{"report_id":"e5ef8d7e-7ac5-4d43-b48c-1f9c8dcaa0c5","version":0,"status":"done","tags":[],"date":"2026-07-17T09:18:34Z","url":{"schema":"http","addr":"rainbet2casino.com","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet2casino.com/","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"title":"Rainbet com Casino – RainBet Crypto Slots \u0026 Fast Payouts","dom":{"size":108028,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (840)","md5":"d54d2c297a90ed1ac7e2fbd7e885914a","sha1":"a98d13eef8191684123773b713ac5b5c0bb973da","sha256":"03434d1140e87242b2b8211cd65f5d6017283ca2f3d27176f9ad296cd6d89093","sha512":"5826f8b021eb5ca0aa8d7d5fcea66639b9f9beb7f12b3cde1b10d258e8634834662e9443db12c531d4685ab470ecd7261a0aa70af8ec2bdeb2ec301058f5cda3","ssdeep":"1536:BJG66gkCqg2scEJMuzw+U8J+/1CSylCCv19ib8JxUoM9cx2F:W66gkHg2sceMuzw+U8J0klH2b8Js9nF","tlshash":"d1b30713d6f23293059351b53ffa67ca773980036609cd24ba9d439c4f8aa5a5d33bac","dom_hash":"domhash70e0955e455d8f2ea925a5364afecba3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet2casino.com","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:18:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet2casino.com","ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-07-16T11:10:37.10686Z","last_seen":"2026-07-16T11:10:37.10686Z","alert_count":54,"request_count":27,"received_data":531734,"sent_data":15097,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imamuenaebetugif.xyz","ip":{"addr":"172.67.172.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2026-01-02T09:50:32.385531Z","last_seen":"2026-07-10T13:50:57.003386Z","alert_count":0,"request_count":3,"received_data":6327,"sent_data":1362,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet2casino.com/","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335a26c0f3da95ade78a0b66b9fd0bd","sha1":"48c07ab3210cae590c0ac9a5edf5769c8bf407c6","sha256":"b16ce109a5b8f7e39966d36fb64c61bc2408e894c5eacd411e2a61ffe5947b78","sha512":"f03db0ee12e3a3827603113c0a141cd90aa219c65e4c436e58e7bdae9b54bf95c6c84f4b8671e56747e5f23bc8774357018821510fa20d0a626bf5994dc274a3","ssdeep":"","tlshash":"43114eefe2a706b019aeb17f5fd603083670849b390447153c2c5e915f91916a6f67cc","size":974,"data":"","first_seen":"2026-06-17T06:32:02.86318Z","last_seen":"2026-07-17T09:20:12.609455Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60f3c1fa92b1fcd6aa92ba04ab0a40b5","sha1":"ac915b2840945f3127084f136d205b7a419d1a65","sha256":"3d308c1fd7eb2b7a72fb53fc6a1a3f258db9785cbf4242c8595c657f750c1484","sha512":"5057bc7ec08c2d7660cee86bf169701c64c0b7028b64520859a09f85940f06949d35ffa3b3611a6c4b93d21e5df749b583c2f1dcb9532f5a746c8d08b8eecf01","ssdeep":"","tlshash":"fff0902d56766931447361eae7eb47d8396c34c7a1484a983c6caad90f098ea08a0f93","size":564,"data":"","first_seen":"2026-06-13T18:41:30.463163Z","last_seen":"2026-07-17T09:20:12.610071Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a1384c19b719fcae9e6099d46d93e47","sha1":"29c3c3200c941b5e72a229c87011ab884ce3bda0","sha256":"69a9cf53c0f73e00bc6c1f85fe04044cb271611c194d97dc747827b7f6c2663f","sha512":"f0b9809c5ab91e55c16638f3cce00cdc4f178a534fe82ac91d31557bcd5a6f03afb388f248d5cc2876edd195a9c5268e7207ef06f89d53d183b89eaedb36f5d2","ssdeep":"","tlshash":"9101c83507726030822be55656cbb38025e4a047e1429c6a3e5ccbde0fd5d92d0f7faa","size":763,"data":"","first_seen":"2026-06-13T18:41:30.464075Z","last_seen":"2026-07-17T09:20:12.61063Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/script.js?v=2","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","size":2688,"data":"","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-07-18T08:21:27.843902Z","times_seen":4909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Big-Bass-Bonanza/3334e695292a0857cc261e9bfda788e4.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.294Z","timestamp":1784279887294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Big-Bass-Bonanza/3334e695292a0857cc261e9bfda788e4.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:24 GMT\r\netag: \"6863f1f0-3f5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjaHFmP7qRPUIoHOigF192MDl4DxVOfGYJO38lf63hhcDloGCzuhq8HjOCrg%2F%2Ffmv9IZC5%2BRUVTpgvzoNh4lUeTAzaqjB1WTfcA%2BOIu6iSWSDYaQzl8xcsL3yugxLiWqDzaBL3I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284f98b956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16218,"size_decoded":16970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f34e9a75e459464449e64cbdfb4859c","sha1":"1918bd6618204101af76e534181118f135d702ff","sha256":"aca99e8c549656637702f70a579ee12f5cbfb941d44bed8a16b018bcd6952783","sha512":"ec78b208f4698b5130118eb801d6406ef20986ea679ce5300c7e333cc81278eed6c2f43d92565ddd645189ade3b72d166968cc30637a79c99bc2f8101ca0abf0","ssdeep":"384:MYWxPzskmPAc/J6yWxwyB9J/XGBt4Q6lN8n0:QxPz5mP9/J6yY7wBiKn0","tlshash":"2272c025433a2237e0445a8bf4932bcba66d38d3ce3d47fa56cae094f3cf5988256845","first_seen":"2025-09-18T04:19:42.952846Z","last_seen":"2026-07-17T09:20:12.608205Z","times_seen":25,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/The-Dog-House-Megaways/19bde7dd26dff8455839da945685e158.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.306Z","timestamp":1784279887306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/The-Dog-House-Megaways/19bde7dd26dff8455839da945685e158.