{"report_id":"ec7e9e6b-ad41-4485-8f14-76b957d0da37","version":0,"status":"done","tags":[],"date":"2026-08-26T11:10:36Z","url":{"schema":"http","addr":"rainbet-casino2.com/","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"172.67.176.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-casino2.com/","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"title":"Rainbet Casino – Krypto-Slots \u0026 Provably Fair Games","dom":{"size":104180,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (899)","md5":"4a9cd71c8a8f6be2b31ad7f45f78454f","sha1":"8b2f43f23cbdb1a21f0c72f5f6c2fcb5a5ea0806","sha256":"57e64f91883c1f2178fe2673773af0d6da278952bf772914bb25b3382155c04d","sha512":"c40074355282f294a128bffee57b230551757572269c897a9c3183b7b13b4ebf4f083c1f49f7c18278f0682ddf0c09f4241b5352d0688de281e073b42c98cac6","ssdeep":"3072:066gGHg2scbMuzw+U8Jwi9nJKlSfxr3e8SgMgChRL2F:066gGHg2scbMuzw+U8JwidJKlSft3eP4","tlshash":"dea33b23c4f33647605763793fe5ab4a3728e003860aed24b69dd39a8f89a214c7775d","dom_hash":"domhash2824c4cc061f0c31c848145214d619a7","first_seen":"2026-08-26T11:10:37.766623Z","last_seen":"2026-08-26T11:10:37.766623Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-casino2.com/","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"172.67.176.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T11:10:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-casino2.com","ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-08-26T11:02:58.226764Z","last_seen":"2026-08-26T11:02:58.226764Z","alert_count":54,"request_count":27,"received_data":497139,"sent_data":15109,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imamuenaebetugif.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2026-01-02T09:50:32.385531Z","last_seen":"2026-08-23T22:02:23.038398Z","alert_count":0,"request_count":3,"received_data":6328,"sent_data":1364,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-casino2.com/","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335a26c0f3da95ade78a0b66b9fd0bd","sha1":"48c07ab3210cae590c0ac9a5edf5769c8bf407c6","sha256":"b16ce109a5b8f7e39966d36fb64c61bc2408e894c5eacd411e2a61ffe5947b78","sha512":"f03db0ee12e3a3827603113c0a141cd90aa219c65e4c436e58e7bdae9b54bf95c6c84f4b8671e56747e5f23bc8774357018821510fa20d0a626bf5994dc274a3","ssdeep":"","tlshash":"43114eefe2a706b019aeb17f5fd603083670849b390447153c2c5e915f91916a6f67cc","size":974,"data":"","first_seen":"2026-06-17T06:32:02.86318Z","last_seen":"2026-08-26T11:10:37.877321Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60f3c1fa92b1fcd6aa92ba04ab0a40b5","sha1":"ac915b2840945f3127084f136d205b7a419d1a65","sha256":"3d308c1fd7eb2b7a72fb53fc6a1a3f258db9785cbf4242c8595c657f750c1484","sha512":"5057bc7ec08c2d7660cee86bf169701c64c0b7028b64520859a09f85940f06949d35ffa3b3611a6c4b93d21e5df749b583c2f1dcb9532f5a746c8d08b8eecf01","ssdeep":"","tlshash":"fff0902d56766931447361eae7eb47d8396c34c7a1484a983c6caad90f098ea08a0f93","size":564,"data":"","first_seen":"2026-06-13T18:41:30.463163Z","last_seen":"2026-08-26T11:10:37.878676Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a1384c19b719fcae9e6099d46d93e47","sha1":"29c3c3200c941b5e72a229c87011ab884ce3bda0","sha256":"69a9cf53c0f73e00bc6c1f85fe04044cb271611c194d97dc747827b7f6c2663f","sha512":"f0b9809c5ab91e55c16638f3cce00cdc4f178a534fe82ac91d31557bcd5a6f03afb388f248d5cc2876edd195a9c5268e7207ef06f89d53d183b89eaedb36f5d2","ssdeep":"","tlshash":"9101c83507726030822be55656cbb38025e4a047e1429c6a3e5ccbde0fd5d92d0f7faa","size":763,"data":"","first_seen":"2026-06-13T18:41:30.464075Z","last_seen":"2026-08-26T11:10:37.879645Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/script.js?v=2","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","size":2688,"data":"","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-08-26T15:47:27.056543Z","times_seen":5245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Book_of_shadows/52c58173ec557e1967ecbe88c5d85891.