{"report_id":"eba82fd7-489a-4a64-a107-c46196428dfa","version":0,"status":"done","tags":[],"date":"2026-08-15T18:37:54Z","url":{"schema":"http","addr":"rainbet-casino-c.com/","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-casino-c.com/","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"title":"Rainbet Canada | Best Online Casino \u0026 Sportsbook 2026","dom":{"size":96429,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12704)","md5":"c1f91e75eac19a87b48e95f2e70726e1","sha1":"84413cc24f879ad33e9746133fc5b160280e74fb","sha256":"f07b98d36ec514d548239e1dd3d0f191992e37e6b43742547b7fb5ca601be109","sha512":"e3410168c1ddd26ac79d943d6fe7c25e4c585504b8b02a91b0de13b1e98330d31cc81285bd63d706b11fcd172ee743345132e80e4ef9b0c511ea1d6997cdda8a","ssdeep":"768:QraBnnPdRt3Ud1e9nAUABDOgd13IA1NPi9GsSF3oor5O4JyHFVHvnwl3hG+zvgBx:QmBnPUe9Vg7RPBVBqziA+0","tlshash":"3a93a436a0f0193316e390d0aa76765b3f99a4839a06555071fecea85fc7e93c83339d","dom_hash":"domhasha1b0d3f96f749c99c77eb4cb0ccbf6c4","first_seen":"2026-08-15T18:19:11.239909Z","last_seen":"2026-08-15T18:37:57.100683Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-casino-c.com/","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T18:37:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-casino-c.com","ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-26","domain_rank":0,"first_seen":"2026-08-15T18:19:07.067187Z","last_seen":"2026-08-15T18:19:07.067187Z","alert_count":74,"request_count":74,"received_data":2338594,"sent_data":41082,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-casino-c.com/","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c0c54231c290f42c230f2311aee2346","sha1":"8115df498c7d470462eaf7e37ea73788b00758d8","sha256":"443996f795ed4d700fe717174fa45afdb0ee7bd2645e49cf9333d6f278a818a7","sha512":"4308dc229b4ef9b3f75bfb0ce103f9dd4865193ef0f3374fbbec73171222dcadae62ba0bff0ca046bd1528ef28144de1ba105ef4bcc8fb5bc2906b4447222075","ssdeep":"","tlshash":"371147ff38e3603a96a3613d4b2f9204747710432509ec66fc2c9a40afa0f180266ec9","size":985,"data":"","first_seen":"2026-07-05T04:41:49.901444Z","last_seen":"2026-08-17T11:56:32.9626Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e69487e9ea60ee082bde3e66ab833a76","sha1":"6dae296b8aa062bea9bfb3487a479515182377fa","sha256":"6af00f3c0bcf9cadd5eaac77f0eb6ca1fa01a845dc9b5056ba3952fbe642f50a","sha512":"ac0312d20519120838cabad84c8d3409a15ddc6feee474a03734a1a4b876f75dfc4be4a0f2527c3ce6a78baf928ef8d0d60cd7b7f99585db227d8c9f9a734f84","ssdeep":"384:veTAEt2AUd1eNbnAUABDOgd13IA1NPi9GsSF3ou:8Rt3Ud1e9nAUABDOgd13IA1NPi9GsSFx","tlshash":"084285e0731439b316eb97f6a1bea6c4737078cae5464014653cdcba4968cc62371efa","size":12631,"data":"","first_seen":"2026-06-17T09:35:09.649863Z","last_seen":"2026-08-17T11:56:32.963614Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a6d693552216682d8efaac461b0542d","sha1":"e671459c5bafc7b2b41661006664fd25d4da6c4c","sha256":"9db36db97ee438b2ac25d6b7c6e2325098545dd3ad33be2fd2be88188703e4ac","sha512":"72a7390be86cc21b4e60dd5acc094f347f705e7d375c25dc9b5544f78e0bfc217e79b8deccc49c143dcd24f87873e5bdd11c8a53a144c807453400eddd239923","ssdeep":"","tlshash":"f2f04e2fe9b63630446ff02d71fd65c81136100f7505ce247e6d86451fa8c4456699fd","size":644,"data":"","first_seen":"2026-08-15T18:19:11.318221Z","last_seen":"2026-08-15T18:37:57.163204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T13:40:50.881716Z","times_seen":421344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/bNa75eiJbr2qLxr5ITlYeCpiRZMyzUCbY4INgWrY.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.938Z","timestamp":1786819045938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/bNa75eiJbr2qLxr5ITlYeCpiRZMyzUCbY4INgWrY.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KQ%2F6N245p%2FVKUt4qZiGW2d8X3hHWhJgNQN%2FrY3HILdu2wW4EecKgk8%2BGm6LzW%2FhcptzxvBllcQAflj2DhX4scUi4z%2BvUC4TXYAkJ6wkkUVlsTV4KIG2IfiQbCqcwXuESglNZLc16Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"670d57548f05871bfa796c9577e6cfae\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d1a9db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69391\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69391,"size_decoded":70245,"mime_type":"image/png","magic":"PNG image data, 707 x 353, 8-bit/color RGBA, non-interlaced","md5":"e1340a02896922489bb5b059d86e066a","sha1":"61e5c9441feefc0a849ccd0592cc3a123917babb","sha256":"429cf496b6006eee24e0851a18ef57e64c4ba58c4e259b6ccef14576a5ff655f","sha512":"33c56bf0547bcbe019c15fa69ff2403fca0238f6de9092a8a5823b63e2662eeb0b0cd49085a5787e9d91797a3045cf5d1e84f304f8578a563a71616bc465f23b","ssdeep":"1536:cUZ5giI5D0fLTEOJoFujsQzLRRQwBLjQD8CdP:cUS+fLTEOJoFmsQRR5BxkP","tlshash":"7c63f1065f22c36ae052b53b377475dc81bb2cca15d8916bee45afb8cb80face0b4551","first_seen":"2026-03-28T01:48:10.015412Z","last_seen":"2026-08-17T11:56:32.843089Z","times_seen":51,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/EAt8IPABpK2GmmqPDSmslIcn2uKUw0AnY9e7K0Nn.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.954Z","timestamp":1786819045954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/EAt8IPABpK2GmmqPDSmslIcn2uKUw0AnY9e7K0Nn.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CS%2B78fJVSVx3E3E1gvP85YCPSffKUaVpe8yXGdsVhW9tR5ylvRW6k1e8hXm7wTIZ1For9nWYGK%2Fq6nJUbUlC5DIuNwclesn1paD9hy6JGdh0lBYSyMwHm%2B3yJ6AeKLcB%2B3gfXHCY9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"5337c03bcdd3310035ba4dc4e8cb822a\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d3aafb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1826,"size_decoded":1633,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4375a96b423265a4ca3ef95bc0ef089b","sha1":"da6eaea0f93a23772c34bc87f2effe5ae97c5ef6","sha256":"078f8d657fc29cf758133ba5bfad058cd105181a80b725ac954d4f2c390ebe6d","sha512":"82784caa5afb24de576cad34bd898dbe75e53eca7589bc1b04e1f012cab4e6d720ddef7d1998ef7e6ddfda059223f1d9132c6aa1d247d0bf014b853c0f8240d7","ssdeep":"","tlshash":"4031453ad0adf25ed24553fdf71454a40b6decfbba005718e40e853d1f125c2abab5a0","first_seen":"2025-11-11T09:13:33.455051Z","last_seen":"2026-08-15T18:37:57.102459Z","times_seen":44,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/8jiimYmaIKnXchIeZGmtLIqSYUyMLRW2F5F5igAu.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.917Z","timestamp":1786819045917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/8jiimYmaIKnXchIeZGmtLIqSYUyMLRW2F5F5igAu.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aq16tT%2Bil1vT2p8Jf4DKQGpqWVawQVnzzV9rIClJhXIIZD984QOQRaTTJuxxkDnxiHHOpYMEL8xVf1m81Y%2BYRRwdULWjytHEae2ChgPW40RkVPrUB8zU9nypgz2xZlijuOzTlsEVSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"29e129b9f11c667384aebb27b23952cf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa88b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27808,"size_decoded":28655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"befb4084608843eb5952d01acb3e16b0","sha1":"1fbb6dd72834359032ef0c481621f3008299bff4","sha256":"315e22ba2b348c6fe4497c4dce9835d71260aa4a4d3d05bfbe22e8c8710d8597","sha512":"bb3c7c51714dd2c9149d26115136b955691e62b3b1e925f19f3c8926ca5dc1475befcdafa74088aa5db8377921dc70473b3fbb54d4632ed1872d95c08699db7e","ssdeep":"384:NG33qqRo0tlXB7bd6JJ/RtNI01a/4sWUoP5KZ8GhmQCkfrCrXhR2HfmVpeNOFjUz:pqRoPptK0sWGZ2QJOrx4OPF+29Gz","tlshash":"5bc2f13ce34077b4780b5aaa5da02c5d2932ccc85259562883a5c9ac5d78ff8c7c37f9","first_seen":"2026-05-07T04:15:00.048296Z","last_seen":"2026-08-17T11:56:32.885343Z","times_seen":18,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/cR9RscvwVmoWM2nxXGF9izeKqzQfT2JyCP2QJw1y.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.943Z","timestamp":1786819045943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/cR9RscvwVmoWM2nxXGF9izeKqzQfT2JyCP2QJw1y.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FseRjrlZmVFZ%2FA0PT%2FcxLbMEWjBX6g6Scx%2BwP%2FKiQjJApzwVb%2FXBjiAxm55sdw0OThQ7Qd3M8BTqxOl5bfAs4k7jFagg9enAtI%2BhSe4GP5TTRD9Q%2FW%2BxPLBq9HPEoTQ9w7lG208jlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"e9a87c829889deee0c127dedc9f5993c\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aa3b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10360,"size_decoded":5230,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15fdf1485a8e5e1040b83072aa51689a","sha1":"ef4ccf9f9b9c0705ec47a15243e8136bc6715cc8","sha256":"467bff22b56e01b46167c19dc5f9e1d05342d20e9d30f3165de6ff1c27301b47","sha512":"710f2f8a813930aa2cf3ae0c5899a046ceb86a398fd9f09ae5fecefbe036f73ff4425b23193cab0f88cb5789abc3268c4172271d9e3cb0fd5afc12be79c4d335","ssdeep":"192:tt3WL9eKrPRBdqzz5FwvtmIY5aeE0SVehvs/yCaqyoy0A:L3W5ewBCNbaB5yCar0A","tlshash":"7b221ac123bd92f8e54593d8963214a47ded34eb3590d5acf18c9f8a5f220da08ad8b3","first_seen":"2026-04-09T07:56:51.868256Z","last_seen":"2026-08-15T18:37:57.103538Z","times_seen":44,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/e3pwbEdNk2GO03wgVzMVoHFxIBhkWxHjLEET1gK8.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.952Z","timestamp":1786819045952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/e3pwbEdNk2GO03wgVzMVoHFxIBhkWxHjLEET1gK8.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48KQjVpkeS%2FcBB9SpZJYDm%2BfVHuRtq3jrR6BDLXK5NoHJIj6rBqFtwQ%2BJQwz1cQCUgg6puSzUOLrERq4Qbz%2BF9%2Bhv%2F%2BR93xn48ly%2FOZ%2BW23AdOCWVeazQgn4EX6mBWjUufvejOaQhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"9b90cd95f1b238abb7872c12e8d5dfd4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d2aadb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27127,"size_decoded":27987,"mime_type":"image/png","magic":"PNG image data, 2000 x 793, 8-bit colormap, non-interlaced","md5":"797ce32fd46b4a6a994e79d1af1d4836","sha1":"07b2806267599b09432985a74bb81ed6fe948daa","sha256":"5ed675d981aaa7638abe3978ef6e39b2023097d5b5a0f1ea6f055e92957cf6f6","sha512":"97e5260130769e9fb44e0d90ad29334c0c50aa4479caf203c66157978ba48ff59b10a0cff0f3418c638e79a27b89e6c2d48d3e8e461a0d295b342f57b3e7db4a","ssdeep":"768:8laQy60NZpqevMCWQ8qRoY/VEoZXZyzkS:sU6oMCW7OVBXs3","tlshash":"7dc2d0deee782794141237f2b82c249f76d42bd41eb1df911b3c6628ee782246079539","first_seen":"2026-04-24T23:22:41.958461Z","last_seen":"2026-08-17T11:56:32.846017Z","times_seen":63,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/xNWPjG55eAngtRzvrKb8rw66Zp5deauROoCTfzzU.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.906Z","timestamp":1786819045906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/xNWPjG55eAngtRzvrKb8rw66Zp5deauROoCTfzzU.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ChVaKjO9yb6V3JbUkN3u13FE%2FexjzACbxz2fkfbURS9oc3pt2aGTG7%2Bw%2FhvepBTPdsaBKDALdcsr%2FeweEOJpuV6HZCt%2FEfhMR2nMuZU7uAxmZ35Vt%2FaQKUSLst4wlB9Bby5DDRUnBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"6397c89cc341eda63320402cdad8d1aa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea7bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80112,"size_decoded":80967,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x998, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d9a93e2acfb7e135db00b3d0b450dff1","sha1":"1af4d901dc18cf0f33612a1b780fd09cfa9c96cd","sha256":"1cad848d5fb8bba51d96974515d64c2fa30ecd37362d6a632d1f3c52899b9268","sha512":"acb416eb7ea76c875364922d3dd92c9d18cdf08ca07405ca9e610a6e0d424b98515cc44cc46ea239ffec83115352b3dff910a08fb32e936e7497feec4196c225","ssdeep":"1536:hSN4sTjq9CpMuYE1MvCeIqvAMEdugEuWtTDUc6WVk9e:0NjVWvCKNUchVSe","tlshash":"58731263906d38cb1285c5726c286babef44d5900b622356dbdcc5519cc7dc8c95b2bd","first_seen":"2026-03-28T01:48:10.027063Z","last_seen":"2026-08-15T18:37:57.104696Z","times_seen":23,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/fY0o4lyS2nPEOckFy5Z7vyrBrU77xp9KwOzqFVu4.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.924Z","timestamp":1786819045924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/fY0o4lyS2nPEOckFy5Z7vyrBrU77xp9KwOzqFVu4.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZOzQTzPy%2FKAnq00qw6zik%2FsQ8svHgrNLCQlMYo%2Fc9FnIgChAp%2FTj5N3fPjXs4%2F%2Bjw29CoT9L9yBPP4V5I9xWNnjyQquvw%2F%2F%2FZv%2BeuIOJmtj4E235%2Bg%2FmOEK888HnqxtvIpWHPA%2BAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"02a24543ee888b3ddd5a996dc5fa7160\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d0a8eb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18150,"size_decoded":19019,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"001f23d77011ef77e597e06264bc33af","sha1":"46d1cd5a69e8d152b1a6a0be199945ec22f50193","sha256":"e35d47b9c443e734878e1c2ae5145d13bf9341ae85d68e4a84b598481d303dff","sha512":"da40d5e240e9fbdd590f0a7cc3131093d5d9265ac782245aa275aee52e88bb405e4b8df8153ac04ad41973a757998bb21c88223e410a39075ff9086c1b331a97","ssdeep":"384:JZ3ffK0gkfR59F38EPHnoZmU3h94UENDUPrPkDhb:/PkkZ59NVfoZz4UUDUjPkVb","tlshash":"d482d01bd19e04ec385608aa719abcd2f5b15a8411303ad7efa28673bda5d0463f343a","first_seen":"2024-08-20T09:08:44.263062Z","last_seen":"2026-08-17T11:56:32.895424Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/H8QqalSXVx6ebocJwpEvydbcesNNa1VV5qDhtBpK.