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:25 GMT\r\netag: \"6863f1f1-521e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRaE%2Flteb93Lb5Vw1ETb6u0McXgv7jlVxYNDEfmdzV1hATnBwncA6iNZRF8aeZRhh%2B9yM4EfKImSPHLQv9vld6JasHSNpCr0HvFOtL6dfNV%2BanwIM2Jdh3Iv%2Fv3Fr1yqRccS8kk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8c056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21022\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21022,"size_decoded":21774,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35002e70328d437142937feced4aeb28","sha1":"358985da210cbb19e3fcbbe02393ca53580f9a00","sha256":"c61fabe98776ad6a542686180570218b6e4df79821d7d3c77b4fac07f5d0f55f","sha512":"4608fff52a81752f3fdc0345777e77f5960659a90097d36a41f9a1217ee3705089d8aef1e59f222500fc5e48635f46dd95a1e9e0675a503841ebdbc4779f0443","ssdeep":"384:0PymrJft4sL7kfQZKFMUlIQAFSLMQAytM4D+wryb+FPHz3PnUGPMolP6d3lHr6hG:0PymrJKwWqXhlFSLjPHDxtpT3PUUloNV","tlshash":"5892e1e49de308e696156af314fbda55722ec582b4fbfdc54408457e2f86aa23f830c4","first_seen":"2025-09-18T04:19:42.942168Z","last_seen":"2026-07-17T09:20:12.590099Z","times_seen":23,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/static/sites/img/icon-menu.svg","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.310Z","timestamp":1784279887310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /static/sites/img/icon-menu.svg HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a1075b2-5bd\"\r\npriority: u=4,i\r\nlast-modified: Fri, 22 May 2026 15:26:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQD4QNciENetG78K5m4qS1xUpu7PL1nhQdd3LnOdbSWnsmGk1uCDDTBVyS%2FZIjKe2xNMAE3pQ%2BT%2BdhLT5Kp6FsToGw9FSHetYL6zFSttinA4TxxPFC6kFlJUdvACRDzTXeLNQv8%3D\"}]}\r\nage: 106096\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1c8284fa8c356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1469,"size_decoded":1219,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bf4f129d14841bc2049a5af6a12fcb4","sha1":"98e394689cbd857bd6b21770dc8e7a8bf4ddbbd2","sha256":"bd50fdb6a227c577ffae65cd984a4a3a005353ce2328304ec3601e4672e7828d","sha512":"84370c90a51f0bc38ad375ab8c1b58e486bb36428dd439d5040b282d7e1eb0f18f5244ea84e88cddff24752437ad4fea818f503b0c68ba581b2ebb46687622cd","ssdeep":"","tlshash":"fa31aee7515c88c4660f9be7dc2b24bfa10b7dec1fda8090e64429c73b405e95848c9e","first_seen":"2025-09-18T04:19:42.956065Z","last_seen":"2026-07-17T09:20:12.602214Z","times_seen":30,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/static/sites/img/icon-arrow.svg","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.311Z","timestamp":1784279887311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /static/sites/img/icon-arrow.svg HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a1075b2-1f9\"\r\npriority: u=4,i\r\nlast-modified: Fri, 22 May 2026 15:26:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1ubdKidhp5iIZUZH1ogEiCC3wYNKR8r%2FVKnzxwKK%2BVoRS81QFxWcwwTiA7jQCx2gZxPMudHGS32ruWDwEzcUVs8HakC51kHvy%2FAlg%2F9xMgArZTj2l13P%2F1LGGQGrj70Up0WcZU%3D\"}]}\r\nage: 106096\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1c8284fb8c456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":1049,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c4c9ca47bc762339abc0dbb8ac6373f","sha1":"c1baa987d07e37d4f52f9568f8d201bd71f6b9da","sha256":"98fb55091cbc275342579798246369acd43a4c0fbaebbe4f5b1741d9aa182ed2","sha512":"b4b63bcfff2bae82236a88fdc2ac587089891816e1d72861fdbbfd0c4a74d0cd312e180fbfea955faad512f13fb7293654c148d57b4199450ebaac465b3aca59","ssdeep":"","tlshash":"98f09e9943ac96846906575d5e27a1fd9c3e64f71b8580dda0072025b48556ddb0ce88","first_seen":"2025-09-18T04:19:42.949137Z","last_seen":"2026-07-17T09:20:12.584305Z","times_seen":30,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/payment/Visa.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.320Z","timestamp":1784279887320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/payment/Visa.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:24 GMT\r\netag: \"6821c640-f6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Y8G7d7Y%2FSHK36QpyDmmqCzJAdvmETj5E5RtArvoNgHAxnC7WCPGIFR%2B3aPUYkGsfrOrycaevyStEVX05MC2KbDEkaxegW5%2FfTm%2F7t8NR8ylYJSpxNkI6G%2BmsugbdkfgYlkkRgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fc8cd56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3946,"size_decoded":4697,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"01e32b67162a767ca8eb2be8f865b076","sha1":"4ea76a4b75e39e57cb58125bbffaed1ea3fd6150","sha256":"18e75d672e883616603620b1f9e50011ed240844af5ed39c4c6d319ef4ad9e1d","sha512":"e0018db83c74967dca2c9ac14d0830252dfb5d2ebb9ab0c61eaa8da2bb78dd75fc1a20304a3c7c02e9705a48af603cacc5fa8fc7d170d252b2985ccc1a318f7f","ssdeep":"","tlshash":"a5815c5e8e0b78c397d1e5ebe5f99c2b4543418055d0fec437c6c40a5aa05a28998aef","first_seen":"2025-10-08T10:43:09.291995Z","last_seen":"2026-07-17T09:20:12.603894Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/banner/de855192-57e3-40c0-920f-d349a27edf82_1_1_KLOBJbM_bDnUUIF/b38f8049162a672168801c36fef7e7e5.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.282Z","timestamp":1784279887282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/banner/de855192-57e3-40c0-920f-d349a27edf82_1_1_KLOBJbM_bDnUUIF/b38f8049162a672168801c36fef7e7e5.