfveKNA2L0wV+kENRWp8h4zOpjyhRaF02v+:a68G1lYkVnzL0w4kuEp8h4z4jyhZ2m","tlshash":"c002ba99637693fcf402a3f9c6166c367daf2de57681d258c3a10d52e0d206d1da8ccb","first_seen":"2025-09-23T10:56:20.3528Z","last_seen":"2026-07-17T09:16:40.359462Z","times_seen":68,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/rugby-star.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.094Z","timestamp":1784279772094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/rugby-star.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/rugby-star.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khwuycrqqvu\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uK6hbzvcN1ZJJtlE%2FtxtRnwgU8A9zl%2FFwy3353txJRM%2BpB5a%2BUnOeQ2mCFJch2T7ots8I5hZXuk%2FT5b%2FQu11LjhDOaf915eYkJPAJwPd7qhsMmwzH7E5xeDVlLwDoNTbGQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8257f980f4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34842,"size_decoded":35856,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"6926f731fd775b74649a56b7c29e991e","sha1":"10c6d34969ab19f5d70a981528b964b7d8724e14","sha256":"3f0a630508d815ed3b9640b698b9c29ed7069cabe7a3d9e7cc4880814da79a94","sha512":"75d59e7c846273876319441c1e5ff5ba181d4d3b0ea5149a4bafb6f156c7128b2fb32675180dd91cfb72888cbd3067abb84094dd2b47e22c43711ad4e3612176","ssdeep":"768:7w0bYbDa/SNShisZuNSFMFmPAT3AHPQVK6lOBj:80bY9Sk34FMAP6iBPBj","tlshash":"cef2e01c11985dd8eccc05d8a12b02d4660699f7bf5aaf7fdaf10160e32a6d6bb70632","first_seen":"2026-05-02T07:27:26.218309Z","last_seen":"2026-07-17T09:16:40.36014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/double-tigers.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.313Z","timestamp":1784279764313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/double-tigers.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/double-tigers.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khnv2l06qk7\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zLzn8TyGqvy9qWw2BpR4pytt%2FagNb7h2duj4d8HfAcPfvMxz5QZ7oFUOd23AQL0OMqu1xpAnE3CKISpMq26Qh%2Bn5raT0jLOe9rR%2BiIzVbav3kfY%2BuhI%2Fz8dDLPc8EQBZg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254ef9884c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34423,"size_decoded":35438,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"ebaefae3ee80b43c77193e51a19cface","sha1":"e00fc50ec2a916f28c8cd336d25dc02d2e82588c","sha256":"13c0c51de280442cf0b39c1fafc3f093431d54588f432742c7cf2576064d3dbe","sha512":"11cc028c6ab7be50aef7b74a26989215b61b4704ac034ca0a81efd92b5afc9ac97630def90e2bf067542a0596d7f8572bd75583ff2c6889dd5e2dbf08ec92b27","ssdeep":"768:E1FLDqPhAPL9fmIR/RYE/ZOeQ9eP/ZsxADtJeACxQB9XOZ:SLDohaeILMeQvxG+xQBU","tlshash":"90f2f2448b6c6a7d145f473461ece46c298ca007a525f34fbbdd1c6aafb82f5c298d80","first_seen":"2026-07-17T09:16:40.360819Z","last_seen":"2026-07-17T09:16:40.360819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/california-gold.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:12.205Z","timestamp":1784279772205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/california-gold.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/california-gold.