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.926Z","timestamp":1786819045926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/H8QqalSXVx6ebocJwpEvydbcesNNa1VV5qDhtBpK.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BaAJ8Fj%2FCwQEIxjeEenMjV79Fuof2VIfk3Wnoa09tQWlLm%2Fu3v6aiZb%2BrZYTQHRQ8P%2FMcllEk91qzeN1wXNmcbJP1wkT4blDZZkMUAaGhM8s7JbnDncbjgdQVhMGhb2HCvsgD08KQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"d01cd24cf3e5de80d64c6a123061c344\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d0a94b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6832,"size_decoded":3371,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd9b73142d12d3bb66753646e8d91b0","sha1":"3f371f00f3c8ded1a86278815376762b3bba226c","sha256":"d881fc37de90e76aebab1a7c94aec5f3be78d6d1ec70e0c25c22dd15467cba3d","sha512":"283873748ba4ac0cccd3c5e5e4b8cf1d7384bae1a3f075c5c9bc3a64f5e861fff315d51e1c8c05c5aa2233e62f96165f26982acfb4d2a6c7568d7a2177c584d9","ssdeep":"96:6R81l2k/ol19CSCU/724gbgy2ddh240um3xmWfOnAi6GfqEv5tJgSJKPrgtm0oCg:X1bolR/a4uYo7KAil7BzV+XHt+s","tlshash":"12e1262b03168bddba9d4668ec59148e7294c8cbe4f0e1d0bb4b1415e4cc4e9be5c7ed","first_seen":"2026-03-30T18:40:21.655536Z","last_seen":"2026-08-15T18:37:57.105673Z","times_seen":43,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/DY5K8SA0TxhoQ88E66HUI4ApHKP64bnME7OzdVRb.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.928Z","timestamp":1786819045928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/DY5K8SA0TxhoQ88E66HUI4ApHKP64bnME7OzdVRb.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuO234nsmc4NSGy%2FXWDi5OSC%2B%2F74MMGOjTw6HgXm5tHiHz9CoUY34nZCBh3AYWutq79QcqQJodMdDvY1kmjjnNwhPxc0pOC4e3MOs5Yopeg4708ejUGZYX4Ree8G7WK3itwCmO2uzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"de1b762ff08ffec938f002024c94e93c\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d0a95b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8831,"size_decoded":4570,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6e37fcae530722d615dd64c63415dea","sha1":"fd58fc21e8bf07418036e04cb2af492e598d3c03","sha256":"867d88dd62e26b2a001f12c2785e8c14baf72db0ad5d15597be9c9835177a6b7","sha512":"ab7f8dd7609fd7b3ca9185d9745fb854688e3f3ea25b6efbaed10b5b08bac308e4b56a5c96b40e349538b23f054edef74667c8255d0c779d188fcdf08888475a","ssdeep":"192:cHH+LF/85vd+AO+SirQj3TLeyFyQNcdz27LdovLWJ:cHH+Z/i1+AbSirQ/LeyrNqit4LWJ","tlshash":"6e0297da675093ec55ceca4fdf3298a8631fa0fdfa7299c1c99e9b9850c74c4f206940","first_seen":"2026-03-28T01:48:10.076543Z","last_seen":"2026-08-15T18:37:57.106276Z","times_seen":44,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/Y2Tx84n25CNf5Xc7UQ5h3zyrfbut2QPPmzmFu7L3.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.951Z","timestamp":1786819045951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/Y2Tx84n25CNf5Xc7UQ5h3zyrfbut2QPPmzmFu7L3.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8X0z6zO7SiOMSfFmBbtzmSnEmC7sv8iHKmw92qVH41%2BF7n4TYVRAulAmWniCYH7UnpAEtn7Wf71a9IJMdJfzhegC8xmFU8axP97t%2F2Hp0ExP%2Babn2Q7jv84X4JfR%2BAryyf7lnh8UA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"692b81065541b4a29599d70a30b9d748\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d2aacb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31060,"size_decoded":31910,"mime_type":"image/png","magic":"PNG image data, 2000 x 945, 8-bit colormap, non-interlaced","md5":"8fb16ba40dd26eab3ce8ca212013b58e","sha1":"0007807e9d5f15889ff23d726e7e57c57e793a76","sha256":"fc2d582883777b94a6a8ad1abb7e21e4db206771eb7f9a249c60eba35a9396c2","sha512":"356b0f7672da4cb70b527539e5c6b47f2e4e2d4940ab2f73245e5683dadd41072222b74c10deb3e2d4fabb67a05029176b31111a9557cb6a54d0530bd1db1baa","ssdeep":"768:gEx3AdzowvQ/ZiMoye6ZVnj8G4+asDcnKOdmXTu5h1U:Xx3Adz3Y/sLye6ZVj8G4+u395hq","tlshash":"76d2e0bf55e9927abe30a1cad2fd448e8d06e0093d734a931c73d43d81e652c5eaf648","first_seen":"2025-12-19T11:57:24.569432Z","last_seen":"2026-08-17T11:56:32.96001Z","times_seen":49,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/uTZHeNVmoRisLRabS3YfJudLP2bVtEqn1blSdxpC.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.886Z","timestamp":1786819045886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/uTZHeNVmoRisLRabS3YfJudLP2bVtEqn1blSdxpC.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcbvEZBYIbpDOcAnCkNcdLPMP9yX9EEAv%2Biagr%2B7Ip6ODTxFZzGXkfkAUMoiuRknD04tygWIJ3h0w5HhA%2ByCVjsHqDu74dnS4cOWnlycmTFkBW9bgtE6nk%2ByVlIlNWdvCuVW8nMYaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"fcac3b42fe572a586be4df52d094c214\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cca69b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18404,"size_decoded":19255,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cce65bb9b06f115f449794e470e81ace","sha1":"56ffc02c960d27757eb9e50a882cb70ba1887076","sha256":"86e2bd1288eaca23a59b9fcea8c13a4830c2bd841510b6797cb3975014f4e23d","sha512":"59859f96d6e1dc13cc1b04604afbd1f14e29340ad85947263f68db41ae17e8f48ab7df24cb2bed6f0b915171aef7d74cb2942d4f8929217e3c82187723d14d1a","ssdeep":"384:iwHV3depDOCoDgRxEhCSorgVYwGDHdQchbHaE6oN9MBb+5G:THVcpDd2gRxyCSoMVYwGD9QCafoN9MB3","tlshash":"2682d0adf37718a9f2c8a5776474e82f222cd669fe17c32d2076a0361787a5111703eb","first_seen":"2026-04-19T12:29:10.633644Z","last_seen":"2026-08-15T18:37:57.107988Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/JHs8v66pFhoodmud04Thz5ZVQma2LshPESpjjkm1.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.888Z","timestamp":1786819045888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/JHs8v66pFhoodmud04Thz5ZVQma2LshPESpjjkm1.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAKGnusoAkUm%2Fgbm%2FVLh62b88CAlx%2FXnzWtBWrUSWccHjJXZXi4ay%2BIA8Yp8yzxR79oqwuRLgQQxLPQfowFNMg8bPPt2KiknmQoyvIuFux1kL4bwJDnith4QN8%2BKBPTcvTsAQF0Z%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"f3752381a5634700e13890d44976eea9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cca6bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12142,"size_decoded":12997,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d4fca2e71d2803d96917ef07101e33e","sha1":"92ef53bb765ad53a18e88070c9a0fa84b03da42f","sha256":"386c3afe6181d1eb350d4b5a281f520374e76dbd5f2235436a9b678ebee7412e","sha512":"999514720e0f11e5e3b15ff1eb9bae42dbb17b2a558452853c1b08d4a2a8b2b74e74815f666d9376c8af9d4d44c8272ef060acd4b2614c8628147fd139dab1a7","ssdeep":"192:Y49Tlb2fj6bKtjUpGZHqxZQrvEGc+lxf1hxw9DlT8WDm24sc+C6SaE5aCj:Dlb2fdOpi4ZQr8f+lxr+Dl9Oa","tlshash":"1e42bf0236bbbedecb4adb382de1204d54565c0ef4e554c75a25a4a0176ffb67c22026","first_seen":"2026-08-08T02:31:25.099214Z","last_seen":"2026-08-15T18:37:57.108548Z","times_seen":8,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/CxJeAkDzOFQ2b429ifNjLCrlVMHnEV1UVCJHXNTg.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.905Z","timestamp":1786819045905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/CxJeAkDzOFQ2b429ifNjLCrlVMHnEV1UVCJHXNTg.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbNjEMRs3Jowt432kDQWVr5PmsfXO%2BCbh7Zcy0qkBFSNyzbh21Cdd94gOeDq2snqmKbCCeh%2BJrElnmHuG%2BgsPTCzxoIXb68F1%2BnYpdATRK3Pjw4fmqcgCze75bw2gkJiy25wNdF%2BPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"443ccf2759e82411da8316082f4d80a1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea7ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16026,"size_decoded":16881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6cabb0cef0b6c1128b6ef0f0c194a4ab","sha1":"58fceac78c16c122bbaddfb418541147ee61dc35","sha256":"4fee6f280f3619ea6d4de73d593f66121630513fcc115b3c39a1ad3b9772759f","sha512":"369ab6b749d94691516da095888a249f30476b48bb6454d4a70884fd6a37d1ddcaa28a30457ec4544093e6944730cb1ec2cf0ff5c560eca32eb12f3a3bb4e046","ssdeep":"384:3mjCi0mSok2dT9rBHmp0wK7FlwLO8SuVwXb4C1TyYM1y0y2PJ97r2:3oCi0Rb2dT9+0wK3wLO8JIb5zM1hh/7r","tlshash":"4e72d0d0215927d68b63717d039ee42448b9179ebc931e0990ccc36e5aca26c7ef64d8","first_seen":"2026-03-30T18:40:21.69264Z","last_seen":"2026-08-15T18:37:57.109089Z","times_seen":12,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/6kVovnKnBwcGbOgIygZlvHGE8gpYopqXErHmI5Cd.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.916Z","timestamp":1786819045916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/6kVovnKnBwcGbOgIygZlvHGE8gpYopqXErHmI5Cd.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbbr2ojLhLcN9pxPeKWPCxpCNSsfaojVxMfDBIWgh5xD65JmQnEss0%2FPziX%2BaGLCwhnQ9HhkWzmSMjVwkSyyFppz35QXaLUqYsb0eJmdVKjJKhxkmeMi0tKfPj1Pkr5ZXQYowygydw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"df79800b1386bdd48a7e045c17fa1a7e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa85b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17956,"size_decoded":18803,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98ebfb0c536aa65a24498ec68a487d83","sha1":"a38cfeb5bef71de7816557f1236497b40f6d3a23","sha256":"c388f3861941b1f86a08d26014c699998ec2379413e2d39c4e23bc27eb37ea06","sha512":"5d4a9856c9843140bbd723827dfb87bdc6dc471f1db2d93e21db9c9d5ff65e39361bdc7eeb27ee3074f3ab204a7733eb38f590b89864a050906a1f56fe68be46","ssdeep":"384:sdd0V3JFD93FkrghVx+Vpx0RgiNq1AzaV/0tAckm0ggtmDiRias1bjVE:sdd0V3JSrcIxgVNTK/0tRkmDgXRrz","tlshash":"0d82d0dbd32726269bce41c35969d3cdc1d0cf20252d5e4c4faf8b83e500662d4a5a9b","first_seen":"2025-06-23T14:09:15.134961Z","last_seen":"2026-08-15T18:37:57.109577Z","times_seen":40,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/KdUI2ws60hODhQ5yCCEcCiIIlo2BcvLgMHuIR0sM.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.918Z","timestamp":1786819045918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/KdUI2ws60hODhQ5yCCEcCiIIlo2BcvLgMHuIR0sM.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKMa6vC7ae7IyrgOmWJ9VAjtHkfy6JOwpfc%2Bw7tRVAdI9HxZi3KBqtNFDvJLkzRVA2njCm%2F5jKmwqqLBOOnaN78k1ksdofIFR2Oh1B6yY13ncMKQUD6QuRTW3PJUSQFMGsOuNSqdzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"97b6ed793eec49115260439eed6d6aad\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa89b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49816,"size_decoded":50663,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x998, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"458ecea0ed37602de0e22308fa315a91","sha1":"1de582694c4d9466afee58f64f7b0c10a0ff803b","sha256":"585a140756e00b9d81fb48e311497f367ea07d756e63704588587a95f2c737ec","sha512":"1de53572d634df92b3339cf75b77c57ec8b216e7e7de7e4808f1103dd18e83b18a68edfccbdf5ce14755388f1fdac87597ca4850263ba47d5a7d14cd808ca1c1","ssdeep":"768:gRoq+DNyln2YP3jhojwq/zivocufpDUcaSpes9dksNJw5pxpZYfw9pAoNVwctJ/r:IoijXq/ziQc0DU7SpZ9dkszpzcectJ/r","tlshash":"ed2302bb142037eeb7457293d89b7ab075b70ed433effd4988f27c9605681a0b44a0a5","first_seen":"2026-03-30T18:40:21.689554Z","last_seen":"2026-08-17T11:56:32.878739Z","times_seen":18,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/LYuDZhsWPILudfAe11ZdUOk1uPcZ2vG86bmdEkFQ.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.934Z","timestamp":1786819045934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/LYuDZhsWPILudfAe11ZdUOk1uPcZ2vG86bmdEkFQ.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVCL9cDPFYRB%2Bm4QAvhD77RKf6695AM9981%2BTmkYCH4kq75M0pFf8r5NE2PiFugq3HXBbcg5Jh3ExUO4BWSLQ9rZWOaL36unM3dnNL2koL9%2FkWYPyQy76PAn1X3vBOpoJVU7d3nKcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"ad6cffd796e3c2aacec787108a23dcdc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d1a9bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63428,"size_decoded":64276,"mime_type":"image/png","magic":"PNG image data, 496 x 503, 8-bit/color RGBA, non-interlaced","md5":"a33029ffa63c87591d49d8bef81f070f","sha1":"f75495d74a8585079c2bb1cfb3ad219c7c23332a","sha256":"3a24738455995c3c76b42f0afc15ce514119ef5778e62e384523ee3df8b7a64a","sha512":"5129744098dd2a56e17f0c8272c4a5dfebdca21808f1c0796d05dc90a103b0244fe379209c5f2309e6c358edaefa910dd12e048dd981d70759b77e4540141d3d","ssdeep":"1536:G+uEc+cZDskhoqCTCZ+2eOf8Q5ZmWPoKAiwZeN:G+u3ZhRCTfT05Z16eN","tlshash":"7453f1675fd086135e4bd043a752c84ae72388e3d2b03aba335967768f1d207096abd7","first_seen":"2026-03-28T01:48:10.03239Z","last_seen":"2026-08-17T11:56:32.9258Z","times_seen":64,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/8p6AoEi5OmYciFLg0sGekWmtrC2OalFweJJaoyLW.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.904Z","timestamp":1786819045904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/8p6AoEi5OmYciFLg0sGekWmtrC2OalFweJJaoyLW.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7bj%2Bn3hWAOhV6i2tL%2FeKs4nQ0gI5Sb0fFCpSbV2CfvdI9CTrBHB0i4GDU73luy9EMw2iktMOiI5QxLoaQdE0ZB5LvM2HbreWGYs24OqACDJAkhFQS4kayHCKWVsoFVSFnBgLIjMsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"b7468f7df81f63ec3e60fb27d67218b7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea79b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24440,"size_decoded":25287,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47bc89edaa6432bb7cd102dc4dcde961","sha1":"778974770e4eba24ff75824b3f2152dab2112776","sha256":"902dafc8cb00aa99514959a09e657e4b0c67e934d1ce89401d42174b643cf14d","sha512":"320174803be88ab306b5a8542eb17aea0ad26f50fb5eaea6cae24520907972e87fb3a8ecc0cf7c9a404c4cf10d45a1cddac62577dc86de6925bfee5eee4ac6ec","ssdeep":"384:DZ5yB8tZZHZ81auQp82TzaVOdQ1EuU+BserRITIl8eF8p3HMLy0d:DD4yHZuQp82TzaVOd9G6veoM7d","tlshash":"42b2e195a937a68dd236e2a019154f28920ebc8743e10714a072bea3c7a0fb039b497c","first_seen":"2026-04-14T04:05:49.21903Z","last_seen":"2026-08-15T18:37:57.11132Z","times_seen":15,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/2N0paLWofcZoiSXzQUvuHVISgJNOyPGxqIwTxDtS.