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=3,i\r\nlast-modified: Mon, 08 Jun 2026 12:06:12 GMT\r\netag: \"6a26b034-1df9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hdnzzNL4AKQYnZcurDv%2BO5aa%2FZAyFuHeN161iiJ9NIi0R71d80NpsnonaRvHMRWzT0TKpWtyIxpnd7juzvjY1bD%2Fmce9E%2F7aQYBtJav35N9DKgYoGHjBpRvxORBLz%2B68dK%2B8cU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284f88b856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 122780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122780,"size_decoded":123538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1180x393, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8bcea4e3d878d08985eeb13f9a1e509f","sha1":"9bb3fc0d1debce6d31d12b7cda3fdb9746806d1e","sha256":"2c9a4dc3e6b958b8daa4c45c8a0be0cf84a628bcae6eee6a6b9993ba8759a3ad","sha512":"1935dd5c6ab413ff7c2c427aa77fd9bdd9a4935e871e58c11e1980f51bb61071f3a531379b61c2c1deb1701d06c4ec923cdf008dfb415b816320b3a281cc0562","ssdeep":"3072:HRLTgC1YEz0oED99nUTvENX3ImQ9Dzw1UGoYc60EhlkmiPc:HRhYEz0XsENXAzEURYXaPc","tlshash":"1dc312bed580ce4a74388d0247e8526cda3c0d3cc1e559b6d3ee69cd8a75494c8d2b7e","first_seen":"2026-07-15T03:08:34.019862Z","last_seen":"2026-07-17T09:19:23.02975Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Big-Bass-Splash_kCh03uY/0df72e280fcf9495266198c2a89d8eb4.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.300Z","timestamp":1784279887300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Big-Bass-Splash_kCh03uY/0df72e280fcf9495266198c2a89d8eb4.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:24 GMT\r\netag: \"6863f1f0-5f62\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9afXiwCLNVdBeyRNsfG41x2sPjn9I4%2F%2FpZN%2BgJ7OJsz8qAF7%2FIrtO83FjY7o01BOj6n6p%2BKqSLRWLBNkAPnphuIX%2FWZswYc5T6GLRpMaIANrMzM9olWIeoY482BgEuHrvP%2BsqmE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8ba56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24418,"size_decoded":25176,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed9cb507b0bee5a5a9851de3929918fb","sha1":"11da479ff7f3827fc18d2a2ff4ec0a226ef4a07f","sha256":"331ac20f7e6071485be38bf2e4e72e242d847549870655c55b8b79d55b9ab7cb","sha512":"1625c6f69c365c509c7aad32357fa3083fe3a8e538ecad3e3b7b47a974a01a3d30b0b54d367d98ffe274c600f1160ea9e115599aad8bfbb3e6e73915e598e2ef","ssdeep":"384:hUXoW6c17Ta7SL+0KcDmo12s0n9Yw1VQzN9h3S14BgUDOLVLIyQcjTou7ee7eu8b:SXoW6c17uG1DuBfVQ59rBgU6LV2cryeO","tlshash":"5eb2e0be4099831a36cb38b5149898dfb17c4d19b56b3a33694cd5bed1901a39ef0fb0","first_seen":"2025-09-18T04:19:42.947825Z","last_seen":"2026-07-17T09:20:12.608768Z","times_seen":25,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Sweet-Bonanza_2es4EyL/9537f81ce0861417d25c17fc7b18daf4.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.303Z","timestamp":1784279887303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Sweet-Bonanza_2es4EyL/9537f81ce0861417d25c17fc7b18daf4.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:25 GMT\r\netag: \"6863f1f1-4e6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tK4%2Fh8kfu6WRvxTPSiphsQsohV5HmbWW6%2F7AUhgQwQlAj12ywVvR7LFXk3i17xv969YqM5dBwKUVJMPExFfSo5rvVAyPi%2BqlxkA9qBvvrwHNoBYx5XyG6BF4w9pKpbRm8WUaIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8be56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20074,"size_decoded":20824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f82034e2d37483f4bfc112ce1b0357ef","sha1":"857ecfa46238e2601a68b0d02ef39bb2029821d1","sha256":"a886a6b0893e42a99d543604bff2e6e87001a2dc7b28fd2b48e588d3e291b956","sha512":"d67fd81a9c407891fc0418f99a4e86d1a417bd6b51bd331a6caf9c5e0bd7f9df74dc12a6a3ee0ed8adeb155d3861774fa452659d47547b86e2a37bc7f4b8da2f","ssdeep":"384:zeslnJcrkHfLiScr/3e3wjne3j1ihA5/OOUe6Xcc3VBUzPlQWTWK6:zxniGfLiScL7eB52W6XNB4PlM","tlshash":"0c92e011386bdd6e520b74718e4ca2b2bb479672192631ae900f6803c9d7332f97ca5a","first_seen":"2025-09-18T04:19:42.954374Z","last_seen":"2026-07-17T09:20:12.597569Z","times_seen":23,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/payment/Ripple.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.319Z","timestamp":1784279887319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/payment/Ripple.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:24 GMT\r\netag: \"6821c640-dff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSph%2F6f0DnCB6h%2Fl%2FY%2BmMo6BMeV%2F7xvDAIbKdFko21fKHiCpNbMcRHHWRrjKfBoeSqLPl9P2g3PpIu9hEldlJmI1dSgBxKoOJyB0oJF6GjUMFRbv1415LXaZF6%2Foso1WluU7kYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8ca56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3583,"size_decoded":4336,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"4823fd5b608b00c72d7adedbf0f86506","sha1":"d4f4a3697669b57aa6b46d9e37885bb74ac73138","sha256":"cba88bb0ea7a602f596a955e585aa60f245fb5c03d4a87efc18b2d2d1e270e56","sha512":"483a8266ffb568f0cedca2090cd30497cbd8260bae55cfba14e23d8aa85f852aa87f61490c9d12c7eda40dc259eeb06578e1e28ef21ec3bb7f4a1e001365d23e","ssdeep":"","tlshash":"e0714b8cb881e7a051aeec841ce6c8830de54bc506d4e9fb95cec83649185ed612ecdb","first_seen":"2026-04-10T09:56:16.259858Z","last_seen":"2026-07-17T09:20:12.600521Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/648b6052a0c5236eb036fdb7_skrill-1.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.321Z","timestamp":1784279887321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/648b6052a0c5236eb036fdb7_skrill-1.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Thu, 11 Sep 2025 17:10:45 GMT\r\netag: \"68c30295-1562\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mb7YyTYL0nf8C5yoou2dFmJwMoDNv%2FOpUFwqonRQtKu2h7gbY%2FXBb4AGsfvR%2FihFwUTnQ8usiUKTgM%2BwKAX5zS%2BqGgTqG5DB5l9eyeB3iPgLwGOfSrMRThvNdqD4e8x982vZfb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fc8ce56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5474,"size_decoded":6227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cd63b1fb34a95e5c47c69d8753a9c2b1","sha1":"877b8bf216221d3dc9148b48a35bf6bf51aac028","sha256":"b764becedfa21af44b31d6d8b4bcb66371ad01349935d112526aa5f9ea6685b7","sha512":"f643c1b18bcbf39f5e2422c14ce387f19e550308848311136190d6cbfa80d20e37d715baeaacc41dc16f4b0ec0cfefd2eea90e2f81b757f238b3fe742560c764","ssdeep":"96:lgpyi0hrDceCafhv6XvaZ2M/H/Xf7rDxn1UzNyP:KUrDYc2iv/XnDxnec","tlshash":"f4b15c6d3430035ef1b59873bdac2cb59a167ed6a510f3e1f155a581c22e01bbf3a0a8","first_seen":"2026-07-15T03:08:34.033395Z","last_seen":"2026-07-17T09:20:12.588618Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/script.js?v=2","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.280Z","timestamp":1784279887280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imamuenaebetugif.