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.752Z","timestamp":1787742609752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Book_of_shadows/52c58173ec557e1967ecbe88c5d85891.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 15:06:01 GMT\r\netag: \"6863f959-4d3c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nO6Tty08COOFt2yvWoCzlKU6lK9Kh%2F9Tnpo%2B9%2FfT4RNenzEEgRvp1MasL4i0BEeBPZF0hRuDL6dZgzzVZVI6HunU8ZvRPwx9sXrFaxQfiDFbe5zFNmb46vNF%2BYlIADdIA0y%2FxIj2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef982dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19772,"size_decoded":20521,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60a3c95d24e0b29eaf10f707649f9c29","sha1":"8b98d01c729d1ce65a1cd5b6290b1a0ff06448aa","sha256":"1a6d39fa85df6bcb35a28cc92daa1496fc7de36e80169ab379e20b2df95521bf","sha512":"f979b09e801446301c71029e9220550842db89bf4ec185fe056fb40bec7d1ee5866f3df3fc6b103f8d25286cc599b2ef72c1e1ab30f7bc3cf6f403baf2889dfd","ssdeep":"384:QDIlicZHUSnSuCXUbE0mbu30/6/HTDKjwgS+mufLiObjKhXCFaSAl8u3iQLm75ip:Q2zSJP0my3A6/vKjLVnLNbjKhSUSyp3P","tlshash":"7b92d1b7219f42bfe41e6733da18127c7e8ca8578175b0bf44e296292df4030abd6621","first_seen":"2026-07-28T16:27:16.49554Z","last_seen":"2026-08-26T11:10:37.771388Z","times_seen":32,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Burning-Hot/67061eaf25ae607a821a882f5d8b795b.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.754Z","timestamp":1787742609754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Burning-Hot/67061eaf25ae607a821a882f5d8b795b.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 15:06:02 GMT\r\netag: \"6863f95a-3f48\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Joibm15dlrH5s6F0WwmuRSK06IdhDbw%2F8Zjgr2CXE25wuXGZmk5MTh4eQSkKcjxZAe8AQCfHWhbXc%2FpJBBg1UXeuzpdL2cSRh%2F4AEB1gvpFOsnPscMwxtY0jIIhe88Iz%2BegL8wAo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef983dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16200,"size_decoded":16947,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"390b89a6730ba65c99ee924071992072","sha1":"686387f4624a6cebc2b96694820ea14fd5da7ab4","sha256":"746f31b24e3ac4d35b81490826080cde18981431c3c73bf23a9e0e391bf5f90b","sha512":"f8e2eae8c831207c27fca5efcf2ebb1635558e3afeef21d455ef16271cb15f8103fba05b710d017a4941ff1e4b21e6e2cb81f15e32d8eae66c0f73e206b74fe8","ssdeep":"384:ZjLxTQGp/ygMVoOnN16cn0b4NFRpi/KMCTjknozEcXYlvlGNDtvRF:Zxz/ygM+ON16nb6LOKMCTHEcXYlvs/RF","tlshash":"0572d0a2bcf708a513037ff4bd1442dda449906b05d86b2ec59a09b0a178cbdeda4777","first_seen":"2026-07-28T16:27:16.516826Z","last_seen":"2026-08-26T11:10:37.77506Z","times_seen":31,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Cubes-2/9d2938b705f0865f24a96c24029c8cda.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.758Z","timestamp":1787742609758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Cubes-2/9d2938b705f0865f24a96c24029c8cda.