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.907Z","timestamp":1786819045907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/2N0paLWofcZoiSXzQUvuHVISgJNOyPGxqIwTxDtS.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1GTC1AKRaZQxv85D2GyVN0DbU%2FVpOJgt23Yc8MokI0%2BnR5Mvrf4p8%2FFQg0rrGhbF3TMUp90wzX1bZ8wCLSfo15xpHPHNJuf7raknqdZu%2F%2ByZvyM5Niy4CAtJVP7qMHpUMwGiFcptXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"84d7d79ec4c79d5df90ecc5d9d08945b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea7cb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27194,"size_decoded":28047,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4ff1e35b1bfe7e3e61409c37a4b316d7","sha1":"3de41071d6ec955db86db621d92ab9fe2393a8f9","sha256":"9c02589e068df735dee82f3181d32ca7435a4040ee3f76c04090ed2eb5e81563","sha512":"67a7c4300a559fb6facb53551ba58fdd54eb8c6c87de3b7c69ffc72a4fec56f37fb9c80f1095c542156c0f6b9ea79201a185cc4c71b1e32c74cf44c4c05aa525","ssdeep":"768:o/7RCWtRqrK/tPX7YduQsU6pq/lfeipZwo5:o/1tRq8jeddzF","tlshash":"56c2e15ed9b5105c7bf4a4aa803f93b238092855e3b0472b4d47637c567ace78bdec0a","first_seen":"2025-06-23T14:09:15.137792Z","last_seen":"2026-08-15T18:37:57.111843Z","times_seen":51,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/KZhVDeAE2E3uA3mRSUGTad1rLE9wAmoQvsG6MwyC.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.913Z","timestamp":1786819045913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/KZhVDeAE2E3uA3mRSUGTad1rLE9wAmoQvsG6MwyC.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDhxx4SMrgeJBptXv24Rrd1P5f0mebneFZ8ron0SWFiRVO3aYQ%2BhQ62gdNGqP0J9MKKj92H2%2BaybA%2FRrbtDDKHNIdZ1yZBIhqQ2owWEUKNMhedIl1L%2BTOjaquZeRAyy1GzlAevxC7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"48a763fb36dc95420fc4bf4a840278d5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea82b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32120,"size_decoded":32971,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 440x588, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db7cd808884231359be789194eeef554","sha1":"422af0ad386111710b28308a7c6812641f8899c0","sha256":"1ceda60a8218396bc5f546eb2ee7a0c8bf90e2f0ee65a852391d597c715b7db4","sha512":"cbe5d5431ff5b63459f1a8f3ea934abb381ee4f355219432637d4702a5467a576bf8d3a3d57da5fdb6e58efbc4d62ee5081bbf1e92d287b99a78cc044a50ad59","ssdeep":"768:f1R1w2j+CL/tcsZTY9pt0sR+wITrT/1LemA:fVw2jrbjstXtITgmA","tlshash":"25e2f26d4b7bd2207b492409bbf0f506875bdb480de37b451c18147ae425b05df158fa","first_seen":"2026-03-30T18:40:21.658059Z","last_seen":"2026-08-17T11:56:32.940556Z","times_seen":15,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/YFp3tpOcCgOTkYPUFrxQZ17I0bTeNy3wpn4TUOz7.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.944Z","timestamp":1786819045944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/YFp3tpOcCgOTkYPUFrxQZ17I0bTeNy3wpn4TUOz7.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hB%2BuTiDRVtumEwTb6kQ%2Fiwov64b8ytRypvldF3fsM3h5SJme8dNiQI0%2B11tuf4R5xEOCjh%2BKvT7n1x78ra%2Fqvr7IZZjWBP2QIzjNDengLb7WEHekesweUDZyLdh0Nn7jI4fps1ExAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"7881109c70cca96634c54f5b41eb13f3\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aa4b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21664,"size_decoded":8889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a231b0a8892f48e6feb968d5a1b03079","sha1":"2d8740da779abc91daa60b70f401b0d5e0910f80","sha256":"37435cb5c68a6def0c483c5df7fe9c17d8d726053c29ea5089bf8f97723340b1","sha512":"1ed69bfba60d6306c61148e768d0d7977f064487789f615b749f59e0d63c4bf8adb4a11e7a40353da8a4317d6e8d81055ef06f38873ec866a49c6bb16f6e66b5","ssdeep":"384:cfeeGEtSm4nsiqSErZj8NxbmoVgym2GsFK3KebjjZvnshl4r+869748FL82rrWZ0:cm/EtrTiqlvQxm2xFK3tbhg4r+869kSN","tlshash":"64a208d663f463bcf1c9d68d9423401a3dea34f73a91da9cf28dab155b238e5090d893","first_seen":"2026-04-09T07:56:51.859839Z","last_seen":"2026-08-15T18:37:57.114244Z","times_seen":44,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/css/style.min.css","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.854Z","timestamp":1786819045854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /css/style.min.css HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lnVHKsR5uQzJFTO%2BpNk%2FkI%2F0yD9scKgn5Rj6qymdytTIy3pEpWjFn5bOqjKT1hJp19BmsYnXJ0ZcHxmHJYcYNZfO7%2BzFQrtEOjKoIehjghonYrSmdfrT36sRNvaEBkxeDqcgI0eoqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"91d268dc5e9e24ddc6285ca226e79edc\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7c9a57b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33768,"size_decoded":7180,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (33767), with no line terminators","md5":"5827e96d47dc2a21283e269b1ec9477f","sha1":"3048fe1b6c43e34f8a45129bb462e8feb69130d8","sha256":"3f37d4ee0cfaa4c205ee32309fd54ccced77c9e1e4c91e71719fbcb2fdddf072","sha512":"7353e5786d5c1891c785fe21ac9a8e775ed8464a56e007df7ed01a62d6181928db8e9f05e2eb982c873630997dae79ce7ed8726d9895653bc619bf3787f26e45","ssdeep":"192:M7sIliUNUtQUAVK0/iBdiLB/VpvFw0ErHV5v5PvOPA4frHOMvU/AZyuc4aEz1f0u:cuuNPFw0cte/rHOMrRfXX05ha","tlshash":"85e2957a222437acb637da35e2d899497134e013d6230adee446d319c7c7fa216b1bcd","first_seen":"2026-03-28T01:48:10.079457Z","last_seen":"2026-08-15T18:37:57.114909Z","times_seen":37,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/fClMtErFHIfzFgFE4e9gAj1HQotDObIsqNOPxQLh.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.923Z","timestamp":1786819045923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/fClMtErFHIfzFgFE4e9gAj1HQotDObIsqNOPxQLh.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUdl%2BBrb9sIMJ3Ztuyv9s9q6vz1PjIlt53IlT1D%2F3UO061nUvILbbWoQZHY2w%2BgSzJmZT3oy9qlysh8FBqEbLzfqtHARNELc2PRuqRcobrWrtF7%2ByE4IOuGYOG4TBHuNB%2BOn0iwv%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"6e6121a293193e095a789563e6ca2164\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa8db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16992\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16992,"size_decoded":17847,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7db6f2eaf14cbc9147547797b51fa762","sha1":"5806e925d34edfaabb3c13bb889c35c6bdd0956d","sha256":"d661da89eed7e1bf4613ba936ae3dc640fa4c09355a8db3f7aee20cc14237af5","sha512":"6f9bc74dfc6436c56cc24a4487b84cf39007ab6cad248a54b7788dcf1b686fcdd5d5ffd586e2b3b00e877b21f1fb60274700dd0a7deb0fb0eff59352217e91fb","ssdeep":"384:3jG4J44qCSoYQ4ZhamBV+YpNRPKG0v5DBmC4QrGbp7rE/kHv:3ikqDoCiaLpnPK57LrsprQ8v","tlshash":"ed72cf8c32e71f9f6915cd3e4b9e02f674b51ed088571b8286be1b1092f20446f8ef58","first_seen":"2026-03-28T01:48:10.014397Z","last_seen":"2026-08-17T11:56:32.932606Z","times_seen":25,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/arv7pOQpapsDRcSCsZnNxqGRC5GgHONu7DIioNUp.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.931Z","timestamp":1786819045931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/arv7pOQpapsDRcSCsZnNxqGRC5GgHONu7DIioNUp.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6L%2FnbNt3VenOmxn9wB4xOAlLoK9193y8r72mIfBKo6%2BVbHsmr078CTfq7CvH%2FqWmgVN2ccEWt2wt7NQhb3fQxtqJ0js%2BTG%2FZNRrBCduFw0dCVgqx3LV23RehTYc%2BCInflb58tzYMEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"4288d7bdeaf7a6e4bcdf16753f91ad78\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d0a97b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2962,"size_decoded":2013,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1f246305992ce6f074dca618893bf50","sha1":"c9179a25799b3d4ba45c3e673716b6eca339a4af","sha256":"47e1be924896177a2f80ef9a4b5326b514556f9aa36200d499799bb784ca4a34","sha512":"c788f697f5337cf42504a3feaed3497707efda801928fa64084bf46d0fc60b49dbe13e363ec8a169ff48b384ecc7c0aced35fc6641d48e2802fd74a443a23a9e","ssdeep":"","tlshash":"9f5185d4231c8164e758c7fe8fbf91b9285ac4ed95c08d49f5a00f1ae2a048c5c83ee7","first_seen":"2026-03-28T01:48:10.120495Z","last_seen":"2026-08-17T11:56:32.86769Z","times_seen":67,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/ocrETjlt8j6UOkO8Jie7n8BSTtKnAcaOhhsrOquA.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.942Z","timestamp":1786819045942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/ocrETjlt8j6UOkO8Jie7n8BSTtKnAcaOhhsrOquA.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhwIDUPjNTFaLsdMIQve5%2ByHIMlqXMhT08ccdaFlcmIlb4BfqIpD%2BQIQ41%2BHgPpS1vkcEP9sqeeCg6K9AMTa66zu5ax7afOj4QK5GtQgjtm1OOUbN6o1v%2BSHkGozAVZMEsVQMnIY%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"808c08ea78b0f153695dfd2e293500ef\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aa1b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12219,"size_decoded":5674,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2baf7439b4699b388cc960d24ff62ccb","sha1":"067ecbd57d8520c2cc9cd98912fb0c1bebef33c9","sha256":"746e87e5e5110ce1ddf4b3b957a65db1b622f205f75eadd866243e90815fad8a","sha512":"7ea32321bc6409809c9522e6ec179235058a2292579bf2314eb75efc1991c21b553ab9a5a4346c16d985fc86e0ea87e8d67eb1e4376172791ac26e3594ea5984","ssdeep":"192:RURi1FMoW3hznz4a1LaX2ZC2oegMEcY90GxavWOjgI+7SmaG:KRizGRbp1LaX2/oegZcY93avWs9+7Sm1","tlshash":"f242d7d113fc12fdfa4407a9a966989bbcf930b3b590075cf18dfe949b510e5880d853","first_seen":"2026-04-09T07:56:51.835618Z","last_seen":"2026-08-15T18:37:57.11665Z","times_seen":43,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/fVIGJN75yhexHq9DXxAAlIJIiE9WrT56JPvkz8gn.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.880Z","timestamp":1786819045880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/fVIGJN75yhexHq9DXxAAlIJIiE9WrT56JPvkz8gn.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5F3mrZK4vF%2Fn13QcUXn53isxw59betXwo1OTbcaN6irG1rQ%2FpwRQ9eA%2BGs8np2KLMk7OFv%2FBBeXJegZVLNT6v26etNRmh2VSVUvaqpnMYVuUOrpLEHYkUZwHX2VaP0yNyuvj3fwRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"7fa35f0c3013ae240b82de94e55f5a20\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cba62b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30092\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30092,"size_decoded":30943,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db769d42ab19bfcc6b4a345b3c53025d","sha1":"ebedb2d392dc909228c01f9cbf108c193e86b30b","sha256":"74c0401bf65cb1dcbf2d591f9010cde2c62afc6cc2e41f2f6765a3ecc93628c3","sha512":"468c8cde4ac918adb8325928f2f4e32ac878e4937d635b239ea4ced4179effabb1b6a674431db20aad1f479314bc9f2712bff37c5a143d738876121a014d6a56","ssdeep":"768:wsfi+GOZxZ+Cpy7vJv61EbJAsZjvUpEmSf8:7fFzUC1Eb+47CE","tlshash":"f7d2f11f67c4ac4ac5fc4ab64bdc6c9d96c2724e5c48529702b1db15ee32b0cc60eb9a","first_seen":"2026-03-28T01:48:09.986587Z","last_seen":"2026-08-15T18:37:57.117802Z","times_seen":23,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/jXqBopT6G1gLUYKtkVCCSzaAcGhl4Qn3EBRe5o7X.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.898Z","timestamp":1786819045898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/jXqBopT6G1gLUYKtkVCCSzaAcGhl4Qn3EBRe5o7X.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pb6KO1oWF0hmw9xlGukVOwH1ZiLHoqkx%2FfYlZ%2FKKS0b%2Fe335o%2B0Si1vfPD%2BivvI4BnzMX9dl%2FPo8jbtqkFGpLQriepXlyQW4hwf0805OOiNtbFe8DYcioYljVucBPOXeiqw9Wv9mJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"373aed0bd801292c6e3164c0ad88f9b7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cda74b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19868,"size_decoded":20723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c5fa38b03e7b4fc245ad6348c1dba1a5","sha1":"e3f60b889d14d1ede9c9827c81e89fae8a8b3227","sha256":"356e13f30c1c9f3ff8a21132af757df1e78ba8876f16c30e39155b67333c2562","sha512":"4b96b9c3d816082c8ab057f04647636eb822e24a426355dc26353796a4f78e8ba175025143cf969673963c5443676551f831fd8ab7f2276ed2804810d99a1899","ssdeep":"384:WjLS5kuivyAYeMberpDfn8f59dFbWYGIhHPOPlPAwVd6ONxR+Ayd5ePNdVUxflM8:GGZipYesmpTnindFaRI1WvVdP9c5ePtB","tlshash":"f392d03909c86ac39070c9b7fc4d10d9b5355b169b2c90cf7820e6d5e111c6ee6a2dbe","first_seen":"2026-04-19T12:29:10.632804Z","last_seen":"2026-08-15T18:37:57.118747Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/RYdGZHFoWrl1dS7f8BLy4DLrKlMB2dsXIkKSqsFA.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.922Z","timestamp":1786819045922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/RYdGZHFoWrl1dS7f8BLy4DLrKlMB2dsXIkKSqsFA.