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 22:50:21 GMT","end":"Wed, 02 Sep 2026 23:48:03 GMT"},"fingerprint":{"sha1":"C3:C1:25:5A:5F:26:EF:38:2F:4F:1F:6F:4D:61:A7:BE:AD:A9:64:5B","sha256":"C8:84:E0:AD:01:A2:B5:64:A8:37:DE:10:B9:54:DB:C4:A0:60:F3:32:D1:A4:26:D0:85:6E:20:5A:7F:01:10:C5"}}},"request":{"raw":"GET /script.js?v=2 HTTP/1.1\r\nHost: imamuenaebetugif.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Fri, 12 Dec 2025 04:19:16 GMT\r\netag: W/\"a80-19b10c8d5a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 46589\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzwIFcVd6DyQU3Bnn2oAuyeQvQ0cukaFkJ3C9ir5FIMr%2FCgiAI6yAzTSGTVWVKo1yue%2B5jI21Iuixvsd41dIRuB1Vj20DgZaTIvEpJ2isM1Kft8WCP3zYVcFieS%2BndLM6ZCAf0x%2B1Q%3D%3D\"}]}\r\ncf-ray: a1c828501e081a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2688,"size_decoded":2534,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2687)","md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-07-18T08:21:27.843902Z","times_seen":4909,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":72,"connect":21,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/payment/PaySafeCard.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.318Z","timestamp":1784279887318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/payment/PaySafeCard.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:33 GMT\r\netag: \"6821c649-a28\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFM%2B6vyyuhQwz57HjUsA5RIQorfu7Z3yLeVwkyb5AKiptxmRm7%2F1DWet%2F8mmJGBv8%2B4wYvNptXML%2BeRBe9Cop1qJ7PT6jWU%2BKxsiTLoZGMpHlV4NNDxz%2BTHsyChM4vjx67JObwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8c956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2600,"size_decoded":3355,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"f96f5548d00e864a3541ac08990c783f","sha1":"174bb81a9abead01b7ae25dab4d9911dd03f423b","sha256":"43218a24f06856a108e0aa00bfe72df226eeac5d11001b5af47eb08accb47602","sha512":"2d5fe0c70ccc6774690cb31253209775c26372b45be377789f64886882b01954822a0d295cf71fdacf0f696ee4a2df46b40b59746fb02349cced66d518e8281d","ssdeep":"","tlshash":"fa513c4dedd0459285a9f14202eba077ec17034051e5edfba98de11711b1cfe5de89cb","first_seen":"2026-07-15T03:08:34.039307Z","last_seen":"2026-07-17T09:20:12.603312Z","times_seen":10,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Wild-West-Gold/85679048ca80b40c8dfbc81a87386a2a.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.309Z","timestamp":1784279887309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Wild-West-Gold/85679048ca80b40c8dfbc81a87386a2a.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:25 GMT\r\netag: \"6863f1f1-4e04\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0sYqGWKyBOkXHQlNlbKN%2FxJQuz%2Fy1CED1fcD5UDhrxd%2Fju4ea1sbpXgVTiskplZYgBWCDrOu0K7ngu42uNmrW1EMnbv%2FQEOZphNBRUlYqjafaZi0AjFydhAhu0pPTbwMaS2XTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8c256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19972,"size_decoded":20724,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0150cbecd91f389d4ffbffdacfbde669","sha1":"da6c7ee846e36f4f25be3db4247379668a51ff34","sha256":"aec5a5677ff548481ff4cf7a82fde818ee606c01e1920373269c9afb2cb45dba","sha512":"7017976e0725f213afdd3598ae16d4dd8cfbf400d36ad54fcf0f3b101de333328b9bfce67a94b5798f13b011f8b051da0d4d1e47eb6077640e1d52086b8fd076","ssdeep":"384:gg1NNUzCpubriW/BxJBGD3PJzWJ9VC0j1F9BUTn/4bR93EEP7a89pL:gYNNMrpRERzIFj1WTg1Nr3rL","tlshash":"3f92f13d849d23dcd6592054d973a0d33ea84e5f1234a92b24411aa29fde17bcbdfe31","first_seen":"2025-09-18T04:19:42.943169Z","last_seen":"2026-07-17T09:20:12.602759Z","times_seen":23,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/payment/Ethereum.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.313Z","timestamp":1784279887313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/payment/Ethereum.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:24 GMT\r\netag: \"6821c640-a29\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=shylSNay397QE61XqyLxxWV8jxpZekUA6%2Bdsz3ha6t%2FHhAkzT%2BIv6ATlxgyTTvIPJwL5AxTnaGijpccOdmekYMtRfQuHTSA0Wv4k2Qui8EdlRUW%2Fn7%2FOTGcvZ8YOwvZnRKEqCRY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8c556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2601\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2601,"size_decoded":3352,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"77dc3c3b48df3db9916718bfa57a4560","sha1":"e73ef3159d276b1c12a8b652497ef638e4526a55","sha256":"0c4d21a009aa8ea67ff01859145b02c2d67e900880f8b289b71fecd777db6983","sha512":"a0eca6621dc0a05cdb8cedc97e3538042a63977a759dce94295703d6d719558374b4f7d301efeb829356de1ed057c0329b2b019b73078db779c88efbbd218b66","ssdeep":"","tlshash":"5e510906d97984c12ec4f5d688f2905bdc128fc0c6c4e436acdeca668b668b48d662cf","first_seen":"2026-01-02T09:50:37.294067Z","last_seen":"2026-07-17T09:20:12.599285Z","times_seen":16,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/payment/Mastercard.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.314Z","timestamp":1784279887314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/payment/Mastercard.