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:12 GMT\r\netag: \"dh52khleyfu0kxw\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlRlI2WCycGbLJgV57E97tqZ2Dyr46f6cp3q5gn4lDLiMkd6t3b5ZCO07YmTHIDXZBZmJveEvl8hMnUF3yUmPB3sRlZMQxyqO5%2FCAzvjRHK0%2BWcJ%2BZpK%2Ft%2FVGWIQJ7tjNw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c82580482f4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27140,"size_decoded":28157,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"4d367907abf35101ed60e40d0685faa2","sha1":"0fd562c15b5f7d91b63902662dc9a56d50510b88","sha256":"7cf253ab435a9567bbad5f9186521cd7b495eee1f160fb71d02ec8f09895fc73","sha512":"749490b9e5374ee450cca13f2fef42e5b8d155b1ac9305726aec4ba86e114b1f36180094a88338329fa90831ac20243e84e134beaa8fe7df41e55437dde4f416","ssdeep":"768:2WA6Msii2JWPR3wRGY2JiqfkTird5t+s+I7+qJ:Osii28Z+WiqfBpKI7++","tlshash":"dbc2e11953e25f82a4df27e0d791da1abf2e3975e70ed80e585eda048b203cd21cf190","first_seen":"2025-10-26T01:21:03.272539Z","last_seen":"2026-07-17T09:16:40.362611Z","times_seen":5,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/rudolphs-revenge.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.275Z","timestamp":1784279786275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/rudolphs-revenge.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/rudolphs-revenge.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khwuycrqucg\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFJvfvdOxkGzLbOAAFU3PG7T0iR27sHDk0DvOtEigLJt4RdDXg%2By8PGR6%2Bztr9wrh5pFkNgwTZT7E%2FpT9q7x3sEItF9PPpqsQp7If7QIHt4wuYu4Inb%2Bt82pV9XRznVcOQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d83c784c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39328,"size_decoded":40351,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 360x260, components 3","md5":"9e355e703694f7c3419d559bbf8ead26","sha1":"e10b4e4b232a1ef3d020b4215a6a671a8e0626c2","sha256":"bcd160c8579f6b41a89a000469ed13aa87564259964ce4d0eb45eac4496a6464","sha512":"2816bea3434a671de8ff3ccaa9c89f7c807a53ee77bae13a7dc4d5f3a4d12ed1ee8ab775415d8643e08c4d05e447876745289d1e729d94767c56bd8d9a47966f","ssdeep":"768:0bRmP+emwiiPBBr9OuAT7UBZKVWtO0Os32ZN/YUfCh1CXgfQFJeAS:0bo7iAroue7UBQVWtO0W/Ymauef","tlshash":"2903f155aa146578ee3dccb000ac11e8efe759b891bb10a4cecbba51c30f39496be700","first_seen":"2026-02-04T18:36:07.351142Z","last_seen":"2026-07-17T09:16:40.364262Z","times_seen":6,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/medusa-2.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.326Z","timestamp":1784279764326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/medusa-2.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/medusa-2.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52khuod58loqf\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ze7CXjivoyp9IFWr2QDV8dVLwX2wzNj2tod8kUC7cnwGNYnkUrfJNUk%2BQt1y6bODn4ZZNDlCHidD9f4rcspdvKCASkuHvP711M1cUCCf3xee0%2B6fcND39wzTZwd0ZuygVg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f09924c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32055,"size_decoded":33059,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"19b954f30e94c6209801001ec3622aa2","sha1":"0b1bbc6730f6a401e51e470405ae97dfa9b13d5a","sha256":"78e813225dc017c9db07009bf0e8bf944539cb8e7b63924d18ad7b2b28b749f9","sha512":"26b3054a60ddaaaa3715498f93c2806553e8b13f79e3ee2c496639c2d9a32c0e71266a82f13bd0576d84ad16336903be85b2f35f92baa0c640e0c173fe1b1f8e","ssdeep":"768:mu5LrTQspG1W2NYb3jxqndFYgi+F7Lje+5u+rsBF:j5EspG1WfxsdFYAFPalj","tlshash":"9de2f1472fcb5c8f8b7da833e4f722b76a27139955f48d50c82b0518536e2a8c028757","first_seen":"2025-11-17T13:46:09.629733Z","last_seen":"2026-07-17T09:16:40.365046Z","times_seen":3,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/avatars/greatestix.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.335Z","timestamp":1784279764335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/avatars/greatestix.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/avatars/greatestix.