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 15:06:02 GMT\r\netag: \"6863f95a-3154\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XAsoW5%2FPniY560Y083xzigVukbge7JF5DtsaeDyz6hVXpVNjoezRxK3ElKHFC%2FcNqaAnTCMQG%2Bb9d2yKAhMX6uAuMFq4lD2nMoYPR4EBw9VgDsC2RPKuNThtk%2BHOw3I%2FDxEnWBy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef987dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12628,"size_decoded":13377,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e34b203517f6542ab992844a1514c95","sha1":"40e3d54416a8b593936b01d0a0627dc22133ed9b","sha256":"0d4954359af6690d2c2f430d9c5c7b2a71c110e3a4d34627097573dcfd75aa0c","sha512":"d6918b5c5b084ad671b22bf65f93dbb61526eefc816411d997a5f5780cb9f67f8fead038b5eb67eb9e18a2777f1662b323fe72ad007a8e9f2760eaabaf92c2b4","ssdeep":"192:ixUDSxI2auQxLdVHpgtrffV7zI0XpjWg/GcDkvd5HYvj4leWOO7GSLDBli7ry:bcNYxLXpgXzVt3G3vd54LC37GSRli7u","tlshash":"b742cf556f92c948e0bdd89d78ffb04ce03e4485a7f44c62c52b16ee496b8fc2341142","first_seen":"2026-07-28T16:27:16.527899Z","last_seen":"2026-08-26T11:10:37.778547Z","times_seen":31,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/static/sites/img/icon-arrow.svg","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.762Z","timestamp":1787742609762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /static/sites/img/icon-arrow.svg HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a1075b2-1f9\"\r\npriority: u=4,i\r\nlast-modified: Fri, 22 May 2026 15:26:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpOclpAd1QcOCG4uTvyOW%2BDbXZ%2B4IOr7iRzwgOvprgFDA8aqrgsXjJJVaDBRRxc2jRzeJzOrqYds2LYHOl9KEq%2F3oLApvnx5f0qm6NPAxQ3GATWgN4ApSVQmKVeH%2FYteeqLxrT%2BD\"}]}\r\nage: 469\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a312636f098bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":1044,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c4c9ca47bc762339abc0dbb8ac6373f","sha1":"c1baa987d07e37d4f52f9568f8d201bd71f6b9da","sha256":"98fb55091cbc275342579798246369acd43a4c0fbaebbe4f5b1741d9aa182ed2","sha512":"b4b63bcfff2bae82236a88fdc2ac587089891816e1d72861fdbbfd0c4a74d0cd312e180fbfea955faad512f13fb7293654c148d57b4199450ebaac465b3aca59","ssdeep":"","tlshash":"98f09e9943ac96846906575d5e27a1fd9c3e64f71b8580dda0072025b48556ddb0ce88","first_seen":"2025-09-18T04:19:42.949137Z","last_seen":"2026-08-26T11:10:37.782072Z","times_seen":65,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/script.js?v=2","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.731Z","timestamp":1787742609731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imamuenaebetugif.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 02:23:55 GMT","end":"Sun, 01 Nov 2026 03:19:37 GMT"},"fingerprint":{"sha1":"88:C0:F5:62:08:76:CE:B8:92:CE:C9:8C:C9:34:91:53:54:F2:26:D4","sha256":"4F:34:42:1C:B4:27:98:8C:4B:EE:8A:C9:97:7F:78:9E:E9:21:33:39:E0:4A:5A:71:9F:26:01:0C:C2:62:07:30"}}},"request":{"raw":"GET /script.js?v=2 HTTP/1.1\r\nHost: imamuenaebetugif.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Fri, 12 Dec 2025 04:19:16 GMT\r\netag: W/\"a80-19b10c8d5a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 2936\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Icw9Ee1%2BPDjU57xdqHF4KL8JlZNyD47XQrn7VVS1%2FUfZEVGj6MjEWRVmtVcMJ0YvJcfpZnVEQb%2Fz7kDhQHRfNqao7s8KpcURksA40ChW36P19EqiXdT1WWVFrAJu%2BjFt4Hd1tNkN6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f4ff1b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2688,"size_decoded":2533,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2687)","md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-08-26T15:47:27.056543Z","times_seen":5245,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":55,"connect":17,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/favicon/128x128/98aa85c429c6842b76be5a91bb0da1cb.