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:33 GMT\r\netag: \"6821c649-9ce\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Jhx4lckJ9tStrTXOutHJFWfbnRLBjmp61VTplDqkFApjkqZnnWQJmTyxRC6b0PYHsA9YWPuPJOWr0IZfniuUnWw4BEy02eEN3FxWIgJdR3kch1TUoTWcKGYMrilzgMVJY1Y3aI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8c656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2510,"size_decoded":3251,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"f15759ef638b5c87f4974c102e9bc8a7","sha1":"cc0df5ebaab9f0bf6c9dcef8dd97c5ac983a3595","sha256":"656df88cb87954db7af82b9511220efa04cf07fe2531d2b6bbe6612c95834b40","sha512":"63ffd1f4f7b0ff61a0c7ed506ce1b2fa43ef2cc7962d49c67f0694c8319e17429d0769ad7d0e9c890500d482af280f3d16d9dfdccdb17ec6021c5a74b1c74b9b","ssdeep":"","tlshash":"c5510a9ad68068569b984a63b0e4191685338dc04ff0d5277ecf8927597d2f400182cf","first_seen":"2025-10-08T10:43:09.336962Z","last_seen":"2026-07-17T09:20:12.59095Z","times_seen":19,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/usdt2.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.320Z","timestamp":1784279887320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/usdt2.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 19 Nov 2025 11:12:49 GMT\r\netag: \"691da631-622e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E1r%2BWFbeYBLYUlAvmt6kOO%2FlABH%2F03Cv10cII1mwWminSNaRNeCulcgY8r%2FcrS%2B3I%2Bd5bYNaFtOobfIKT8hIM%2BOkNidwswS4g14z5l6BTyO1TIYxlhA9TgAgkFz5e5YcGiMDrU0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8cb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25134,"size_decoded":25891,"mime_type":"image/png","magic":"PNG image data, 640 x 360, 8-bit/color RGBA, non-interlaced","md5":"921b64d4aa28ba5d6d78fc277bfa2eed","sha1":"af4f7af99fb7cd6ea928e3d80b1b2a328cffb608","sha256":"59406c0e7ef3a9f05b42930de1a8060d2cadbc0ca50e7f4d879c009252695d25","sha512":"57ec878189472f28458e285f92387c6517403afd11ea5930aa1d53533a081320f1bc13c18996a5fe754f44395753278150a08adc3e9ac3712a63fbeb00e333c8","ssdeep":"768:YCFssssssssssssssssssssssssUW5CLkb9pvBigQjRWxW6O+yOlVF7sG5n/K5n6:YgssssssssssssssssssssssssUcppp/","tlshash":"bab2ae3483408c73eeede7965e1315a4dced3ea1f625fa08fb4727171297b09406aa1d","first_seen":"2023-05-23T13:47:29Z","last_seen":"2026-07-17T09:20:12.607446Z","times_seen":15,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/logo/88C3OiI5074u196AJuW12h46kpk.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.385Z","timestamp":1784279887385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/logo/88C3OiI5074u196AJuW12h46kpk.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 08 Dec 2025 08:35:27 GMT\r\netag: \"69368dcf-4476\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ly5DwCl4WDMifpawAZTFTEE6wi6%2BdSrrvGYt25Fd2M6QpuPNXBl%2BN6JRjcFlqDC8EcJD9hxaFlLhDirghIdQsynNtg0piOV%2FWHdqBFZGGVX8GsUIh6fK29uQAbhlY7DqxdEUNwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8285028d056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17526,"size_decoded":18275,"mime_type":"image/png","magic":"PNG image data, 300 x 125, 8-bit/color RGBA, non-interlaced","md5":"2dc35242a1cb68bfc05b9089b5a9ef15","sha1":"4d89a59529954f45800a74ffd0a4dd10ebe6763e","sha256":"bbe650cead065af4f4149270381e947e8a01781bad513b125ff0474ced4e512f","sha512":"8875a05797cbc5182b5c14992444229c2882a7c5b1d2e6ea907ed7ad74d927817f1415e5daee27b15d85c9e88bf9ec16aed7618f6fb2326cc3d80e6cc984d3a3","ssdeep":"384:lh2QIXF0ZYJeR1sQzGBZpvLbOkIpjN0KAr0NLMfI+QM:ybF8jRSQzGBvzbOndqEkt7","tlshash":"8372d0416a61167866d3026fd3c31c3a39fa6d902b2a8f42fd1c5d9206f1f72c986ddc","first_seen":"2026-07-15T03:08:34.03456Z","last_seen":"2026-07-17T09:20:12.605066Z","times_seen":10,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Starburst/27d17fde1f39e453b11a91581f85c894.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.298Z","timestamp":1784279887298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Starburst/27d17fde1f39e453b11a91581f85c894.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:24 GMT\r\netag: \"6863f1f0-38a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZPlegSRm8VbnGGFqGuLY96TmEr2zhqgXFlctHUj66xA8br%2FOILscs54urBRI3pt%2B3kd8oGR3TRigGjwG7xIUCRY%2BvZnPK8nQszRHnJOUn4iLF3MIbP9T%2BXAHrYEQvPB%2FISB9Oc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8bb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14496,"size_decoded":15250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d315a2642be08f8f88e80f2fd0e36f0b","sha1":"0ba8e49038dfce938b871129fa0ac0edb090276c","sha256":"c96caccc6d4abba5823e8424b0e6dab041f060e97bce9b7c6d5de0d773325d0f","sha512":"f4fa23b78a807be0c52cb11f92610675695e47fdaf8af060ee194c2be2eecb2d0fab965a927227bcde6fd6462f6776dc1ac66e48648afac24b53a37989fc0819","ssdeep":"384:pPvSHjRG/yvykijGfoK1ymOWpO3Ej4SjobWbniCxs:iI9KaYY+joos","tlshash":"b852e0901993a8748a631b5eee074223ddcf6d183c009a5d54228ffca6a4f46c6b09e2","first_seen":"2025-09-18T04:19:42.938777Z","last_seen":"2026-07-17T09:20:12.606827Z","times_seen":25,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Wanted-Dead-or-a-Wild_EGqyg1G/86f53bdcada68cdd93b4c97285798faa.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.307Z","timestamp":1784279887307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Wanted-Dead-or-a-Wild_EGqyg1G/86f53bdcada68cdd93b4c97285798faa.