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"dh52khgdyoo56i8\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVt%2FFKmZCUNeFDV00XWBpcKAgWJLRAet2MFVFUp2u8PI7H%2B8voTFX117%2Fy95nISC7tfT68FCk8%2FQ2aZ5uxBYIKcH0PxXbvRUQXYaCRFhBXn0vYdYOA6L6jokMkyVYa5Mnw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c8254f19994c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8432,"size_decoded":9444,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 150x150, components 3","md5":"4bfd3f91c7ad4572726ff7818eb656a0","sha1":"f07be795a39a807fba548023ab38be66cb4ee0aa","sha256":"391bc857bda3b9d87f7a6427e8ab28b8d1749588f145b10cdc55f57c461ff24c","sha512":"7a81bc0dfb2d9219f4a2ad8d2ef143cc04b575ebbd90860cda280be29fc7abcd357b1b3a8bbe098d016241605ddeb2e203cd5a6a157e54c19c656ea05592790d","ssdeep":"192:aA81ActATPzFqAJvS2jS2pQsmn5e3KK/Ukc:aAgty53a2W2prmngt+","tlshash":"77029f176325b719d2acff35630a011ac290ee89523e575f3938ad6da719fe40dd03a1","first_seen":"2025-12-20T02:09:47.83633Z","last_seen":"2026-07-17T09:16:40.366558Z","times_seen":5,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/2.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.372Z","timestamp":1784279764372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/2.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/2.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxw49g017d\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1I9ALGQJqS7E5hQ%2Big5O8ode8xfLaDrZlmAx6RwgZmYyA7wkRyldWRWMjMB3b9iFHouT18kFuqhOLIfaOn4N4H9YjihSTDnK9tAkSLshQfqlVnQUfreUqBPxni8Aa2gQpg%3D%3D\"}]}\r\ncf-ray: a1c8254f59c14c11-OSL\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":1630,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e41e20e700892cc6d4b8e82d54ac6dd","sha1":"c5b8d3a924398604fcbf0794b80132523bb88e2d","sha256":"1c83779a48702993568c1ec0f6c793828ae6fed8406550dcc1cc775b64b61c4c","sha512":"f95428239ba76e9b3cd3646b2bf65c0c90bb4454b173e53e45847d32dc824de686d41780e9a1ad12ed2fa045ee36ee1000c8fb8eea4d0c93b1b802f198675d1c","ssdeep":"","tlshash":"7831a4eec0d1e2c064b973fc8c3076e4658b3cba6eb7d3764447d2a27e240988c0d999","first_seen":"2025-09-23T10:56:20.454005Z","last_seen":"2026-07-17T09:16:40.368129Z","times_seen":71,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-13.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.366Z","timestamp":1784279764366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-13.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-13.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy39goaf1\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekW8cEwAxfUc14xYls5%2BA%2F%2BVglc2yPCBkjuTfdgg%2Fvdp7ZrKU%2BtKALHIQIa6qDrAphM9LE1xYaiam2IWAd0Iqnmm6pwP1F%2BqzJiyGNRtDSmalt88P8tlGbvhtqwdnlFNUw%3D%3D\"}]}\r\ncf-ray: a1c8254f49ba4c11-OSL\r\ncontent-length: 314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":541,"size_decoded":1346,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03da396c4a54d198a2aea69262fc761","sha1":"91f908651645b656a6975c115bb6e74b367c67e6","sha256":"aeea11511c54fc4e4d8b68b7ba799d2540a4aadf919ede1733d0634cbbd5dbb1","sha512":"0f6c0c61fc73f4e07a276f8413c82b061ac07096e4b92cd2293fd3cd6b4e387cf213bcf713d0b6302817408d13f5cab1e956e66c2b77e41e81552517aadd19df","ssdeep":"","tlshash":"34f005e5f6ccb0524605c712f52ba533b87f74d72abdd54a90a12750f5444cec81d9d8","first_seen":"2025-09-23T10:56:20.452417Z","last_seen":"2026-07-17T09:16:40.368788Z","times_seen":60,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/games/table-icon-16.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.369Z","timestamp":1784279764369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/games/table-icon-16.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/games/table-icon-16.