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujOGl%2B9e5K2gb3rLKyyu6FvLBgp5pS8tyfd9U3kJZEcO3IUfsz0Qs5Bd%2BhQW6cJ6A0aZ6UdHxP5kKLykuXI34K2b9HNScHR%2BdnWwsEY%2BeuLjgS3Pwgx%2F335DfPAsX7vJVkEqwZEmFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"e8eb25315249eff7632bcd9f34c5ee71\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa8cb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23804\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23804,"size_decoded":24657,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 350x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"077947ab76dced0fcdeda485ee430b28","sha1":"0647cf80618b076668c104c70bf37b33dca9d204","sha256":"6785a40d11b8fdefadf3ef46c62dce64647f42e1cb3c6783f4e74bbb34882c71","sha512":"65ede924972ca1637b23fa3ad0010585222166f051a13ab42d6d4e3294a3e2ba626503dc0cea1a19e2b6b272f7a88e50ae7d9c0b100b83a9acc8060ede8b1bd5","ssdeep":"384:fJgEDIBj4EBfWhMdRH/suI0FLaF+F8s3HVAmr5ArH8NRGbyVOecmLYoxoix7EKL6:2GIBlfyMdRfRFl6s3HVAIaH8NsG/BLYb","tlshash":"c1b2d0f9b14704a8eadbfff703779800b7269b8170fa56b0018917fa962754607e507b","first_seen":"2026-04-24T23:22:41.979413Z","last_seen":"2026-08-17T11:56:32.942195Z","times_seen":21,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/d5NNLnOFC2xP22Q9632uEtESocnV5BMsrFTkKOip.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.925Z","timestamp":1786819045925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/d5NNLnOFC2xP22Q9632uEtESocnV5BMsrFTkKOip.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0EHIaLdHKdJNOx2%2B4jLxELpDn4rU9uMZm3trta8M%2FWKCmED%2B6RCHUcmaCdbjJp4g1sSIeG2tyE3QL7gagHy2w3OuLazJWl7biDA2qBqM1ASl7LpFLNuBrQ%2BvIz2%2Bf3dnPE8%2B%2Fqrpuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"42cb5bf7e5f7f7ad663ac52534e5779d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d0a8fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18544,"size_decoded":19401,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 239x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"313438c164d81f2f44cd9d4b5df337a1","sha1":"2b17bc19acc6695c009eea642ef01a0f50a2aac3","sha256":"b800ab2730ccb460c371d170fbbae66fa870385c72484d81b98eeeab1cde63b2","sha512":"af13efc2af685ef57274fd71b0e180a558babefecb5b1a3fed6ed4b30834a9eb0f81c508e66d4acc1df1ab4eac0b7094f572b301e337f359672a67434128872f","ssdeep":"384:M7Tlle/Cd30EPpTo3yelZ+ZODcbQXwF+JXvxbID10J:M/lQSLPpU3yelZCIcbGwF+JXvt","tlshash":"0682d052bcea90aaabcd25adb34af31d477074bdcce308855f903bd35d106172f64184","first_seen":"2026-03-28T01:48:10.110484Z","last_seen":"2026-08-17T11:56:32.870972Z","times_seen":21,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/WH6ewR8exQdcUzGTiCmKj4y2KB2BkuzyPlnexD0F.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.933Z","timestamp":1786819045933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/WH6ewR8exQdcUzGTiCmKj4y2KB2BkuzyPlnexD0F.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19t%2BJjnUMrMWuBoMJyK6f8ktmPnPJMyMBH6R8q%2F84vqP%2BNp%2BCatz61aAmwGu%2Fo916LjKJDduHQADUVy%2FObFMOVlAxmR1Gwt3HvyB82Wu%2B68yqcshnxpCoFPX4P4BsUKaXGGBiPKYTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"f3dbc5341c9101a865a7df02537cea8c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d1a9ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70138,"size_decoded":70994,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"6e1b9b7cba1c800d0abae75ff385b993","sha1":"7de127d44193acb6e7b512aa95c080529f1eb828","sha256":"ea77c3a8d3dd6634113a162fed3567ee5812b583098e3b67abc257f48d2d4681","sha512":"427687264bf4b88c98b6b645390800f4c6904b767ccd70b4a2d2d84ebc0503d3ed5b9ddf29d227e0cfba8bac850d28063632c8647d20d552827c9eb5dcf89a33","ssdeep":"1536:7Pu152OQ72Vva+E+J5IyEvVMPn2ctS8xPyTEnKKX+MjQqPlY/RqN:CD1zPEtMP2Z6KKrQqPlioN","tlshash":"93630189a2e729155b7b63c209e4335af209f954c79f3220516b684eaef327b1c48ce5","first_seen":"2026-04-24T23:22:42.018191Z","last_seen":"2026-08-15T18:37:57.121329Z","times_seen":54,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/7Bdht0aKolHuJZlP5xbNnnmfn2Dmbs6xaL8ZfBsq.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.935Z","timestamp":1786819045935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/7Bdht0aKolHuJZlP5xbNnnmfn2Dmbs6xaL8ZfBsq.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyTsdixxWD7a4VlSf5h18BdNRFXWxSB0Uxs0pzdbYfMYhCKE%2B5QEA%2F0RO6C7ZRzqi7zw9EJfbYQLd8wTm%2BidaqjCcEp2zSs1YSae1wGu5kQwyYkbxgP%2BhPSPYd7t1Q23%2B7JzcVQBbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"2b4b390c737981078fb674ee479756cf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d1a99b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 135430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135430,"size_decoded":136284,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8400e74737344087aa47bb23dec1d32","sha1":"36455020d69525f18d070bb5162d1921fc23d69f","sha256":"94c3c2c1c9ce5ca5852c18527b661e1ca3d40dbab9b5654a270d7915dc468eda","sha512":"35a29b644bbfca71dba6d92e75c21139ed70d3ab080d4a001ac37af692e762d4376d753b8317a6631eec4f27dffde9d1461d6bbe41b8fc562f70281164b1889a","ssdeep":"3072:pk3ZZ6KIkenvQ5ZEMfONb+iGdx4p0u5FWTvq0p6Q1gW+uyQ:pkpoLkenI/Bwa54x5LQ1+G","tlshash":"d1d312c402021f2f3405dab01549919bfe0e2787fc9db77b6bf4a7498b619ac4bed942","first_seen":"2025-10-15T11:30:57.602296Z","last_seen":"2026-08-17T11:56:32.855052Z","times_seen":47,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/fxhQ8iuZD3qJpkBWPTbyk7CSu8bcs3WMWcVbOvOx.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.937Z","timestamp":1786819045937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/fxhQ8iuZD3qJpkBWPTbyk7CSu8bcs3WMWcVbOvOx.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HXE9%2FH2g%2B%2BjeTC3rjkn0aS5rcjnskCHJZqEcNDWKQ6h5VV1VgIjy9WlEeJolcNmcDY5lRWfu%2BSwWEvSVfUovKr6tx8GfmpJm4K6nbRGBsfwH9%2BHqM6qLhP%2BxGluwR5N%2BapOfEC1yWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"24db0f2fe72c67deef2fd18f91a257b1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d1a9eb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65085\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65085,"size_decoded":65941,"mime_type":"image/png","magic":"PNG image data, 612 x 408, 8-bit/color RGBA, non-interlaced","md5":"ea0240edf26554f91516c1fcf8e9d49f","sha1":"0ef87288d4ac403220c174e09f953c31ce83adbd","sha256":"1efb761a797345dad34f1ae13e45a369dbb7ef73310eecbd0f0ed6939ebbc1a4","sha512":"648c26d90c736a0501952006ca1e1ec70dbce5dafaa9b03c88d2050d7a2bf767f11e2eece6d6a64cba5c6d5f831ebf2e8491a5613cb7c630aaf6e894e7cc8182","ssdeep":"1536:FPTyovDo2TXsoKy06ivPD9uceUEc5tZ3KueG9d7iPTJ1/+t:FmobTXmuiz9heUbraFG9wPTO","tlshash":"d753e08048e1ddffc987c090dafd45a1d123b2902156bf486890bdf62ac6d76f95abc3","first_seen":"2026-03-28T01:48:10.09323Z","last_seen":"2026-08-15T18:37:57.122451Z","times_seen":25,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/4nMqwosRGMLhgnFClnNihzIe1KK5bsCVp7Y675qH.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.877Z","timestamp":1786819045877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/4nMqwosRGMLhgnFClnNihzIe1KK5bsCVp7Y675qH.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeXgqSX7LIqdEKHRe2Iqd0E0kCZn0pMqMzLx2dmZx8xwiefBGaQivpLdpQWOpu%2BDTHEhl8gpecqzI79OXjrtgMgQ9kuItxVwDD5u0ci78dsAs6KePMyOpjPr6oqh%2F4eOMDW35T7LXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"11979fa7bb352805e1e315beda567d45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cba60b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4641\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4641,"size_decoded":5486,"mime_type":"image/png","magic":"PNG image data, 310 x 163, 8-bit colormap, non-interlaced","md5":"dee9ff351f5412765645868ea07b530f","sha1":"8ba8d3f8eedfafbdec41e6b480c4c9a72ad5f50a","sha256":"67a3338ed61f9a03c7e7ed02d80595020b1b521e8df6ffb80f5096d848281b5d","sha512":"33172da061ec4f81314b6cfa7a409ac4913c2bd6e698483861ac3d6e29c8c6918b615c24cf2ea02b51f4de179ed7cc108be82613a0d5fcf8ee4854de7f8c0169","ssdeep":"96:Q/5gBEbY9uZPsKopFtOs0XF6/oUrQ0ffUSuL629im:QWBEbqfK+FosNQ6sSL2sm","tlshash":"45a16ea3644e109bc87addd5a3848ddba66df60c18baff1191f0f635ca2e8c41357106","first_seen":"2026-07-22T10:05:42.130506Z","last_seen":"2026-08-15T18:37:57.123057Z","times_seen":16,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/4Lf0YpO9eRKFL7hUwaFxbRIHI7qcMNfFJ1D9T4gn.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.887Z","timestamp":1786819045887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/4Lf0YpO9eRKFL7hUwaFxbRIHI7qcMNfFJ1D9T4gn.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NvBWnfR47MXv6DyEyFuL8A9SjqVnJqd%2FxWbwgG%2F%2Fhz6WTzhdR5AMFSxNPL5hY9%2BPCVN6aBDrKSkG0jEjwr28FfO6yuW0vsP0zSOykLhioowiJgGSXQNR%2BJy4%2FS7cKwYr17mgKwnqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"d6e9b90a3c89ac8da80a791e4d1bc796\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cca6ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20896,"size_decoded":21751,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee50d6ecd2098029008984ff9261d5b7","sha1":"6b5c6d80e27d487a0a7a6be3158046c66707bd09","sha256":"a30d69065c20628b23c99d86df7b741a8856b32e5aa226be9c4c7a0bb4be7814","sha512":"9b2e56a409b7cc45665bb68757eb4eca1ce50faccbe3014fcec6691feb047a472d33395bff08e4a25c0ce971627e491b65e81798bf16593218d902190d581da0","ssdeep":"384:Z/GkmNGe6VJora/jXojJoyDUsIAsvd/ro6lRkqDscBrX3BMdi:xSgY+z2oyw5AsvF/E4J","tlshash":"f892e176a0f87533b2a57b138aba69f7ef11caeca64c50b0210a89201f6c55ad2705d9","first_seen":"2026-06-02T07:48:36.81723Z","last_seen":"2026-08-15T18:37:57.123635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/nC4fUQeeRGlLYHSzNYDc6INuPOBNpNO1Li81HtT6.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.892Z","timestamp":1786819045892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/nC4fUQeeRGlLYHSzNYDc6INuPOBNpNO1Li81HtT6.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlSB8SquVYklffyx6aFKkl0wWOl18HQV%2FJ5l79hcwq2DxPJxof8%2FaVF2B%2B18aguPTtVPDY%2FLy%2BRFbNh2WjCKSr0UoccDDtDpU3TDx8ZImEleYC%2B52IAEvaO%2Ft5i6I%2FllcyQwxaqvMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"4e3413c3f843a9112af367edf8f6b351\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cca6eb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31678\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31678,"size_decoded":32537,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a9e7dc288e63b0440c12e7bd71ddad","sha1":"29e5ba87534170620a30f0c4a06a856f23039021","sha256":"a393198f58dd3e4fc4c84e509aaac621f50e93ccdaf4910ebb9f51a8cab24a5c","sha512":"ad874afe794781ef717b80d0b23e5112fd477f03e01964e9b55cbde22a7cfab6c8b38fa6a6e22a46cb15993cdf23fa909293ba058172dd30378e9871a4fef14a","ssdeep":"768:OQ/XNjQWKZpsxHjrsUQP2IuhuTfKSIfPUDtnEtxKNZLGi:fFjGsxHcUA2hujzWIytxFi","tlshash":"0ce202da2bdc93490287234f0cdb0df48d22af78e919be31d339c96dd5b9054a3a9497","first_seen":"2026-03-30T18:40:21.688454Z","last_seen":"2026-08-15T18:37:57.124187Z","times_seen":20,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/fmyWWmRLG80A9jxQgOCSIHHGmXrvmpJBACzVk3Bq.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.912Z","timestamp":1786819045912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/fmyWWmRLG80A9jxQgOCSIHHGmXrvmpJBACzVk3Bq.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cG5UEXCmjP1%2F7X9zdN%2F7bCYXEU5D%2B77u7Z1SKgtOnd57h4ZUY0MOrzZTWR5a6jifgBGreOTMNF%2FQ5yzC4CBYVe7ari75LW9nk9D4%2BQUXUk8qUaiRnA3mSMCkS8%2Fqmysg%2BiVpso4oNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"d29f6aa8565ed8f5b5f218d5b33d5b9a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea81b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33066\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33066,"size_decoded":33923,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dee374b77f677eadab4d55522c20cd5d","sha1":"3b0f3a645f139a39c1fba83208e8cf106653641c","sha256":"289483c407df59b9f70da2ab45a0756da192bdb42a69adb14a8f277bd3d6080d","sha512":"bc44c69c145b33fcf30fb291170c7029ab3e497c5465bf4aff5e1669b4e181c55f363a0a651b3484e63de427b8b5e8f97af339791cc05b963b3fd055389c8a21","ssdeep":"768:xUGWm0LPrMTkwKmXdbKT8w5woeVaSeuY8o1Syg:KGt0fqtPXdml7ZvDg","tlshash":"76e2f1f9a219c321fdf14af3dca0406241a2ffe374b1a1b387d95a1189972ce47613d9","first_seen":"2026-07-11T03:56:55.086223Z","last_seen":"2026-08-17T11:56:32.883272Z","times_seen":11,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/1QUarM5OSkTt1jzo6OwXqh5PjjKkNJSiN08iJdy9.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.947Z","timestamp":1786819045947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/1QUarM5OSkTt1jzo6OwXqh5PjjKkNJSiN08iJdy9.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPp0xPEcYZnOO6ENwaaCbLNdzWe8Nl3WJNAZjM51qnn%2FVa5YbvOhw6ukeMfanum43SYOTBx8JStaQSV6xP8cAINgaLQE9%2BNTxqmaWtZ3nUoL0zAPopMtwetoaGw%2FO1Y6gj09A1zDqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"3ea505301f9ef32f5d008ee1fa6a2c39\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d2aa8b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16613\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16613,"size_decoded":17461,"mime_type":"image/png","magic":"PNG image data, 2048 x 1240, 2-bit colormap, non-interlaced","md5":"f088c66f53cc628dae23ccc9da872eaa","sha1":"5c541a35ce3e2b5e4f2c7277847e9b3e26d5ab78","sha256":"f0cb601de44cf4697cc738bdaf3e841248fcbc2a1ac88e9ed2e729d4a9f7e013","sha512":"c8b2e3175a1989fffe27930b2f51b739680578e7846f0829dd12a61363c5ac4f5f1ed48863af872904e70a75bfde915f5c4e8605acdd9fa169e8c9180667f782","ssdeep":"384:UKnFnZVNpQib2LGBwPsVnqqymphOg6GycXAcnsyF5zvC:T/VFS/PmqbmpY9cXya5zq","tlshash":"6472d1ef82770e0fdc9647b7f4e4c6a9de349cb8b686612a5141634a1ddd0088d89a73","first_seen":"2025-03-14T06:13:50.112727Z","last_seen":"2026-08-17T11:56:32.898075Z","times_seen":88,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/8kW3wIF2XQhV68PM4I84GJpmNfhhBm5LXHWTx6pU.