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:25 GMT\r\netag: \"6863f1f1-3d78\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSh5ohw0rHVFrPthTS2N%2BMAZVBqoslHmbHwen47V5%2FDwPs0BKfuyuVKGhe48VeVCU%2F%2BOyvqFSUME%2Bt00ryfZgpxTrGDWabZ%2F2IufyI0ELZIcgOgfL9YqAwWh3Sr%2F6p80iHuGLJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8c156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15736,"size_decoded":16494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8dfb93f4d9fab7167d4f82738a52c732","sha1":"04c2e935cf64884267d343369900214ca2079170","sha256":"129b36ca77e4725640aa940fc5e113407b3ef38a73fe39a6cd4bd9b2d1ba0336","sha512":"a3b71d8a0955ec42b1fdcb532a7f0b4949d7cc4bdf1193af12a2ee0d4637da829ea1d42b87c3e21d1eda54c8e9e17a4978c0e98d9719e854450c04ed0bf342e8","ssdeep":"384:hpC8kwWnz83bCvVbScSQdM7wMMPrqpeObuysTFEg:Bm83kVucgn9eOaysJD","tlshash":"7762d0e1009ded588216140e132d6a39b31c519ab62da0fb5f482ab92fd7397ee11e39","first_seen":"2025-09-18T04:19:42.94668Z","last_seen":"2026-07-17T09:20:12.598637Z","times_seen":23,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Sugar-Rush/6ea4925142f230b3912461a9e3362ff1.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.304Z","timestamp":1784279887304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Sugar-Rush/6ea4925142f230b3912461a9e3362ff1.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:25 GMT\r\netag: \"6863f1f1-4548\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nUDH41SDa1Vg1Yfz6nxvKw8zLxKN2iZu%2FACqyXLNvDrwBiujmbNGknQFNaHPTma5TCs7YbtPN0Up4Z7tkmHwxUJGJo6J3FNx7LjV4oecL7BhqgwYPrrq9fFCfZzOPc7fWenyYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8bf56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17736,"size_decoded":18482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4d66cd268e5492f9177f7e27af3cbe63","sha1":"67304555b994f917ce21cce7dd54b9b780f6ff26","sha256":"7f3781b716a297e2adc82205f64096b3e6297cc2932b462df13b5ca63b7dcc42","sha512":"a51437a14575b052139a173376b4778ae6a50bc13ae02afd9e1d7006f6550d3ab4bf99f5ec6dddd0c3504499955914c1b85219824eb06d363ec7bd8393e3d1c6","ssdeep":"384:06AOvCA+CvRqk2lVQQs8hMVglXGtKT7UhgOKelaYF6jqwix8ZCc3:A4GVQRxV3Kfo15aYrx8ZCw","tlshash":"bf82d13760f5164a1ecb139751e9606caf133b5aeef71f2502290efae00e93ecb14195","first_seen":"2025-09-18T04:19:42.945347Z","last_seen":"2026-07-17T09:20:12.583432Z","times_seen":25,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/payment/PayPal.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.316Z","timestamp":1784279887316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/payment/PayPal.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:33 GMT\r\netag: \"6821c649-936\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2Fo%2BAvKs67NkgijpqX9XTkHaSfOMZYdz2fi6iwE1Ddzre6CUbzdJbWd5mHaE6OJ3NtRPgizLYQHkLVUpQYU0e3Kw8iGQEgiIQvictaoX%2F1yhd2h18hozQIMvATZCP8F1ptxTlPM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8c856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2358,"size_decoded":3105,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"bf9716cb6cf4f4fcec9867ae28846f3c","sha1":"cd5529dadd16b0045926c5ee897519336bb0b57b","sha256":"e2ffb7934c324c8ccbd0987c2a599af8984b3ffe9a3fede0bdb7905b42bf723e","sha512":"e3829c1d67bf2acda50f684e4959a80b5340e58b6a8273c6c428585b54ff88151618a83a29721d25bef27844897bc15d73c44e20c06b76b149ad6bda6051a7d1","ssdeep":"","tlshash":"75413a8db938d982928c8dc02df11036af0b49859a44557a799e8c2eddd403474fc0df","first_seen":"2025-10-29T00:41:44.30589Z","last_seen":"2026-07-17T09:20:12.591789Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:18:06.675Z","timestamp":1784279886675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nx-frame-options: DENY\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDTcoFhQRC4AVnjWXpPamRbIPhJik0TmgARUBzrFy8SlERwg7wwJOx9HCU23GgBfo8AsGKKrxFOfInDIrLZ%2Bfy42ybA7lyljE6YRb27IzRr3FNQBWdnbo6GcFLAalvHiaB7rBCE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284bf8a056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108222,"size_decoded":24401,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (840)","md5":"e57b8453b6e1edb29b9e6db1c67a4de8","sha1":"35b34efc3bbfa53d5f9ff2693b9a761ee5bd5cc6","sha256":"77a83163bb52f57453cfcb2c0b34a7458675db6d45f514fcf0f544e8b014d010","sha512":"0b85570e2f18808446940b92f16c64bc773bb43e1e887931f1445830e183417c90631adfd77df80a0666b2641c6fe1c92375ac0ec52a9720d648fdc19ef23581","ssdeep":"1536:oJG66gkCqg2scEJMuzw+U8J+2CsoPlCCv19ib8JxUoM9cxKT:b66gkHg2sceMuzw+U8Jv2lH2b8Js9PT","tlshash":"89b30713d6f23293059341b53ffa67ca7739800366098d28ba9d539c4f8ae599d33b9c","first_seen":"2026-07-16T11:10:40.058005Z","last_seen":"2026-07-17T09:18:36.154272Z","times_seen":2,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":10,"connect":24,"send":0,"wait":196,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Gates-of-Olymps_04yUJjU_36JUCvF/1e092968d956dbc81b4f75f36f8af026.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.301Z","timestamp":1784279887301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Gates-of-Olymps_04yUJjU_36JUCvF/1e092968d956dbc81b4f75f36f8af026.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 20 Oct 2025 21:46:44 GMT\r\netag: \"68f6adc4-46aa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Faq8A6FGyuD8TEAX%2BjuaaoNHlfXgrgRfizQXac8fjrN72kyP%2Fh5Tqa66ghRVYOyXIipiJ20esMuuuidQeKQ7PmxIAqwSTVFEiX3a6zAcZW8yF%2B7lKpmmqYg%2FpPvqXaUwMEQosis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8bc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18090\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18090,"size_decoded":18844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3448f205a0120771233b7f1c1a4782f1","sha1":"6764f68e00606086c8c5192e31ad7b00dbfe4b88","sha256":"59deba5d38500b809fd199609c16b615412b1f9daed39422ff520a7b5a4ff308","sha512":"a6728eec5a7022210dc22becbc6930bef01763250d2608ad49f5003e85ece292d0183f998d668aada2c46970fe0bc62df5f44450ea8fe6ee89560e364b91ecf5","ssdeep":"384:9EChniUmZP3TVVctIx1GBmqNLvPhzGGLbXxSDtWnp:aankZPTGBmqJvZz/hkIp","tlshash":"3282d1ad60872a62c45ec622911b1eeb69dbbd82d5fbe203c054c4f61872f94fdfb111","first_seen":"2025-10-29T00:41:44.314148Z","last_seen":"2026-07-17T09:20:12.601653Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/favicon/128x128/98aa85c429c6842b76be5a91bb0da1cb.