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjy5n73118e\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RJ%2BSV0Kab2w%2Fb91wzoQJ7X1BLBmbDmf6r4o3iPha3CLcOlC%2BcbI8mLGPYAIS%2FpsN9G94VpmPwQqpJHZq8KKeTJZyGZDdkIo0fcHgXHVGG5TbSEhL%2FiNA0ABFcF1BKdHzA%3D%3D\"}]}\r\ncf-ray: a1c8254f59bd4c11-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1598,"size_decoded":1780,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df765364cd8bf39b6551de1f34acc58f","sha1":"580a6d7a223af6f4339d2bfd40e5ef6bacd8eb3a","sha256":"9b389fd3b6c0a3d8bdd75fd84ac3375056828c4d5dce5e48756c2d9341b04697","sha512":"022d00cb40252b3c5a1df11f03d81183e599b5e892bd0749b800672c6d708e531e5306133c1ce84168965a4361db142f9061a11e30fcfab12f86386c99078fe7","ssdeep":"","tlshash":"fa311fc9f2cde7c5c747fbb0d9336464294638ba9e16e21943dba2a496080ecd17c988","first_seen":"2025-09-23T10:56:20.390008Z","last_seen":"2026-07-17T09:16:40.369454Z","times_seen":60,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/svg/close_icon.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:04.376Z","timestamp":1784279764376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /svg/close_icon.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/svg/close_icon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:04 GMT\r\netag: \"dh52kjxoz27q1ih\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UWY87enZc5AJCkfZn%2BO1cACr25gO4U1q4czgc7spfx%2Bj%2FXeaYVF4IxvmANJEYPweQNhUUTmvM3mDAMCbF%2B%2F5BnmZekhwmR%2FqsTDQCHBC0wfnuB9FFN38nKNOoH9yjp3Zg%3D%3D\"}]}\r\ncf-ray: a1c8254f59c54c11-OSL\r\ncontent-length: 849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1961,"size_decoded":1873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d49bf81bab3667f50b44f5734fae7b55","sha1":"ae887c96b40885b4958e8fea73db9c07b4b4a89a","sha256":"a16192114e48d9fe47a8372b58cd743c39753935f5dc79e464cafe280d2d17d9","sha512":"c0d503d9345825d690dd8dddf779b9e10766e0ba37ce3782b90936d27558ba93772e29cfa39a0aa76f8c121dad6f82d8357f6728e6183f11f06a0fbfa08b24d3","ssdeep":"","tlshash":"1541cb9f73c2a9c0f506d3a1892db4903a5675fe3d37c2dc868649b1e7a02fd482cc46","first_seen":"2025-09-23T10:56:20.484081Z","last_seen":"2026-07-17T09:16:40.370157Z","times_seen":72,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/favicon.svg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:05.232Z","timestamp":1784279765232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/favicon.svg\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 17 Jul 2026 09:16:05 GMT\r\netag: \"depnh2ew9bswo4\"\r\nlast-modified: Thu, 04 Dec 2025 18:39:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBlspX0flDA8ub2BSC6QofcHYvn4WjY%2BBdo8xlRQZ3aMK%2BlzQf3OW6mrsO3SLQWTRuGqq9hXnsIsCWpk1WOXdl7RkpLchify1ZtF6fcHcawym0EArjYJNS9ELqw3MRp5sA%3D%3D\"}]}\r\ncf-ray: a1c82554ba564c11-OSL\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":868,"size_decoded":1602,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f020712c7ce478d0888983f287be168","sha1":"5e3d9bb81498857653fd87068841ab98709a7a36","sha256":"bb896bb442ca9c16570ad15ae3872937ed9a0c5fc5582f7a2e8f5b495b277c3f","sha512":"8645aecefb44c388b4ae308a3c007f54061f7db1b0840fb642dffe3aaad48d7ebbc4b2c8881a64a08b2d7973e97f01ceaa73d1ee7f455878fc2326a3c6ad66a8","ssdeep":"","tlshash":"381123fa940a206d635a8724a13dc098dc516903d1bc4212be42a915fdbd56a782b69e","first_seen":"2026-03-29T06:05:12.858184Z","last_seen":"2026-07-17T09:16:40.370789Z","times_seen":11,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/ajax/game/","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:16.745Z","timestamp":1784279776745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"POST /ajax/game/ HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 128\r\nOrigin: https://rainbet-cz.