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.896Z","timestamp":1786819045896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/8kW3wIF2XQhV68PM4I84GJpmNfhhBm5LXHWTx6pU.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBl4p0r6maWKJ%2B8YV6dfGze0xbCUhbnEWZsTqb1nxSkptWp5dcn%2BXS%2Bnk0Ll%2FoHU4VAS0BsN5lnXBPgCWkck3MGBxuLKIJlzvFGjW06psBPi2A5uIF1e7H%2BMtxFjw5RWlGStN0lQPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"9a9ee81008866332e62ee7a4fe02bf0d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cda73b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21444,"size_decoded":22297,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c62bad0e949563f719d2d17afaa9b408","sha1":"c8a3e556d6f81b4f947d43768310d0bb32a4b48c","sha256":"a0547528a2481da10c541d05558872cfe7f548aed738e5ee173550aea633276b","sha512":"59682b26e3e2535eaee3c8878d241d85af665787d86a04e6d198bf298679985acdfb152eb40f034948daacd31f2ace98882e498321fdda813fe1b11c0b163165","ssdeep":"384:hEbMdHdQd1xwSDSTaLGPGQNms8ldcjRqXifF0pJaJix6nQOBqP8pTsPEGQ10/YUi:hEbMdCXxTmTaKqsQcjsXiKpgJiiqkpTX","tlshash":"94a2d1780b2632ae4b2960e963e539d19bd717520109fc383da562c1d7d1a6d3ce15fc","first_seen":"2026-07-11T03:56:55.089507Z","last_seen":"2026-08-15T18:37:57.125822Z","times_seen":10,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/XyPIpgLGfcaiNt1iVNjUIAaNpuY9sa2sYQW06gOH.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.908Z","timestamp":1786819045908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/XyPIpgLGfcaiNt1iVNjUIAaNpuY9sa2sYQW06gOH.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H235CmLkkVVL6HAReS2IF8ZK%2B8Jtk6Ol1pL%2FvFA%2FVgt6Z6gv5Yz32uJiLm3pCiAAbaFXRBcuLoShvnaVDckmDXAMfbm8a0xPVH9uBVYh3jrlmfH1q%2BRqooASW4yZcfIYQh5Xij%2Bvew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"4f4af6d36772019616cca02de00c4c2d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea7db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8320,"size_decoded":9172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 337x181, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7753cdc92e284985c0a9084b64b50b7c","sha1":"47854ee5046e85ec0b029a8fc159fcc89ecaa309","sha256":"66c7e5bcf141192acd621e9eb33f158a12e3c04ffd71cf7d7cc49cb8b2b5a20b","sha512":"b13b7fdfdc0e5f93d0441caf7e44a14eec58bbbb2ecf757f35513278066b1e31d11ca5ab0e2a9de131d75a61d921984170dbd1b25a2a253d0abadbd43da5bdb5","ssdeep":"192:54sUz7Tx+SFML43Svb2L9+8JEtKUpmuD6rO:Cpx+SFD3Ab2B3JWDpmUj","tlshash":"0e02b0be5235d2145a16c13b7893a73cef683f05c5d3b9ca4971f5c41525f23e2b8540","first_seen":"2026-03-28T01:48:10.115973Z","last_seen":"2026-08-15T18:37:57.126427Z","times_seen":18,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/hqvSEEiw090DNR159fufCl7EJMSIv26vuwsnNHVh.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.909Z","timestamp":1786819045909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/hqvSEEiw090DNR159fufCl7EJMSIv26vuwsnNHVh.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9fWh4wDfF%2BSgiobvAHvW7fBR25ihDB4mYKDPcbtnOllMzo1i4tTBPIggIBgVPvEFVOZDud9hLkfxRCffR33vIQfVn%2F2sj%2B6IvNlGjYwV6u21xVfQGxtsDsNgCRbMQlOK%2B%2F%2BTMR3EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0e06be79bdfdd6c9b41055d0c7201f89\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea7eb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18876,"size_decoded":19731,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 290x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b11bf932947d39acc2ca54d46ba17ce","sha1":"6443ab982db4f03fc0d0f9360d73b2fe272cffdd","sha256":"0d328e521a23fcbd6101a57e5283bf3faaddc718ffc1de1cb92b63aee95cf62c","sha512":"c31a39b0cb145deb7ff6ee55a62cc4abde29affcb272d40c540f2c79a1bfba29df3a2851701db38e1abb709cd2ae38d9e1fc24bbf26c2ed9c46f5fb9c592b697","ssdeep":"384:g75qGngjHCfFTRbk0zjUkYjfi+uc6unTirhSfn1vxvxBkWoiRezy:g7Fg09JnjnYjxuc6wd/1vxv3t","tlshash":"9182e1bf020fb5c97bc8974daf8149630376905a94f30f2398da1c157986413e4c941f","first_seen":"2026-03-28T01:48:10.094247Z","last_seen":"2026-08-15T18:37:57.127118Z","times_seen":26,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/seal.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.957Z","timestamp":1786819045957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/seal.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fa3kdw7nAHYndPoxZyiirubkCqJc7RnZF0MINZuX0NTKhdha%2BO2l7Yb4PPk8%2BiWUno5z36bT44MkbXhhOis8dYLoUn5qilLJsqRH8xuoycqOCnvF1diqwIWqsFMzGsafY0VuFErCTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"de19c99ffea2fe196134b44f3ebbba6f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d3ab1b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2998,"size_decoded":3844,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c730aff54accaa24bcaa4ac2643ae51e","sha1":"91de8596e2428527a172cf7d70184c1faf1a0122","sha256":"3c13fe5cea1b1cdcdcecb90e44b2c0f044f3fe340a79b019b62dd331d1d602d3","sha512":"a979747411ce3e7e8c494ae0b2136b5b602a6be3d13a3b2649719d7dd32a14506642751ef2ec1e68368c84c4acb9cf3ba6a8d3bf7215c8fe312ca808a1e48667","ssdeep":"","tlshash":"89511a8ca067034fa6ef7473d4bbf680d5b56e04aa17d5906f9e1d803a43065ab66ec0","first_seen":"2026-03-28T01:48:10.033996Z","last_seen":"2026-08-17T11:56:32.938662Z","times_seen":42,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/q9geXELHnkQpNt3lF4NHbA5oH4dWAp9Dt4cEvAj2.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.882Z","timestamp":1786819045882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/q9geXELHnkQpNt3lF4NHbA5oH4dWAp9Dt4cEvAj2.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZO%2BdQwA9klHnptAmym6p1LmWzl6jexjUgXml1utZjNi4wm8Sm6G188%2Bc%2F4riiyQ737USEN33ZdLGBUlRLZefN7q9UodDiLMx9gyx1qHqhu764dSOp0HPpbkr4f04bi9uL4Nq8%2FMfKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"31424ee14708eff78f1285bb5396805c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cba65b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19320,"size_decoded":20171,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"433f342ce629b58ab1cccd4efeba38a5","sha1":"b8b1468f9536d6f296103ce36741a9c9cd7c2e0d","sha256":"e7b99c96c4c7d01097b24aef85a55bc609a2eeda518058aff501412cba2a6592","sha512":"025721198267f5612f2f952dfcdc9623d7473eec5330705ff1e0013e8e6711391f45dc94269469a5ee074ecf938422b09e374a03d064b97d67087dd360966559","ssdeep":"384:KComO/4d2f+VWap1/QjD6RdGoS4P7BPDBYTN1wpZ7bd3czEQZye9zHrqS:3DO/fYnFPP7ZqB0bdQEQZyeRHH","tlshash":"7082d14acf8a61cd7bcb13e67aea706c2dd7f56bc5254ca858815302cf48570177ce64","first_seen":"2026-08-15T18:19:11.307806Z","last_seen":"2026-08-15T18:37:57.128486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/q6fPewpVN1HMasMELunztjwVGw4t7eubI5fcTm8e.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.885Z","timestamp":1786819045885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/q6fPewpVN1HMasMELunztjwVGw4t7eubI5fcTm8e.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UblpzFn39lOivk0xb%2Fb%2F5wSkEz3rIj%2Fuw3WbewSG7%2BqGR%2BYBOeWPOmwVFpnXG5xbfdHpRjAWGk7NVcmidAx6uR2c7mbhxi%2ByUQXGQG9beLo58yxazu3D566vr3SiNZUfFiioiM1NDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"53610eb253a7cdd12cdb058d5c786b0f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cca67b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33128\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33128,"size_decoded":33983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b7c0fa3d9de4631b0d3583431d32e9d6","sha1":"79c4bc47d718104443a6f551a8e20a09084fd047","sha256":"f4045d8293e349cbc33cd4e14c60f939060b6153ddbc9c95e4ed74559076dace","sha512":"3ad5b9abe76061bafed6914f6e85bfaee99882674d7636b64bb3120a20a3c62f5c838c44e22fdc0a161c9853cd441609436e2842ba6962f76d0894fd4e508083","ssdeep":"768:9u6aSOtPQzA6JzPytwQqJIgpcPN/WOGGst/l:USkIz7JjRQAIgpcPNWOPsf","tlshash":"d2e2f27745b2c3aba8c125f4b4cd513d9e86dd60720eabd4b06b0224b7919a62c4d3f4","first_seen":"2025-12-27T20:35:28.917656Z","last_seen":"2026-08-17T11:56:32.922929Z","times_seen":11,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/iKp05XjAStnoDN2yTMkZu3rub3A6T4LH4oCJSRou.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.894Z","timestamp":1786819045894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/iKp05XjAStnoDN2yTMkZu3rub3A6T4LH4oCJSRou.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZvHQ9p3VkmQYTm%2F5M7Y%2Bj0G1jM4QMXdT5bk8K1OJPlOZfCrcCUQEfYzqrd38DnjANXbWMj6%2FLgJfTpx7U2ec8RD6vm7%2Fk8XID4JsH5gSlxf2%2F0%2FVwKAvFnwyaq4fZHVO%2FafX2yMUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"0ec1d4d919da8f74966aa13cb3f008ac\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cda70b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23644,"size_decoded":24501,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d774477b9dfb88efd41a299827abff0c","sha1":"790a3fb17df0c5b7f7ff890cdd06f36f46cc1787","sha256":"6f95e3120ea9767bee74721498a59e6c35b2c72f3931a0f01a4f3dde3df3703a","sha512":"ce7c21933feed93cb2dc676b884a1e3b8304555375db09c0c9303ea1214970c9000f14dcc350f9d0c4649616cad319aa9c76ee0186b9112650c0dcd1806839f0","ssdeep":"384:/UeVggKtXrz3ohQ408iEPhLFGTVYeBX1HYceeFEQw0F6/Fon:tggQX3oKr88b1HYcJXwVFon","tlshash":"cbb2f1533aa8ece52b982ac5a335e672d1322571f83af72234f40dacd857ec2871519c","first_seen":"2026-06-02T07:48:36.835371Z","last_seen":"2026-08-15T18:37:57.130669Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/SH0hqsPi5N3duAeg95ZSinWij7339C3NdBzx3840.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.900Z","timestamp":1786819045900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/SH0hqsPi5N3duAeg95ZSinWij7339C3NdBzx3840.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMk6fbzjqx1AMS6TECqgA3%2ByxOVuiRuFeVcMACjnXtF1wF25IUhFDTbQbeDdBN%2F6HGFWKnNj%2BHs8E60i0e8uTupbrhBdLgEcVxjthEZKm6QUoJwODZqVH0eUt0YjHvXQUqA121lSVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"be0497f28f41a29e390af8c0c30e3f2f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cda76b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22682,"size_decoded":23531,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"118bdda9255dcaa473c96ca81dc8d4aa","sha1":"2daed7c08cdd1d10593edd4c0328a4e83dbc4e8a","sha256":"22a07020c7b59e3643e4f505b03b033573eb5e34117b71eaccf6b5e3eab91957","sha512":"b2f06ca316413ddd941726b850454844524f946dc7b0021f7ce96058cb720bb2d98835f7544aa5749396fbbb620f8d1b8e377301d4c97ec4815e723a5b33c242","ssdeep":"384:w67TwuCn2qFTeDwN4cHcI/XPmN7ebIuOHu1oQibhx8XxHbSzdzyX1ciKLHsg:wwkuIFyv2cI/XuMIuOwoHxIlvFLKLMg","tlshash":"7aa2e19142bcc0898fc4b671fad6cddabe964f48f9d59a4cb160073c59182aabb0c4c3","first_seen":"2026-01-25T07:11:31.091518Z","last_seen":"2026-08-15T18:37:57.131314Z","times_seen":15,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/4s8HJ6dq7xJtgD8Yv1rZ8C1nGTCAe9gXcNwXVdJ3.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.919Z","timestamp":1786819045919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/4s8HJ6dq7xJtgD8Yv1rZ8C1nGTCAe9gXcNwXVdJ3.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGjevnIlp7YHUqTiDdNCA51dQ5WMvWQsO0QWhA5cG8I%2B4dCM%2BIJWIw9cMNDlx82VQraHt1PVbQNH%2Bwi4x0m3AX%2FjORD8TBcqfS1ee5xBXxptm7nggtmMGyHF7K4k1tx0VDczb6Yd3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"6c7b90035b4db800f579129f38b7fe59\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa8ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40232\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40232,"size_decoded":41083,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"233ff8f0fae464c65be843145eef5a8e","sha1":"c67dfb5f85b019b46a84c9a6754ea5df07c7d210","sha256":"ebf3108367a2b44e6e87f2ac3861321efa54dfd4007957264a326fe601bd921a","sha512":"0139dee5b2bf3638978c72f8ad81514005404e3f4d617d469c4a3ea61497421c5d5060eba875f875763ca77a5e716e5de45097338cf683441b5998fc61c5a890","ssdeep":"768:XVCVJk1fLREO8+LJHn0y/nLHbxDk41xcTN2OHjgQYHcI8MgoPS6xkzdUc2OQ6rF3:XCkVLRguJH/LH9DLSTN/HjtIM8S6xkKQ","tlshash":"1203f1a42ed0cd4b562948c719006e3e59d25e318a0237881cade2af7d3f59353ee7db","first_seen":"2026-04-19T12:29:10.645406Z","last_seen":"2026-08-15T18:37:57.131953Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/dD21DybcjIRTuKIRkCCLumGj05Qb0l9MsQDcUmmV.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.940Z","timestamp":1786819045940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/dD21DybcjIRTuKIRkCCLumGj05Qb0l9MsQDcUmmV.