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.417Z","timestamp":1784279887417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/favicon/128x128/98aa85c429c6842b76be5a91bb0da1cb.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 08 Dec 2025 08:35:58 GMT\r\netag: \"69368dee-3f3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 105630\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFQRCYd6hq5L08SL3%2BYqUJBOC4Nog0qD3RV8PfSGf8%2FS39rf7C7vVOWE0dm1%2Ba%2B7E7soSbwwomvf%2FfxhUJKPpdY5%2FxGeNFxWr18fE585ScirHO%2BfJU%2FrOzNZDaL6mDqXvxVzIZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8285058d356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16186\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16186,"size_decoded":16950,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGB, non-interlaced","md5":"0987886edcf61641a736efbce8450947","sha1":"d0b9e45f64c3604223adeeb540e4f1d64ea01174","sha256":"a6c69919ce2dd3354a0217f490a71ac111c71cd9bd9c94d158e91af84b59cb98","sha512":"e30ca1620398a718df374ff0df0a35835ba56b9e401b4b39d259a91b0916ce08b0e9c6478c0c193171a0d213afa2aa34a2cff7ec8edcc3e541be7418b0a73a6a","ssdeep":"384:5YIHFYGgtRA5pkpC8ZkQpq/JOYRsMnPnzBXXPuXZHOLZXh2+:FqspkpnWQIhOYdPzB2pHOLB","tlshash":"3872cfa554ecbbaa6796d3fcc9d10dc405315a6cd8324ee0ca2cdb312a2f079b163e57","first_seen":"2026-07-15T03:08:34.01759Z","last_seen":"2026-07-17T09:20:12.60448Z","times_seen":10,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/favicon/128x128/1968dcf298dbba070123f13fa01b0c8f.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.418Z","timestamp":1784279887418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/favicon/128x128/1968dcf298dbba070123f13fa01b0c8f.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 08 Dec 2025 08:35:58 GMT\r\netag: \"69368dee-274\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 79680\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1D0yHxcDqLNP1QBkMUD%2FJbgiL11sIdBnP3BYMTeWG%2BNkjv2AhABhxFMjymsOs7c3NA0lcg0daVhj5LiPyhMD1qoiZ4AxQlc7Kn%2BKTZTzm021Lp%2Bwognj7nlf9SCXL2Lt1viyoEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8285058d456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":1378,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"0cbac3b643b93bb6ba143cb9c71deef7","sha1":"192b94de6a85110732530ba8914beeef32722621","sha256":"0e4681d3caf2647507ea750ce1afa812be80b3d0715af4ad4638104c4f738d73","sha512":"1726842bcd98e724a7f54f3f991577ea792beda1613f8d4c477a9abe27ded4356db681d26f44bb4af76ee2bd1554ce514b9c88835c77fd63edc19c74ed548739","ssdeep":"","tlshash":"11f0628b33821d7cc8a8137a8db362714ca10a0848f98c51cf2f2d0a180be2d03ed2a3","first_seen":"2026-07-15T03:08:34.018804Z","last_seen":"2026-07-17T09:20:12.592591Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/api/send","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.421Z","timestamp":1784279887421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imamuenaebetugif.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 22:50:21 GMT","end":"Wed, 02 Sep 2026 23:48:03 GMT"},"fingerprint":{"sha1":"C3:C1:25:5A:5F:26:EF:38:2F:4F:1F:6F:4D:61:A7:BE:AD:A9:64:5B","sha256":"C8:84:E0:AD:01:A2:B5:64:A8:37:DE:10:B9:54:DB:C4:A0:60:F3:32:D1:A4:26:D0:85:6E:20:5A:7F:01:10:C5"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: imamuenaebetugif.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://rainbet2casino.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5C5lLw8mx6W%2FkTx6x14osT5mXhSfIYcaj4eigZIsqiuIghpk6GMRiLT83PEkw1PH3ED59yC%2FonV0SZuBm%2FeWy9BBp%2BItNkfjCGUQ7TVZNI0AIGyqOP5B1LbI3r6jXAWYWt9liVtpTg%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c828507fc18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1060,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T08:43:08.114451Z","times_seen":17333644,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/CACHE/images/games/Book-of-Dead_PxE8DEI/507be2dca18423ca2475e106129b8f99.webp","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.302Z","timestamp":1784279887302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/CACHE/images/games/Book-of-Dead_PxE8DEI/507be2dca18423ca2475e106129b8f99.webp HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:25 GMT\r\netag: \"6863f1f1-4760\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWWsxooFvZM%2FnCutOJxrjuZ1Vaddac4Z4pwFfz%2FOh9JyHq0ZFToi5DM7I6CZYRETwr5P4vjKq3ohs0F6%2BfBrfKY4fR9K%2FRama1tHuXOKJoOUQwmXDjDVlfr59fOaZ%2FhIuEB5Mz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fa8bd56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18272,"size_decoded":19026,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60d4f44e80284e7f904f24e24e442ff2","sha1":"aa705a173cb5640cb346a177bda5fbb8c63b43b7","sha256":"47b495cf394fa1587849d008d8cb07505ebef0f87d92ec610f360182053995f6","sha512":"edbcc80dd53e95196ea001d00bd9c03913be309922ed34a1cde16ccb1f0d20d01494a963257cbf74e04486cfba28b148733a5c5a9f5fe7a69ad794e27c3f6c36","ssdeep":"384:ioMgDf2Xt1aJ/LQlMvkNZYOYpZZDH/BvEOr3plx3rx7uxGr39Me:ioFQ1aJzQl3ZHYpZZD59NCxGCe","tlshash":"b382e07625538c0ce12937b81e034d8a7b3e4991116b41db6fab2a1d282613be85f83d","first_seen":"2025-09-18T04:19:42.941091Z","last_seen":"2026-07-17T09:20:12.596728Z","times_seen":23,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/bitcoin.