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.873Z","timestamp":1787742609873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/favicon/128x128/98aa85c429c6842b76be5a91bb0da1cb.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 08 Dec 2025 08:35:58 GMT\r\netag: \"69368dee-3f3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 468\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIIJq4i9X%2BKcOc8yaQW6SKoyx8KKSkBWMabqSNYGcJZnm2WS3JnlaEFUB%2BoBHc5JYrzBYmrK8xD74Q3W9ljxYQxncv40NAF%2B4n7G0QcBKKa%2FsGzPhaHD%2BEY2zbXN82%2BngTTzI8dM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636fb9b7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16186\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16186,"size_decoded":16939,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGB, non-interlaced","md5":"0987886edcf61641a736efbce8450947","sha1":"d0b9e45f64c3604223adeeb540e4f1d64ea01174","sha256":"a6c69919ce2dd3354a0217f490a71ac111c71cd9bd9c94d158e91af84b59cb98","sha512":"e30ca1620398a718df374ff0df0a35835ba56b9e401b4b39d259a91b0916ce08b0e9c6478c0c193171a0d213afa2aa34a2cff7ec8edcc3e541be7418b0a73a6a","ssdeep":"384:5YIHFYGgtRA5pkpC8ZkQpq/JOYRsMnPnzBXXPuXZHOLZXh2+:FqspkpnWQIhOYdPzB2pHOLB","tlshash":"3872cfa554ecbbaa6796d3fcc9d10dc405315a6cd8324ee0ca2cdb312a2f079b163e57","first_seen":"2026-07-15T03:08:34.01759Z","last_seen":"2026-08-26T11:10:37.791344Z","times_seen":41,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/usdt2.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.770Z","timestamp":1787742609770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/usdt2.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 19 Nov 2025 11:12:49 GMT\r\netag: \"691da631-622e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8Sb3iCkyC%2BtKjpF049qe4BAXy8GqY8lEq%2FisuV7BpO3WOU96XNrHDZP1ARdt5yurvSuseh5X8H7E%2FszzMYVxMtoJrsD9GeJ0Zv0Fw9xlv0XP6R79eqrtKOlFTW0bPaIKI27SyIm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f0994dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25134,"size_decoded":25878,"mime_type":"image/png","magic":"PNG image data, 640 x 360, 8-bit/color RGBA, non-interlaced","md5":"921b64d4aa28ba5d6d78fc277bfa2eed","sha1":"af4f7af99fb7cd6ea928e3d80b1b2a328cffb608","sha256":"59406c0e7ef3a9f05b42930de1a8060d2cadbc0ca50e7f4d879c009252695d25","sha512":"57ec878189472f28458e285f92387c6517403afd11ea5930aa1d53533a081320f1bc13c18996a5fe754f44395753278150a08adc3e9ac3712a63fbeb00e333c8","ssdeep":"768:YCFssssssssssssssssssssssssUW5CLkb9pvBigQjRWxW6O+yOlVF7sG5n/K5n6:YgssssssssssssssssssssssssUcppp/","tlshash":"bab2ae3483408c73eeede7965e1315a4dced3ea1f625fa08fb4727171297b09406aa1d","first_seen":"2023-05-23T13:47:29Z","last_seen":"2026-08-26T11:10:37.796208Z","times_seen":46,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Book-of-Dead_PxE8DEI/507be2dca18423ca2475e106129b8f99.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.751Z","timestamp":1787742609751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Book-of-Dead_PxE8DEI/507be2dca18423ca2475e106129b8f99.