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07Or5irHPETG9rIoRgv%2BU9jeExoJyzQNZWAupRQHcWqsw2DuetcgSNCT9pXgf2UmkuwV4FM2VhM%2FY3yVAqUBYOKgM89sPRG1%2F5TV83Tf%2FGMheuyj1uWHs1T712VE8%2FxZ9pMAh4T5uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"6faa2f1c54179ee251364b66e11a08fb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d1a9fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14110,"size_decoded":14962,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"9d8ea14d69ec19f2430afb82a7c8f63d","sha1":"44b41a1e5947faa1bd83e3b66b4b7c55796ff963","sha256":"2b59c118c933263053f6dccf6775d1ed9243b46a3af8a3e7ef974b6d6510ab85","sha512":"92bdadf4e14befcf32ab65e75192bc69874e1a3b9d71b64cd8dd9cb94f42ce5aeb6175ca541da41eadbc5a84bf3b1437c00c0c79d15f5a3794bd355f304a38a7","ssdeep":"384:T+o931i3vByslJ/i0sr83IfFMRRiE2Dnld8DWto/bbGl5NB0PN:TJC/M+l3AmRFzRDbGl5NB0F","tlshash":"ef52bff091885840e06ff9dca478855cc96fd8322bab12b1d2dcf5af934e65c45d58cc","first_seen":"2026-05-27T04:55:50.139497Z","last_seen":"2026-08-17T11:56:32.914227Z","times_seen":46,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/gwT0sBMR36BdUOEYUHCHBhnTFYaFbn8DwtB2VKRS.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.953Z","timestamp":1786819045953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/gwT0sBMR36BdUOEYUHCHBhnTFYaFbn8DwtB2VKRS.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymSX5rGBSgck4GrEN6uHKFSUQXeYrVHWBNJZX8wGof1yGcA8ohDsPBZ23Zhu7qxRR1F4rgInyszlARbemHO7OqzkDNpODUml8NJ84zWecT5CXWuGy2hK%2BjFBdn6XWdOGHbgE0TQ8uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"9db482d3c9a08aa26ccf68412bc91b8f\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d3aaeb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4492,"size_decoded":2560,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f31a0eb0c2524b0080b348bc3dea1cf","sha1":"70aa6bc6fed7951f0dd45f0653d847d8c0278ff3","sha256":"6c0cb85e0b52deb8c3e8ba9f801e00d5d7463a78c77192a6e5ad67380a3fcb3e","sha512":"96484b00910081c6e1cc98a49a24dc6118e6cf28df60fa705f1bfa198d54b4b4751dc69ca3e3de6c33cb6b73291bced4760b41a552167d37ecd0c882280476ef","ssdeep":"96:7IRjN2BsYYxzVWMRuJWnCyBfi1sMRIEga2zrW/D7hHj+UyN1:7ENmsbHCp1H+EeK9j+UyN1","tlshash":"3b911ee31774d59c5bcbdd6bfe7e2422131e80bbbe0a1bc8469f4a5464a3ec4e612d40","first_seen":"2026-05-24T04:56:28.748846Z","last_seen":"2026-08-15T18:37:57.133134Z","times_seen":47,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.872Z","timestamp":1786819045872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 17 Aug 2026 18:37:25 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbLYAjQvTaTkkCHqlPv9kRsBNUgUSN7Nb1rtRy2iSVqBllJ%2B70w9jvM3%2B6f5gnRYzV5AMOQkwPZ8OtlFu7N%2F1eejSau%2BVL8H3gbYckkehjonFkYG1oS1ipi4LAyD5%2Bib7x%2FSoqS%2BjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nserver: cloudflare\r\ncf-ray: a2ba4f7caa5fb503-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1256,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T13:40:50.881716Z","times_seen":421344,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/RoMtJKcgR8INd0G7lTNPC6DaWzwsIXI0uwriJRri.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.903Z","timestamp":1786819045903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/RoMtJKcgR8INd0G7lTNPC6DaWzwsIXI0uwriJRri.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBd5PE0%2Fkm7B0klcmBVtpmEmnW61wzXPUyZjx4kWUFX%2Fg9o7pyX%2Bax65Fr1tA0OMzCtiotZ%2FbjzAVuDby1SY693uR%2FIDmEmK9H2KcQexJf2U19g1wEBO05SovEsSqk4vqCvd%2Foeeqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"1a1772177c9165168e8fe27324763907\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cda78b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23474,"size_decoded":24329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x317, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"10fe4ac4b00a329ed23f3e36ec4f015d","sha1":"c5809fb91ab51282128b3742f4ba4dd94ef54e05","sha256":"bee29b8e2f1778b7b0de899326a5ee84be3d91d034c464d3fbab9c022d4e3003","sha512":"9abd54554a5e04f9dbd0fee1cdcd8adc5a1a1a1d7accbacddd44d0cef4a01e17d8b038e759afb9b4587e5ff845660f22ef17cdd06be5b76f39907d960d2e6fd9","ssdeep":"384:Q1Eg/jJ4hlIhslcTvRH5KdrPxrz3jawi9lPr/frlh2UaA0D/sYcM7j:QK0J4haLLRHsvrz3uwQPDfv2k0DEYP","tlshash":"5fb2e131d8865bb85aca79584448b72bc38e133eecdf3b5743d84413a1fa61176bf121","first_seen":"2026-05-27T04:55:50.163605Z","last_seen":"2026-08-15T18:37:57.134612Z","times_seen":32,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/77OzJNMK3kaSIGs8mdTMtKnsH4AxzbLBGk8wjzMy.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.945Z","timestamp":1786819045945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/77OzJNMK3kaSIGs8mdTMtKnsH4AxzbLBGk8wjzMy.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0BcPwM3b3fbEUeFwTTkD16E0hilLvyIbwfLnY3wutaWpM%2B%2BN0ar8wE3YzCSdPMvCOWEOF%2FOrfj%2F5Ufcvgh9pnubn76rpFXAUVqWfTO3XexOrp2T%2FAinaNPyzc0%2FYhu%2BG4Cyuv1CaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"127d608f61a7ede2414602626e0be6c4\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aa5b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13759,"size_decoded":5956,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35845bced9e4ccf1c407fb43cf166d71","sha1":"448e6f5a29ed23d86f61037625509d4eb42b3913","sha256":"8a67c1552a4629853da381c8748e2aaf7dc5a3b56ec2e25a15cb0e715ce8c0c5","sha512":"04faa5357fb75be87518c6a1b81db3b398c89b60489b67973b809f5f90aeb935b1d4946d9473c37a411414548dbfaa3d837c77d8c1a3a46270c4430bab3d1e63","ssdeep":"192:kUK+VPFYo6F9n3UOySTZRTD6WpVBCTSdkTvGo0GPGbc8qtIhuWfYd:HK6PFYoOhySTZR6WpaxOvGWc8XuWfYd","tlshash":"f852f7c913f85bf9f18a836a5262581a38ff38b73561974df4ce6ca26f130d9086d493","first_seen":"2026-04-09T07:56:51.858746Z","last_seen":"2026-08-15T18:37:57.135155Z","times_seen":55,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/HEitWYzG3O2wqIL5J8gr3pknJHKz8FLNedxJm3rK.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.881Z","timestamp":1786819045881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/HEitWYzG3O2wqIL5J8gr3pknJHKz8FLNedxJm3rK.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BJpjwpkh6%2B9pcmx5pHLSdDw0g%2FWcNNLQi4JQcKwSjVKbMlzUGoVceWvNpcMAVEgBov2bpO6Sfj6LEpHVIftnMk6hyNweWFdhED7ZmHT9A7hRRoKy2D7%2BsTPTSvKPrqrDJsy2tq%2BKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"caa4d89d1eda55581f4d5d1d185623cf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cba64b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28342,"size_decoded":29195,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41991902eb0efbd8e52c2719a73a808f","sha1":"424bb018edab160fc6e69be60c5090430c6b0b69","sha256":"b33f6c762b4ec32f6d3d35b67efdc6d8664d6ca2c1e496146015df2ff568741d","sha512":"043bd36e172d9781f033d3a61aed1b7e9587219c55a8c5507f5d6deed304b21b58fdbaa7fa1ea5b3928298e689534bc2df77bc4147e8ef30d270593928bb6cd4","ssdeep":"384:k0dXwdxVewQZlb3pTQINxiaOxC00hRGdd4bUdSWW6Sc6PDhLAn/Gj0edu08OK3pD:bdXw747ZltPK5ZbUUdSRc6PDx0g0z0OB","tlshash":"30d2e1fd32e5e1dae9251f304a003d58283993da91c41569be282e167c623b87fd3f68","first_seen":"2026-04-24T23:22:42.031594Z","last_seen":"2026-08-15T18:37:57.137071Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/V3OpXAQ7hmUgSrXPgveXpwxlixRg5Ck3H9yoQLUm.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.929Z","timestamp":1786819045929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/V3OpXAQ7hmUgSrXPgveXpwxlixRg5Ck3H9yoQLUm.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8dULtMWmu6sfgF3WRqWvSQtc9FwjZgunM5CqF1sv66xvBl%2FO%2FVZOWiD2T%2FerfW%2FSxGigrRhyX5aMtgbb6bti%2FhZiBG0p2SXpyldj7rv%2FMqCvkKiFEeouNJ2EC%2FZ5ACy6seEWIpZHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"b6f2eb4e346bf8f24820632b3d6b47ec\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d0a96b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3281,"size_decoded":2347,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c924ee7952d600271758085bd5a6138f","sha1":"a9d1d263663e45c37e5ea4d6c65f204a94dbc5a7","sha256":"b69177816fcb4709f6492d69040ef930bff3083898d1dad055ea49005fc174bd","sha512":"a26fa42c12a2babad547e52bccc409e8a0bbc22e2adc7011027b68e1b54df06085709f83c1a61c54b8d3f51a9a1c34b66022828475e84b8310994c880d5fdb84","ssdeep":"","tlshash":"7761461b0319d7d9afac117ca996148eb650ecc7e0b0f0d4bb5b5419e49c4e4b68cbac","first_seen":"2026-02-13T16:37:03.807425Z","last_seen":"2026-08-15T18:37:57.138086Z","times_seen":89,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/sc4CRww6fjxTl9iLqgJALy6fUw43guRBK0PuAdw6.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.955Z","timestamp":1786819045955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/sc4CRww6fjxTl9iLqgJALy6fUw43guRBK0PuAdw6.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcSum0ZfKR4Bgd7oR5zXJJQ6Mls94TQC0fC5qARGsyoqcx1BnPxcxP4cOLJZ0EmvdO8Q5BuM85ftxWzM%2FsazxHZCI9xIKTUSDO2Wsw7%2BQz2BENgFM579e3Nkhybp%2BNoEErX%2FL0zVEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"fb450e887fc9cfbce54528e47d928f79\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d3ab0b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5338,"size_decoded":2504,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81d5d5c29334515d4ae796811323cd7d","sha1":"356e39ab8581bd2484f034e5543054e82d88f57b","sha256":"9d3027073b2f2f8787dd4334603955258b7081c9b5ec2a631124f072b1a71b79","sha512":"e112b26f35059486c561f4a1ed2173e1e3d8453e915c024f1f2fc6e89f3296307c0b6896ee709214fa10d8f03046252eb5b40725c8f1dbf4eb1a58a3bd45bbdd","ssdeep":"96:PLNJEjL2sbAZjqzABjhw00l9K/hw0FlLqztqMWK3EyxB2UhwnJ0r:ZJE9EZAoVw0lpw02oMT3EyukwnGr","tlshash":"b1b14386037856bc995202448a3c11f236d568d7d3b6e2ece7b35a539f47af08874e38","first_seen":"2026-05-27T04:55:50.136277Z","last_seen":"2026-08-15T18:37:57.141193Z","times_seen":38,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/61CK5aUCITjD04aks03U2YZOUKGtj0Xt63S4DviR.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.879Z","timestamp":1786819045879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/61CK5aUCITjD04aks03U2YZOUKGtj0Xt63S4DviR.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jshxg2A5UTASxvBMDHXFsXfvWvMNm847UIJm908Rd1H2yEHgF89sQO7AHC82%2Bjn3%2BX29JnN66DrwkxYJ7%2FKIXnziHy0rHdynkLPKZJAayuV0P%2FHbskpVWjzFb8qCFo6l2ZcYgeqzRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"3051846e7aceab31ee9c8ee5e7f5572b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cba61b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 326788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326788,"size_decoded":327640,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1792x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67792aed1dd8584734ad6bd5c9032524","sha1":"87e646075502d8c3e0632e681644abf1183caf65","sha256":"add3b6c207b7db6919e74f74105e0cafe73dc3fdeb1bd61bfa2f2512ec6aa34d","sha512":"97187a6b1e99cb636785cdc5494c0e9a273fd2d0f37eab3d03d39ea5ca0bfe9f0ba981659a9411d4e4cf4a837e45498aea10ce39ce6770ac1301fa468c6dc85e","ssdeep":"6144:z5XvQU5I85DFHLiWgPUNbOeoOY+0g8josGTSxdc9RNDUVJ+PbxrL:z5vplDFHWdPUDoOY+0gG1VdWiVGb9L","tlshash":"5b64231ad70b3e2ce51681cd59bec4426892ef44b9be1373d168e2f6c64f88d6c453ca","first_seen":"2026-08-15T18:19:11.284613Z","last_seen":"2026-08-15T18:37:57.141812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/3et1gXzyRc17vu9KcuSgKmv1AnWFy6l3mnkpK5KK.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.883Z","timestamp":1786819045883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/3et1gXzyRc17vu9KcuSgKmv1AnWFy6l3mnkpK5KK.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmVvpbgqD7ld2UzZtt0itRWY%2Bx0cDJBb%2Bxjh9jDUKQLni7e3MDphVEXajD%2BIzt5y3gX5x0E0xN2Ebvd07vWToHu8vFI2Gp7jM6hoBG131toMpiLfHP0Vbuq80%2FwTcoxZyhCF%2FSxL%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"922b99d0aea3929f8fc24888ca49b94c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cba66b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25364,"size_decoded":26221,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b60ce5aacf0e4f9c795b73fd193ceb7d","sha1":"e3258f215b7ad8281ccde29c622408d774f620eb","sha256":"8321b8829324bbd22de0d7c37adfbea319a273de81cd90f1fa54a319fe056430","sha512":"6e45791330b52297600d3f42f09baf2bcea1c871bc3ad96428123f0d656b71347cbd8f3685e89e63f78625d628dc0bd0ea66023dcd0fc8dd89af97a58797535b","ssdeep":"384:Li6CgZumAZZpyGZIpukCarIUVOvBp+ZHHLOn+n1XG9o/xBdlfxW:Li6NCWrMhv7vql/Zz/jPx","tlshash":"0cb2e1a06b94899ec9ff08f210fc42fac32b2d934a8645e252b1b56d046d7227fd7725","first_seen":"2026-03-28T01:48:09.997367Z","last_seen":"2026-08-15T18:37:57.14277Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/oAygOBylMaUSPyvEu6LpV5buvIXB8U1eDfZYqNpk.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.921Z","timestamp":1786819045921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/oAygOBylMaUSPyvEu6LpV5buvIXB8U1eDfZYqNpk.