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.312Z","timestamp":1784279887312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/bitcoin.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 19 Nov 2025 11:13:58 GMT\r\netag: \"691da676-15b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mE9GK%2FzkDACSQj8KIcv9w49cTJcO401EvuIhrXsBxWg8Gfif0N%2BMBEk%2Fk6LAhOoItnpdjkyz%2BnoGXx3xhF7%2Bt6O77V1Xx0IMiIrE2V795M5H32qkm6c1T15ZcGj8BdA2OvfsO3U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8c756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5558,"size_decoded":6310,"mime_type":"image/png","magic":"PNG image data, 640 x 360, 8-bit colormap, non-interlaced","md5":"f88742199727ecf39d214105aa65be47","sha1":"5449fe5885a8a67e20a77b08764a9c1c91b6608e","sha256":"2a06aca35cdd558aaac5781a8ac7f9fb3d9b149f9616f1cd420d8a71a0dbc1c8","sha512":"d2d415c571997c236ca0b04cfb95fa3b43a7661a389059aafcb1e01a1a3d9c700465937d9dfce0d4f37450495ee35485555e5fc0236e920ab436355deaf2f842","ssdeep":"96:ITXT/SC8Hw1/S3EzSh/n5Wm8oqrCYjh5Ajhqtw+NBZmqWdrfvNOO4NfD7I:Q58Hw16UOhB0oq+KCjhqtB4qWJfFORNg","tlshash":"c9b15bc2b21b9935fca21db15728875dcd2c6d171a4acb01d12e30278abb7bb4775f06","first_seen":"2023-05-23T13:47:29Z","last_seen":"2026-07-17T09:20:12.587715Z","times_seen":17,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet2casino.com/media/payment/neteller.png","fqdn":"rainbet2casino.com","domain":"rainbet2casino.com","tld":"com"},"ip":{"addr":"104.21.86.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.315Z","timestamp":1784279887315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet2casino.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 11:37:49 GMT","end":"Thu, 27 Aug 2026 11:37:48 GMT"},"fingerprint":{"sha1":"94:9B:F0:F5:7C:4C:80:53:94:D0:EA:F9:DB:8D:00:65:4F:6C:3A:85","sha256":"1F:84:1B:73:E0:34:53:B1:62:20:D2:70:0C:B8:30:D2:2A:8D:47:55:50:EE:CD:9D:8A:92:41:C5:D3:D8:94:27"}}},"request":{"raw":"GET /media/payment/neteller.png HTTP/1.1\r\nHost: rainbet2casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet2casino.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 19 Nov 2025 11:14:37 GMT\r\netag: \"691da69d-10be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 106096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ay0nKWB7JA3aOZo2Rp90MW3Fc8KtWuHmNmNOALIz7fekYDtfd%2FK%2B9tJop12%2Fsvd5toHqAiXQVgSbKbrAm4Tc6Bm9Sy8NYSDueJuFLbcrtu%2BvlMh%2Fr9l8hmPxRm7p6BUSxNdT%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c8284fb8cc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":5040,"mime_type":"image/png","magic":"PNG image data, 640 x 360, 8-bit colormap, non-interlaced","md5":"a835dbb871782f0a8f3af7eece67aa06","sha1":"9d61983e919af7129cdc713d1cff40b89eecf843","sha256":"c97a8ef3a40821f9fa52a5ccf9c04dee966794c0ce4189e85eca5b2fed638a12","sha512":"be50497f1aa67a1c4a3ed8e7550536839e77b7b588cb45f7e68f36615c6089d0243de971ab9d2601a4f761db3389d1b260f8b35ff09ec650465f52fddff6ec45","ssdeep":"96:RdbzjExUISuzUnFxEJkJaNKkkd4CaC/w9PgTQexqg4:RdLI7Suz+xt4N/C4CaB9PgTFp4","tlshash":"6a915d517e6f8d6cda7e9233bd8e3933244a42746c6081caca246bc0ede5261c1f16a1","first_seen":"2026-07-15T03:08:34.037141Z","last_seen":"2026-07-17T09:20:12.599896Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbet2casino.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/api/send","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"172.67.172.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet2casino.com/","date":"2026-07-17T09:18:07.419Z","timestamp":1784279887419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imamuenaebetugif.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 22:50:21 GMT","end":"Wed, 02 Sep 2026 23:48:03 GMT"},"fingerprint":{"sha1":"C3:C1:25:5A:5F:26:EF:38:2F:4F:1F:6F:4D:61:A7:BE:AD:A9:64:5B","sha256":"C8:84:E0:AD:01:A2:B5:64:A8:37:DE:10:B9:54:DB:C4:A0:60:F3:32:D1:A4:26:D0:85:6E:20:5A:7F:01:10:C5"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: imamuenaebetugif.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 268\r\nOrigin: https://rainbet2casino.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":268,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"63151f4a-59e3-4694-b990-851fdcf487e8\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Rainbet com Casino – RainBet Crypto Slots \u0026 Fast Payouts\",\"hostname\":\"rainbet2casino.com\",\"url\":\"https://rainbet2casino.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 09:18:07 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6uFVZZ28BmQwW80wQvKQTde34Ebmq7HU5M35kX8NMQMgUhYvyXa8tH0UFi3lcebxNzGHH03PW%2FhMK%2BHls5InOGgcXT71QdoHTnzPoGaUno5LtGmDx6XGQbSb%2F6alTSS3GWbHCU4FA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c828510ff88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":1454,"mime_type":"application/json","magic":"JSON text data","md5":"c11c9064119ba2d0cd288781e1dedc4f","sha1":"baa4a00eb4f75f2dfb2e3ada9eb210820f24b63f","sha256":"81b6f5acd172a6713ccd8205b9357502641d3a680d58c7fe4f3b6fb65d0d6a3d","sha512":"b1307f96511fe6475124f38aebe389ffc8d34b2a4e0ddd5448685079ca48577b79814fc1e302e1de7c562e62d15dba8e653f783e44bcd666473ba62eb09d288a","ssdeep":"","tlshash":"a3e02b6ab1836fec804e63801cac71a2a34891fa4ae020ae68d691d69dcee02081a020","first_seen":"2026-07-17T09:18:36.164547Z","last_seen":"2026-07-17T09:18:36.164547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}