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:25 GMT\r\netag: \"6863f1f1-4760\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3R%2FEcpyr%2BamGxi5ouQ%2FGcE7l3WV7XufDueWJ7rc0cmSMSlAvuAOcblH%2BrDi8j3kwlwar6N9vLeqEi%2F1NtEy71AJduzbW7u%2FAtsIXrUoZay5kMozRF83liiHy%2BOTLesujlSWcQxnj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef980dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18272,"size_decoded":19025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60d4f44e80284e7f904f24e24e442ff2","sha1":"aa705a173cb5640cb346a177bda5fbb8c63b43b7","sha256":"47b495cf394fa1587849d008d8cb07505ebef0f87d92ec610f360182053995f6","sha512":"edbcc80dd53e95196ea001d00bd9c03913be309922ed34a1cde16ccb1f0d20d01494a963257cbf74e04486cfba28b148733a5c5a9f5fe7a69ad794e27c3f6c36","ssdeep":"384:ioMgDf2Xt1aJ/LQlMvkNZYOYpZZDH/BvEOr3plx3rx7uxGr39Me:ioFQ1aJzQl3ZHYpZZD59NCxGCe","tlshash":"b382e07625538c0ce12937b81e034d8a7b3e4991116b41db6fab2a1d282613be85f83d","first_seen":"2025-09-18T04:19:42.941091Z","last_seen":"2026-08-26T11:10:37.799803Z","times_seen":58,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/bitcoin.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.763Z","timestamp":1787742609763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/bitcoin.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 19 Nov 2025 11:13:58 GMT\r\netag: \"691da676-15b6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRAPfd7n4luoXjjmQReMkGgwqqbpc1FL9lq6tMBBOoi9K0qsl7feE24kXDbhSTBId%2Fsyi2QkwBwXgJ5XXYXHrEol3153b5igjMK%2FEo5jpTcvn4AZteJ0fgsXWte154XeswflTnKl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f098cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5558,"size_decoded":6299,"mime_type":"image/png","magic":"PNG image data, 640 x 360, 8-bit colormap, non-interlaced","md5":"f88742199727ecf39d214105aa65be47","sha1":"5449fe5885a8a67e20a77b08764a9c1c91b6608e","sha256":"2a06aca35cdd558aaac5781a8ac7f9fb3d9b149f9616f1cd420d8a71a0dbc1c8","sha512":"d2d415c571997c236ca0b04cfb95fa3b43a7661a389059aafcb1e01a1a3d9c700465937d9dfce0d4f37450495ee35485555e5fc0236e920ab436355deaf2f842","ssdeep":"96:ITXT/SC8Hw1/S3EzSh/n5Wm8oqrCYjh5Ajhqtw+NBZmqWdrfvNOO4NfD7I:Q58Hw16UOhB0oq+KCjhqtB4qWJfFORNg","tlshash":"c9b15bc2b21b9935fca21db15728875dcd2c6d171a4acb01d12e30278abb7bb4775f06","first_seen":"2023-05-23T13:47:29Z","last_seen":"2026-08-26T11:10:37.805558Z","times_seen":48,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/payment/Ethereum.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.764Z","timestamp":1787742609764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/payment/Ethereum.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:24 GMT\r\netag: \"6821c640-a29\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91EW4MucsKEjOmUfH0QRD08sdXdEMloXJ2uwBUocLiPWkyM%2B4A4f9u31%2By7MGr4hB45YHeIuTgEDxMsCUsh7AAzYB6o5wYCs9Kwf4Lj4tRVTBp7MT6YK7FfYf6LRZPRrgyPu2UqW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f098edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2601\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2601,"size_decoded":3341,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"77dc3c3b48df3db9916718bfa57a4560","sha1":"e73ef3159d276b1c12a8b652497ef638e4526a55","sha256":"0c4d21a009aa8ea67ff01859145b02c2d67e900880f8b289b71fecd777db6983","sha512":"a0eca6621dc0a05cdb8cedc97e3538042a63977a759dce94295703d6d719558374b4f7d301efeb829356de1ed057c0329b2b019b73078db779c88efbbd218b66","ssdeep":"","tlshash":"5e510906d97984c12ec4f5d688f2905bdc128fc0c6c4e436acdeca668b668b48d662cf","first_seen":"2026-01-02T09:50:37.294067Z","last_seen":"2026-08-26T11:10:37.81044Z","times_seen":48,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/payment/PayPal.