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kp%2FC3L4PzVguyXP6xL88hhnyMqyeTy%2B%2Bh6LJykSvaNViYnnYLUpbwUMJ%2BryoroK3B%2FVGuJds7RYfs1YjFMGMjHNukN%2B50KHz0u0nU5sHVQuK7wit1Pys2CJgUUFgWP3NE4P4DxORCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"f74600c372cd5c8316f4cab49c647623\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa8bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19938,"size_decoded":20793,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 490x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fe441486f0a0921e7fa00e65ec1243d","sha1":"4462da0e16c2816ed7fb6e20ccdf643c0ecbf40d","sha256":"26df6be3d01c8d2acd84835a85b73165053ed3377b129e8323be7cb95718c5a3","sha512":"081c00f20ae76a18fc4498ff54542bb44ac6a73090d69a6dc54e88b38a2b17624ae0a7b76c2c5d9b09cf48148bd263e48830018684c1b4dc6811d16420959c30","ssdeep":"384:WFNMqoGC3xFekRDrsFIanOxSiadk3NfK8Um426vxMRnPxa9d4vaInLKZ5ys34:WvMqTCrPRvsRS3lH+nxYP09d47nLE4","tlshash":"aa92e164343fd81dc61bb1d958c6e9b61a6947ccea1e6e084e230b5077f5cd3922ec35","first_seen":"2026-03-28T01:48:10.051848Z","last_seen":"2026-08-15T18:37:57.143433Z","times_seen":18,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/O8FGaKLUmsdzzPU8rryB3wiNo0akhVahvmEomm1Q.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.946Z","timestamp":1786819045946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/O8FGaKLUmsdzzPU8rryB3wiNo0akhVahvmEomm1Q.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8DVU7zgIP1S6OgmMGHRiNuKj%2FSNYZ1wn9MOuRDdeXmS26eQqe4tu4BoMJyAt8R%2B7ZjAmJfwbhXxRWxDludXHqcVUMe%2B96qyJaSyC6ZOjd3vDq1MSrFVqHX8gnctz3DXZcD613HCprA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"b8abf5c18f9afc1600844a3e381c5ea0\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aa7b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11831,"size_decoded":4416,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"649310e4d9ecbbc18d8ac0de7df68776","sha1":"7a437fde265cb3b5efc7fd05fdcb1635d4350314","sha256":"ffc612bd105721d043fd1abc0aaabd9a8057014579fa7a59f603047bfaa8c61f","sha512":"c97d02a34c0b93f6e4ddeaf07720f9f2575702d8e7d9575428d8f5c4e08b8f247821dbe092a55e36b1b84116ed7882a3908be411b4b87f79fe9ee25b9eacd5ee","ssdeep":"192:dzF5YmcUqramdXlZ7wpv1G8cnhhWfZTWjqFdZopNkw:dlngdVZ7QpbZTWjOakw","tlshash":"173287c677f50be5e6c3438cd28208553a7630ab34729a29f8ae3951bb275cd049e4d7","first_seen":"2026-03-30T18:40:21.631335Z","last_seen":"2026-08-17T11:56:32.857509Z","times_seen":64,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:37:25.517Z","timestamp":1786819045517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uvus1rCgJFaRUc2jlg%2BJM2n7qajPzJgZrO%2FG874XG%2BHAPdvyC82HVcDptR6c8sX0q0wc1uCoUhmSJiHtIPVu2O0ANYu3AiH1MaHwdbCucp9QW2rnNgc6h65Ir0FD66EXvGTNtA%2B1sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\ncf-ray: a2ba4f7aaa39b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93736,"size_decoded":17692,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12704), with CRLF, LF line terminators","md5":"369a2366d8cfc7ee3464063f147d6b22","sha1":"c2dfdacd3da1c38796b1abbb7cee2ff2f6fb5bb1","sha256":"c5fd5864278a7880e1c727caa2d44d1bf85717dc09f8440aeeb05c9516bf8fca","sha512":"e0dce6220945eb2c4b2b4c6497663ba20f485320773e48baf8609c05678b00459a13907e68216e6906e966456faedebda255b380158f595a449171b5e5d2d516","ssdeep":"768:1raBn57dRt3Ud1e9nAUABDOgd13IA1NPi9GsSF3okryqz4yZ1VDrRzJ/h/+cvgEO:1mB57Ue9Vg7RPBYTQzHBOB","tlshash":"1f939731e0f0683312e39191a6b17a5a7f99e403ad06560031bdceaa4fd7e97c93379d","first_seen":"2026-08-15T18:37:57.14635Z","last_seen":"2026-08-15T18:37:57.14635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":5,"connect":23,"send":0,"wait":143,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/8rFTVMiGNV41WjLBnjZ3V3vrUOINY4Kf2QVSZ9bk.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.889Z","timestamp":1786819045889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/8rFTVMiGNV41WjLBnjZ3V3vrUOINY4Kf2QVSZ9bk.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z70D6tzxKsx8sGEgdkefwH9OP9%2B3BepH1LGgdkY7X2i65hFloNPveWCI1xSx1p62w8YUsHaBUzmq70CbZL4ftxi3CDPl5b31YGZpD4iAZEWer65y%2Ba5vcM7UPPf6KeoW3yz4wQP7BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"c157e62ae213585983eae4ef527c6ba7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cca6db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30626,"size_decoded":31473,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f8a06f47083c57600af3a6eda7be833c","sha1":"cf2e471cad8e0de9ba65cc642a81487ffaedf218","sha256":"29109d0e6d916d53ca45b943b34b9cf2b6f9b2252374d95e438381a50aa9f84b","sha512":"d773e8b8b21a92b6fdc2c9f0871182946d458b172f2e636b1293447fd1897573a1ae7fac774bc9db7cb0592451dff22419f45e944921303cb07f1fe102a91d51","ssdeep":"768:6+HWKW9iN3xOgo5T9yOYjgP4JR7nAYgWnVT+9+Z4GQYbT:6+PW9QxOgYoLjgP4/nL+QSq","tlshash":"ccd2e1b67252447ebe31cd4409875d3f270048693a4de906fd54abda6873e3043cd0ab","first_seen":"2026-03-30T18:40:21.685692Z","last_seen":"2026-08-15T18:37:57.147421Z","times_seen":16,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/CHYwMXHrPbCYD57X2qRemppzWQOHFwjeciWx0CpE.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:26.181Z","timestamp":1786819046181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/CHYwMXHrPbCYD57X2qRemppzWQOHFwjeciWx0CpE.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbPY%2FEahqbUhdLM5MBgSacHLtbngl6g1r%2BLymWw76jXUF0bTJgRqBS3zQdmKXVqiXfgvjuYSqikH2hxcBfJwvtnYMrIq8Dy9%2F1FJkbhCjgnpVQCJk8SbEnxPmceboNAh1CBLQMRZYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"11979fa7bb352805e1e315beda567d45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7e9ad1b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4641\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4641,"size_decoded":5493,"mime_type":"image/png","magic":"PNG image data, 310 x 163, 8-bit colormap, non-interlaced","md5":"dee9ff351f5412765645868ea07b530f","sha1":"8ba8d3f8eedfafbdec41e6b480c4c9a72ad5f50a","sha256":"67a3338ed61f9a03c7e7ed02d80595020b1b521e8df6ffb80f5096d848281b5d","sha512":"33172da061ec4f81314b6cfa7a409ac4913c2bd6e698483861ac3d6e29c8c6918b615c24cf2ea02b51f4de179ed7cc108be82613a0d5fcf8ee4854de7f8c0169","ssdeep":"96:Q/5gBEbY9uZPsKopFtOs0XF6/oUrQ0ffUSuL629im:QWBEbqfK+FosNQ6sSL2sm","tlshash":"45a16ea3644e109bc87addd5a3848ddba66df60c18baff1191f0f635ca2e8c41357106","first_seen":"2026-07-22T10:05:42.130506Z","last_seen":"2026-08-15T18:37:57.123057Z","times_seen":16,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/J2wx2KPNMUR4s2Wuvcgo5UWrtxno0cOngrRzPX15.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.893Z","timestamp":1786819045893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/J2wx2KPNMUR4s2Wuvcgo5UWrtxno0cOngrRzPX15.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SKfpYIuvPkYR6cahbsd4B%2Bpdl0VYnGZzODUablSmT6dDIGiERTHkVbq9%2FHBd%2F1Hk%2BWqdxcSWGPD1ug1%2FLycY78IPgimuYVPP5fKZeHKGH1tzuU0jlFd4VwCmxmfWA35swda74WDbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"53aed6339bcf34e6f2dc544490775b53\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cca6fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24242\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24242,"size_decoded":25095,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2b9ff4dbace96c1c64a850148b3ead5","sha1":"62c3fbc30683f24eb614e077a6d53dcff9f4e131","sha256":"5931a08fef6226c56a7bc64c14a08772d4d7704b1423af6f1f41bf5f85a41be3","sha512":"53e42545c787a4d98301736ce17a6cdfb3399f4a7444efc1843ea7c9be903cf966dfc679472c8f9d3f5b7f6dee60688b8b1816861a2631fae3e2ca13910ac35b","ssdeep":"384:8lQoC8P1THW+lJhTrHzO2GYNs3gZ6xgckTGLsb3AE2A2h+zYtJRKZJwyaPgJ6L1T:GRP1q+5rHz7GYNsSigFTGLs7aA01FKnm","tlshash":"1eb2f1f34cd25e5d592626af638eedf22cd93a5c68dc524799256b42058fe410307e8c","first_seen":"2026-04-19T12:29:10.639446Z","last_seen":"2026-08-15T18:37:57.147973Z","times_seen":18,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/4Ec2WhWrbiiLh0wLJYTslXKxQ7f7E9NtX0g8TKhR.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.910Z","timestamp":1786819045910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/4Ec2WhWrbiiLh0wLJYTslXKxQ7f7E9NtX0g8TKhR.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAOvoHN3MmMcl0btZ1HvC17y%2F1yV3jWBEIo36QIga5gthyO7xkuAGQjHgKbXeBcXigbnsrZZ7RFdRS5O6GV9lPj8EMXwhxCdSorkConBqynVrdUH2QsPnsm46gt3tpGXfEnY59AEsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"a99773d7ec48c214f2ca83404cce6ec7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea7fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17926\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17926,"size_decoded":18771,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"def23bd954fa4636d279fe3ec3d01702","sha1":"7dfcc82f6d438ea6225e0cd2a617fc5ccbaf722c","sha256":"1f242475159dbed5cb36b8db03a8e51c8a82c08f1775125e00e445ca3a269c78","sha512":"e8e4aadce2325328830501fcbc0c6c8a5300f05e7ef65ddb245a8262f43c0e7bce4c98d6c2e701e142c901048bffe0da1e63aea85a5146933f375ec475e7792c","ssdeep":"384:GDqa274r3/VGykndUiGtcmy50wRZFnmzSXfNPJz0z61NpNN2:GPpr3Uykn+ChZMzSAW1h","tlshash":"c382d088e5eda7f8dc72f03895c0e25783f6cd176f9722c53aa419b9c644121c5eb392","first_seen":"2026-08-06T03:50:47.806964Z","last_seen":"2026-08-15T18:37:57.148593Z","times_seen":7,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/qveMy5MkO4kbjuCYDwsE5ASPAM1yqcxMPqr9a4Pw.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.911Z","timestamp":1786819045911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/qveMy5MkO4kbjuCYDwsE5ASPAM1yqcxMPqr9a4Pw.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnG8%2FrEMfkaevy2b2T%2FYM4uTiD9k%2FaYdKkwRcRrCxbigJY49AnSN7PgD4iRuJb3UvaAGBtPaBUf4q144cygCrIwJlYACq09%2FAmSuJFNMoNicVrKJqsdhUxryu6b54B5unQwLZ%2F2dgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"26a2f6aab881b7140d96ba9e7119da95\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cea80b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20982,"size_decoded":21835,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f9e403281c35abee713175e3f053d09","sha1":"b35ffa31b96bcff5d4d2897d0209ce9f4bac14b5","sha256":"836d364384b4f5005392d2dd8c0a5f914b6dbd847f0b389a6d6fa5dc2c550a66","sha512":"542055bb07cd72895a7199fe01c33bdcfabc1272c72ef694fc085ac74d336e6c6375d1fc73dd2672bf3ed1e89216b7321640f71785516d53bde6e92a2191904f","ssdeep":"384:Si1QiYhCVv+f4EqfapCZbFR7M4kcQusYsp6y1i6v+0f9HiJhMMV/vNNm:SuQlhQ+f4Eqi4br7M42usYsMyR+6iEMQ","tlshash":"8092f18132d383d321923d5aac37e79fca21cecee6dd518cd30989f81910ae412279bc","first_seen":"2026-04-14T04:05:49.330951Z","last_seen":"2026-08-15T18:37:57.14916Z","times_seen":13,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/mbBw7szwUJ86PvuYINPWPtOrnLrwhYqSnqN2hJB3.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.915Z","timestamp":1786819045915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/mbBw7szwUJ86PvuYINPWPtOrnLrwhYqSnqN2hJB3.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWjjHqJHfyWYKGO2F6DJDdkzY48lj9XGOz2ylMvKf%2FPzNGBfogFQc6OQ6VeGVWfNfqaY1W5brmr7rNHhTc7wJ8slBiCAKL1ImFWQsOamjVWHrZqbEZ%2BXoZeODDO2lQueVcMPjwbIFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"ce859cc63d82d8520bf33a3592a5c861\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa84b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22344,"size_decoded":23191,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 290x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f5e3dfa1db30ded2be37aabd702d871","sha1":"5e4980ac576349bf9ab86a396779f7213c027164","sha256":"7f19e5885ad2c1a8caf3eb43b94f1a0513e3f2287a73fea2bb0bf8be2b2a799c","sha512":"345b7b91462716b3e6a7da9d3e8a1905ed130d8f41d175fbde54161a461c1d811c3707b462aab436a7fce7ad4fbc759f50996f8f7e74a2f95f4ed167a9a263d8","ssdeep":"384:qZakI0hUUWw0AqMcGSJZndE8yOodPjRXvO8rJMrhNl0mavK8irFFGZqU8mwIVpb0:q8khUJjZndE8yOs7RXDN07l0mV8vZqfl","tlshash":"64a2e149eee4ae78180f704aebd8e0b2df1704bb180505fbf4110a25449be5d9ed5adc","first_seen":"2026-03-28T01:48:10.121881Z","last_seen":"2026-08-15T18:37:57.150306Z","times_seen":22,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/CId6y3Q4WKgR5ud37NQ7mMkD08zXViHBY96WRwsG.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.932Z","timestamp":1786819045932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/CId6y3Q4WKgR5ud37NQ7mMkD08zXViHBY96WRwsG.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVr5vhKP6Pc8s2hUaLL5luORwVllXwAqba7A0O2wtnVU4buDTngAE5c%2B36jztBrvrVBzKyKLZkv6uzElEL4jmbiz47qHY6jsQ1Ks8FwAhnnxxtTte9F3U1YmD%2FIKyVekaxvsJtjkmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"b080e0d030678bd4669544009b1f9165\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d0a98b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 173291\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173291,"size_decoded":174138,"mime_type":"image/png","magic":"PNG image data, 508 x 492, 8-bit/color RGBA, non-interlaced","md5":"1d2139cf4799185f66f5028a3a91f623","sha1":"89cc9e30df299397f3c1d2fe1f2e9abbd14c84e0","sha256":"10057eca8d2e3fb6e6764f4ae5fa48c30e7057a42830fd35bd1f5eca2bf5e1b5","sha512":"0a74105b4e3832f7a685a8d9f233722f551ef0502720f74eef1def17641265e451abf2d3f8796480b093a214da839c4903f93e0b2e69c7e8bc54e428becc2ceb","ssdeep":"3072:srK4Xhr22KMxY44VbNRMxvlxAHgR66+5gA2P9pAJKShN4I9KnXgnUZiXCo+tq+Ue:srK4XhC2HxY46bNRmagA6+J21rShOIoB","tlshash":"cd04126bdcfc2af5b93022672727afe955914b1243522385b0f74c08645c3b699acefc","first_seen":"2026-05-07T04:15:00.065863Z","last_seen":"2026-08-15T18:37:57.151001Z","times_seen":56,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/Nt7RZw2BkKhVnQtmGBVgTe1xwuKPmnxdUosyP1hU.