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":128,"data":"{\"exclude\":[\"599\",\"1711\",\"1889\",\"1276\",\"1112\",\"2346\",\"92\",\"193\",\"1288\",\"552\",\"1873\",\"2387\",\"2293\",\"68\",\"1921\",\"463\",\"17\",\"902\"]}"}},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=0, must-revalidate, private\r\ncache-status: Souin; fwd=bypass; detail=UNSUPPORTED-METHOD\r\ncontent-type: application/json\r\ndate: Fri, 17 Jul 2026 09:16:17 GMT\r\nexpires: Fri, 17 Jul 2026 09:16:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-powered-by: PHP/8.3.32\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHywSTT1KGMKzprE57gc%2FxyE7yEygDUqi6nXLTtcASnmSmLqohxXB8tib%2BuJfeoixgSC9e0wDcbFQ4czM5eShF%2F5Q%2BjDP0fVIA1DUUbGMBYnJB%2BHyZ57kXl0Scb03BxdqQ%3D%3D\"}]}\r\ncf-ray: a1c8259caba14c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90,"size_decoded":1043,"mime_type":"application/json","magic":"JSON text data","md5":"adaea35787e0771066415f3f6ab1bcb2","sha1":"9d10567d883dc031b1f4149f4938344933a0bf76","sha256":"9cf2e0df1bb1bfab29b174f8d0afedb650e31b7fe10bd03c99700a39d1079467","sha512":"8f442dc8a3ba8ba6f0ff7a2d1e2f4ce483feea33c8b22c88e770581b7612b6b83c0eea941a2001f7b3935d7313b9d8d0b06de5c2f00dd4216b8e0286f42b8f4d","ssdeep":"","tlshash":"41b012e994803c0983f705053e1630a824d46b830453481056c8984025780124012c10","first_seen":"2026-07-17T09:16:40.371374Z","last_seen":"2026-07-17T09:16:40.371374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-cz.com/uploads/media/games/bell-wizard.jpg","fqdn":"rainbet-cz.com","domain":"rainbet-cz.com","tld":"com"},"ip":{"addr":"172.67.180.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-cz.com/","date":"2026-07-17T09:16:26.278Z","timestamp":1784279786278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-cz.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 19:08:26 GMT","end":"Mon, 05 Oct 2026 19:08:25 GMT"},"fingerprint":{"sha1":"1D:F1:60:F4:4E:D5:00:55:71:50:32:D0:C5:2A:68:E3:71:1A:8E:EF","sha256":"7B:54:48:4C:1F:20:3A:B9:94:8F:A9:78:B6:BA:06:FC:84:EA:CE:02:14:19:B1:6A:60:60:C7:DB:F2:97:27:20"}}},"request":{"raw":"GET /uploads/media/games/bell-wizard.jpg HTTP/1.1\r\nHost: rainbet-cz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-cz.com/\r\nCookie: geo_country=us; bn_source=; bn_firstpage=https%3A%2F%2Frainbet-cz.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: max-age=14400\r\ncache-status: Souin; fwd=uri-miss; stored; key=GET-http-rainbet-cz.com-/uploads/media/games/bell-wizard.jpg\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Jul 2026 09:16:26 GMT\r\netag: \"dh52khk0y181iqi\"\r\nlast-modified: Tue, 17 Mar 2026 12:51:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcPumownMHFd7htssD9NbV%2FZKHDbkkXe%2Fsirh4%2FkdB4SIciRgqB%2BQ%2BxkRHGP7mqvxNAzNJ%2FvrlyDGHB0LihlkZnEK5uFVuaqmDi0Ug1l5KsiUSgVobhLm320nE1rSIWBkA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1c825d83c7b4c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24282,"size_decoded":25297,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 362x272, components 3","md5":"69f1e3dc98619b00f41bb18a7ad670bc","sha1":"2e30b3a8060cf1d2eb954737a31b65e677a62d18","sha256":"edd705d27eb82788111f4a5ddafd0e7c65ed46b40f2d8308cb99190f32ef4933","sha512":"c471da51fd37b51271b97e3847de55d532ce7350ca6f87c7c164c5f930d7ae44d5dd1843c15e0e86b4937bf48f8afd0767c2a79ccb147296e5e3f0f00af9148a","ssdeep":"384:ojUNzs9tpa2GyoyAAL/5716oIRLcjRdZT7HYN7xDSVq8GIUSjG7:QEzKb95YfQjPZXHYNtDuUIe7","tlshash":"a7b2e16af59b1df5dfac0777545c035b98b2eaa03953068391c5102e0f726d49f1b2ce","first_seen":"2025-12-21T23:52:24.79026Z","last_seen":"2026-07-17T09:16:40.372815Z","times_seen":4,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet-cz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}