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.767Z","timestamp":1787742609767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/payment/PayPal.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:33 GMT\r\netag: \"6821c649-936\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5h%2BotsAPVSKqseM5NjAGNA0a%2BWS9fTuaFAQ8nfhd2uHMz5MxPs3HziqhgsEEqe9ttrTYmB8hQ1DiYpAVM%2F4%2FmrowvWj2gjg6viv1493OFyiA%2FapQjVFDFTVljc1PMkvVNOXAV0%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f0991dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2358,"size_decoded":3106,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"bf9716cb6cf4f4fcec9867ae28846f3c","sha1":"cd5529dadd16b0045926c5ee897519336bb0b57b","sha256":"e2ffb7934c324c8ccbd0987c2a599af8984b3ffe9a3fede0bdb7905b42bf723e","sha512":"e3829c1d67bf2acda50f684e4959a80b5340e58b6a8273c6c428585b54ff88151618a83a29721d25bef27844897bc15d73c44e20c06b76b149ad6bda6051a7d1","ssdeep":"","tlshash":"75413a8db938d982928c8dc02df11036af0b49859a44557a799e8c2eddd403474fc0df","first_seen":"2025-10-29T00:41:44.30589Z","last_seen":"2026-08-26T11:10:37.816184Z","times_seen":44,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/api/send","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.883Z","timestamp":1787742609883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imamuenaebetugif.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 02:23:55 GMT","end":"Sun, 01 Nov 2026 03:19:37 GMT"},"fingerprint":{"sha1":"88:C0:F5:62:08:76:CE:B8:92:CE:C9:8C:C9:34:91:53:54:F2:26:D4","sha256":"4F:34:42:1C:B4:27:98:8C:4B:EE:8A:C9:97:7F:78:9E:E9:21:33:39:E0:4A:5A:71:9F:26:01:0C:C2:62:07:30"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: imamuenaebetugif.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 265\r\nOrigin: https://rainbet-casino2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":265,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"317334dc-6954-4ff0-9857-1144cd2d14b5\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Rainbet Casino – Krypto-Slots \u0026 Provably Fair Games\",\"hostname\":\"rainbet-casino2.com\",\"url\":\"https://rainbet-casino2.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 11:10:10 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4a%2FnwAhzwJmE1x7EDga2sjljVvMDCv08uGsP8rHDsjGQhl2wIWI5XHGpJIYGm%2FFrqay01W8KdoVzrqk6prSHE8gw%2F1td6oon%2F%2Bo8ZjGa1I9yLcipqzJ9eAP89XLZgzbUMqm2fbPoQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3126370ac28c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":1460,"mime_type":"application/json","magic":"JSON text data","md5":"b6c5f21d6bfa63ada0caa182b4e590e0","sha1":"c1152b33f34b5e3870b7ab0808bd48412d60bf2c","sha256":"3609a1d23b3d77f30a2b063e4b392beaa18fe557af1a208b78d0d7d3c8d4731c","sha512":"3a4aeb0a84b211ed13514f16208ccae7927411857770ad0da2969222e18452c1cd3558adc8f38b7b1fa6c606743c94251af733333b2b6530d003bf4186e59fc0","ssdeep":"","tlshash":"6ae08a47a4756dd53020360d5dc4170c0fc1cf74fb5104dc80f43033d64454314472c4","first_seen":"2026-08-26T11:10:37.81773Z","last_seen":"2026-08-26T11:10:37.81773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/payment/PaySafeCard.