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.950Z","timestamp":1786819045950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/Nt7RZw2BkKhVnQtmGBVgTe1xwuKPmnxdUosyP1hU.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HpwrWlYdS9k0v4vvNdt%2Bn4PjnAP9XdurXT87SGRnhESrfSiWxAng7vxiak2GoKpUNZYZRRZCX830JLq%2BsUgm8jE2fevte34j1xK0gaXSzoZPW36cjVsvOm%2FwpVRhE%2FQ%2F1ULmZBYiIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"63bca47b2829d3e32ee8212544da7561\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aabb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3230,"size_decoded":2263,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13085c50494d881d4d59e292cf8875ed","sha1":"c07c440d044314b5869463b87d14c9cfe0f7ef66","sha256":"e55762b2e66b5e376422442f6a46f6e5004c6b24f1b1feee5bc0a2a6af6bfd15","sha512":"63f6385552f2f12577ebfb0b756436844c2aacebb1608a712c620d66155bdf161d9699a04a339c7231e53b59241bfa2ad9f716a495cc2dda7a35cfbe2154fdd8","ssdeep":"","tlshash":"766142d473eda2e8d206f3b91b16b4a2fe6230e5a7448e74dbd13d0a145b45eed110f8","first_seen":"2026-03-28T01:48:10.059462Z","last_seen":"2026-08-15T18:37:57.151828Z","times_seen":68,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/fonts/icons.woff2","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:26.107Z","timestamp":1786819046107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /fonts/icons.woff2 HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://rainbet-casino-c.com/css/style.min.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j48HIZ9bQ3LSjxpWMFu%2FEsGIy3Nnh09lr%2FsvNL%2F%2BKKo8e%2BnKDBOzG8djh72%2Br0mp4%2BLwv4nAm21dM4dbzPeBBdRAeY8vAteT5GRufksE0fFyws93V0LbRbnH6Ix2jJZJUHxV002w8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"281d06ba917db5384d5fa3c91fef9c43\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:26 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7e2accb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":2239,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 1380, version 1.0","md5":"3a83654156ea6ac17189d2bb1b74f1d8","sha1":"094cf21578a879285fc838221974f1660d77d14a","sha256":"6990a724dd2d603a4f12487fd8acbc0e291da532c33419ac54c2e45c9bfc23dd","sha512":"2f266bd123e4625536c38753d036bb9104be962360d9355b1f039fbab75c85057fcf9633b5ed3b9e55b751ffd1a80053cbb1c5e868b7e813336731fe08f92b07","ssdeep":"","tlshash":"0f21083b326a7613dd31e3bc6d751a08289eb731242bcb42798c0652f0f88ea14b6473","first_seen":"2026-03-28T01:48:09.99655Z","last_seen":"2026-08-17T11:56:32.918047Z","times_seen":89,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/plzYq8ceZo7fPfYAHEAEMGOVRxFGArJgULIvcjJp.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.913Z","timestamp":1786819045913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/plzYq8ceZo7fPfYAHEAEMGOVRxFGArJgULIvcjJp.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZRaV%2FL7FaeW3dcs4DIqz6oIQAHX20UTVqzmdAHpCHK0MOqkUBcUehRfbHyLklFEAP7EMZpROIw4Rig3J%2FeBdVbg86vAJwIw%2F7qrpSPDdrzgCuHOXB%2BrjfAI43pV3RoyfhS7C3TvnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"eabfb4356acb733835a2f5d7dee3e949\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cfa83b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15412,"size_decoded":16263,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 427x575, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0926e628181b2ee24496a3cc483b0785","sha1":"c3f7689e2778d2c511738b14249063ef0233a885","sha256":"dddfff5551a1efe8bb6d53ff9d53c1026b1b7cfd89eb727d0cd6f9559d5951d7","sha512":"cd0d3fd71aec8e03a2e1a0299577ebf3b265f592d2a800c49089c6b51d8cacf3100f5c77494095ca5e6c4e31b51e592ed8f83eda5e32a8e204eae82aaf190052","ssdeep":"384:Gp5gwlWNacdhiFYNwez/vBVvXfvG375rBg9ULPRCiZr5OoUUnz90ntyu:kCw8Z3HjzvPvGTgSLPsi7LUURqt7","tlshash":"6362d11c7266f399acbc269f160a70d788c8d4551c1df34567118a09e7bf38f38922f5","first_seen":"2026-07-22T10:05:42.087252Z","last_seen":"2026-08-15T18:37:57.1535Z","times_seen":11,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/QGcnrvOgZRTqLjtzZELlpUfsWpELIcxoQ2eJzQ09.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.941Z","timestamp":1786819045941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/QGcnrvOgZRTqLjtzZELlpUfsWpELIcxoQ2eJzQ09.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2k2HUUBvIot%2Fa9pjZac624AuCg%2BgE%2BYq46wcXX4lLvmDZgDpJYzDRZzXZS23%2FXebVjBA1woeHsjalRn4o6d1xtgrm8MR9CSnQ0N4Tr1tE1KrBgnAl8tVUjsykkF8e3KA8A0s6DDzew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"f4e670c1fa0c3d566b38b18b4b418c0e\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aa0b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23928,"size_decoded":6728,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6dacac3f1530c1b6f9a8d94963087b34","sha1":"b9d178381e46a5b52f155e6b2b68fca8bb069691","sha256":"7bd31689fd3f5cc72c2e0b03ab3b7f095aa4f61a91f94117d501e2b6bcd7ba72","sha512":"7d12e597859648fb48787c3a0e1396cb5f919218ab7d68819a78450879d536025a1f2eecc9d82a6a6eec265805296d3782158be39be45085051c232430ae28ea","ssdeep":"384:rcTPb90WVQZaCuL9BBzCeWag+51CFiz15bCWEs:rcTT90WVVLnge1tpbH","tlshash":"beb2a58432e9e3f1e188c1d0a3b315a5fc5834e4776a06ecfa6f19b99f176c1498d4a3","first_seen":"2026-03-30T18:40:21.700189Z","last_seen":"2026-08-17T11:56:32.869952Z","times_seen":69,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/Y0zlyL2IjvudstVuKhgsgjM6KpXQoB4ECTHnZeb4.png","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.948Z","timestamp":1786819045948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/Y0zlyL2IjvudstVuKhgsgjM6KpXQoB4ECTHnZeb4.png HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgMzUQb%2B0pDYgoAYwfRfGBVzY2rWRNhuuwhurLQBFJbva8H8RcpMiEc9RQZKZEQL%2F8KxWC79%2F37whK9rA6vcDsRRlUdp5r2xed6rOsCMOJ3CqS2JAZUEDcFnA%2F3uMsMB81uIhKq5Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"9a82a6ac4d70ae27a6b8961f43d291bf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7d2aa9b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21853\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21853,"size_decoded":22703,"mime_type":"image/png","magic":"PNG image data, 600 x 337, 8-bit/color RGBA, non-interlaced","md5":"3697f7c9f54497bdb826b740586638b6","sha1":"ce4b7554dcb1036b04ee8b33400a7e6f760bfa22","sha256":"30cdf0def2b233c58b2f9439ec27c2cd8ef50f95afcd855b59dc7e55a22a1fdf","sha512":"f2b51b7df6451ed61ca52e7ef050621834bc223aff79422ffcebff68d89d1b0550c6966a356d9f26dd2d6603185005c3636424ee0028f5531ddd09009b73463e","ssdeep":"384:NfBSbqHvPd43mpic76gPPaFTTE4v9jJm6yI3J+LrvvzwS9:xMGPdeNgPQTTE0xurzwK","tlshash":"63a29c2725c870329d27dc2e19590f24be13e420a8e45f74cf9c6a5db92fdb62d8314e","first_seen":"2026-04-24T23:22:41.97027Z","last_seen":"2026-08-17T11:56:32.915396Z","times_seen":48,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/Oz3bt3KaiCb7rPTU9B70BpgJK8621PKG8L9hZBwH.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.949Z","timestamp":1786819045949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/Oz3bt3KaiCb7rPTU9B70BpgJK8621PKG8L9hZBwH.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QffYaAHWYxJGyHCrW2QNQEZJna4njpn%2FXx9IqqLtnJtoNtJo%2B7lQI9zfCJS3yOoj%2BwJWP%2FHUmH6bnoGu3oeV%2FliEeJEQLX%2FIZWdL82Z9kIM2ioivq8kYjxsta0KDcVgCBAerweG%2BZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"b7c8598fcec65c724836390aad726d41\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d2aaab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6118,"size_decoded":3580,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"871e97bffcf7573c18dfc91beb3e4551","sha1":"7046f89f7de52af97eace08fab0bc2aa02cfe62c","sha256":"79a79ab344ba223c119950e8a5212e29d7b898214c1419c6d6e15b27c708ccb1","sha512":"e70ef8794c8ee87ea943c9795ace817abcb0d1824f844dd2b510a34f7e1d07aa07c2751ca6c4cdf364b05c97d3c2853c9b4b002e0169d9d6a961ec2a5b1ff395","ssdeep":"96:kIDdQzQrkNE20AUPOPFKUgfESLz0H3GaacU3CDRW8llKn4HvJ8goh+PYUepymvSl:BDdQS0E2lUWtKU80XvU3ClW8xPJSbUeo","tlshash":"89c11f8fa36cc6dc385916b4d83a26c33778e5ddd4a5e448d32eed11d007eaa772ca90","first_seen":"2025-08-24T17:38:13.238412Z","last_seen":"2026-08-15T18:37:57.157651Z","times_seen":74,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/MrQ3Pa2jpyE8BHAslBLIbQVZvRUukPcc36ruUHgo.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.899Z","timestamp":1786819045899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/MrQ3Pa2jpyE8BHAslBLIbQVZvRUukPcc36ruUHgo.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nv18q0%2BcxicTKf4oM%2BDTmzVMhZt7dvurLm9L%2Bi7kuTWTeTSiW82shNubKQu0rCJv21JsD6Witg%2BrN1tBPLShXraD0xaObnRzpGAltONToNTzztME0H1KZlm%2F8WFNgEI2TIkSPu2h%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"a47b28c5610ca9d3901fb6b3e99318f2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cda75b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18538,"size_decoded":19393,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1298e22d7ad78f31588d79a7793fe4f3","sha1":"bcc4f40ebba06eb66b8e370642c518c35124ea2e","sha256":"1143795bf5b929ea4113be1df4cb878a145d23f5031479363d42424cec18a53c","sha512":"54f2b72488c371630ceee98fb584b14871464971a8094ff3fab2326740dafc6984496934672a5363b1706370abae7d8505da4a85a29a2d6f9896129fe4918c04","ssdeep":"384:z2Ac46qfDp5SvP2Rv2TgwMFfLBgqKwFrqw6IC84Fxz+a6sb2d:nc1qjSG9KgRZKQrqRj84Fx1nE","tlshash":"0182c0f5b1ded37bfea991081a979217c11ff7914cbc16e329263125016f029392b878","first_seen":"2026-03-30T18:40:21.633623Z","last_seen":"2026-08-17T11:56:32.939584Z","times_seen":25,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/wuBGgDcXBthossy7JVuEgdwVg6gD23Jq9LnOcJ0G.webp","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.902Z","timestamp":1786819045902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/wuBGgDcXBthossy7JVuEgdwVg6gD23Jq9LnOcJ0G.webp HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJSzLhRftb6VO%2BovaQ2jRF8ZHZpgNJb2NrJJwBzrFg0K7ozZpTZPYinw%2BMPNNljPVveEMY3HOEZksZDmyZVz5UrqSQ%2FA4wkwAXBGgw%2FHvkhVvh69JLaHa1UlYo2Z6bmnEZSY%2BewLKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"e87b9c9da8e635ae52d94d25228f3a83\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\naccept-ranges: bytes\r\ncf-ray: a2ba4f7cda77b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24060,"size_decoded":24913,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e07e1e5e7a0aaf59fc37f74f42676d84","sha1":"84dd65e086cbb90afdd28ab59130cb2a5b058a45","sha256":"d44690dd71e41a147b29c000d975888c24deb96dba64230465474d799000a377","sha512":"e1f6c4854af507d1a010838c787d68ecb70dca1200095755f5311472e36ab867cd96089a37df20408300377e1c08e4f5190234127b1507ab440e8a2e811e0ded","ssdeep":"384:9qYBkhIvkHVWONL39OZJQqNhrWm0Uen2V0whBGbtOyEDW9POsHYKWoXilRD9n7:9qYRGL+J7NhuDE9KOyEjsHPTXilRd7","tlshash":"b0b2e01d05d31801a1f83316c72b2bff4702d661a75e0ea6e4250b836ac9e6b47f6f89","first_seen":"2026-03-04T15:45:56.034075Z","last_seen":"2026-08-15T18:37:57.158877Z","times_seen":8,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino-c.com/images/FulDAfkdIHCnYTIJhsIfUKHhfZN9hfrjnSLrmS2s.svg","fqdn":"rainbet-casino-c.com","domain":"rainbet-casino-c.com","tld":"com"},"ip":{"addr":"172.67.191.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino-c.com/","date":"2026-08-15T18:37:25.927Z","timestamp":1786819045927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino-c.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 05:28:32 GMT","end":"Thu, 01 Oct 2026 06:28:21 GMT"},"fingerprint":{"sha1":"7C:D8:E8:42:E3:E6:42:B7:14:CF:99:53:06:4C:B6:CA:49:27:7E:59","sha256":"E3:FC:0B:5C:90:D9:06:2E:6D:8D:1E:69:E9:14:2D:31:C8:29:0F:55:23:11:DC:4F:41:CC:00:20:B1:A1:05:83"}}},"request":{"raw":"GET /images/FulDAfkdIHCnYTIJhsIfUKHhfZN9hfrjnSLrmS2s.svg HTTP/1.1\r\nHost: rainbet-casino-c.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino-c.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tknPr6sDfp7SWd%2FGnD1%2F3PBN7qbYCOp2Gnl3cLvI7jb0QpCKDBBDDmcdMsnfm4QvzR4tUUCDMOJjhWnFrybPb2P%2F3083TBtIym11%2B%2Bl0ceqeoQDB%2BpuYu7Ys0ah9xQ0WXQYCnC3Pkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"9d203194420dd6a371e5682509f54ccd\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sat, 15 Aug 2026 18:37:25 GMT\r\nage: 1129\r\ncf-ray: a2ba4f7d0a93b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4252,"size_decoded":2661,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cee2b2e77ba75243a819f08eee7ea4c","sha1":"22788143733b3a6483b1867cad5f2bff6883b98b","sha256":"70e2a5bc7fa27efc63857a3868b273750ffe105e8d16dccee0a26026219ee78e","sha512":"40d5bd5d31756c04dbc92d6fec2dd9f0d86c976165f669ae31087e145604bf43dacbc22eac628c8516e12b05860ef9115125e08cf903352e2d8d6c252c4b3208","ssdeep":"96:wxM/HQqWzEOkf0z3ctK9FV97euJsjpbatW3Mws8jfWiYqdlayZh1cp:whqOksItK9FV9qjppJsiYqdlayZop","tlshash":"789186c8b32dd3e46888dbda3b3652ae3f29d1f5d295845dc3550f46a0a1cacdc12dc4","first_seen":"2026-03-28T01:48:10.112654Z","last_seen":"2026-08-17T11:56:32.841349Z","times_seen":62,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-casino-c.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}