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.768Z","timestamp":1787742609768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/payment/PaySafeCard.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:33 GMT\r\netag: \"6821c649-a28\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6J7p4etbs9SiYmG45SD35jponHVg%2B4H5bdSYJruT2Ys0ApiG7EfXLNGH7iNS7JMYevzoOtvWhTg3n6G5wYOzBmnaZTbwu3LSKY%2BuF6eZd2SVHm392h8pCzLWYwq7zBUnF4kXe5tH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f0992dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2600,"size_decoded":3340,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"f96f5548d00e864a3541ac08990c783f","sha1":"174bb81a9abead01b7ae25dab4d9911dd03f423b","sha256":"43218a24f06856a108e0aa00bfe72df226eeac5d11001b5af47eb08accb47602","sha512":"2d5fe0c70ccc6774690cb31253209775c26372b45be377789f64886882b01954822a0d295cf71fdacf0f696ee4a2df46b40b59746fb02349cced66d518e8281d","ssdeep":"","tlshash":"fa513c4dedd0459285a9f14202eba077ec17034051e5edfba98de11711b1cfe5de89cb","first_seen":"2026-07-15T03:08:34.039307Z","last_seen":"2026-08-26T11:10:37.820897Z","times_seen":41,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/payment/Visa.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.771Z","timestamp":1787742609771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/payment/Visa.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:24 GMT\r\netag: \"6821c640-f6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hasUwZwBCQSYTUULvuvShdBPmE4gtcmGQbTSA9ATiVMeUiQbrpd9BJrSXITLrHvVkTszfQFmPRro5lm1bd%2FvdSABHuc%2F5eDyfzTCUgQ80aQBEHXawZcFsWMRI%2BvHy8PYN9YNPMB%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f1995dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3946,"size_decoded":4690,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"01e32b67162a767ca8eb2be8f865b076","sha1":"4ea76a4b75e39e57cb58125bbffaed1ea3fd6150","sha256":"18e75d672e883616603620b1f9e50011ed240844af5ed39c4c6d319ef4ad9e1d","sha512":"e0018db83c74967dca2c9ac14d0830252dfb5d2ebb9ab0c61eaa8da2bb78dd75fc1a20304a3c7c02e9705a48af603cacc5fa8fc7d170d252b2985ccc1a318f7f","ssdeep":"","tlshash":"a5815c5e8e0b78c397d1e5ebe5f99c2b4543418055d0fec437c6c40a5aa05a28998aef","first_seen":"2025-10-08T10:43:09.291995Z","last_seen":"2026-08-26T11:10:37.822005Z","times_seen":46,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Big-Bass-Splash_kCh03uY/0df72e280fcf9495266198c2a89d8eb4.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.750Z","timestamp":1787742609750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Big-Bass-Splash_kCh03uY/0df72e280fcf9495266198c2a89d8eb4.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:24 GMT\r\netag: \"6863f1f0-5f62\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nc29EuXtpWyT%2BEh%2B0fVqgL2kU4nJoVI0i%2FGpBkQILB0%2Bi0f6PTGRV5U8ql7nvD9i6dhnblZX8%2BAjsicUilEdHTkL7j8sXLdu6RigoFCTSlbCs0ecnShthd8bLpXLmnt5ss7TlBn%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ee97fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24418,"size_decoded":25169,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed9cb507b0bee5a5a9851de3929918fb","sha1":"11da479ff7f3827fc18d2a2ff4ec0a226ef4a07f","sha256":"331ac20f7e6071485be38bf2e4e72e242d847549870655c55b8b79d55b9ab7cb","sha512":"1625c6f69c365c509c7aad32357fa3083fe3a8e538ecad3e3b7b47a974a01a3d30b0b54d367d98ffe274c600f1160ea9e115599aad8bfbb3e6e73915e598e2ef","ssdeep":"384:hUXoW6c17Ta7SL+0KcDmo12s0n9Yw1VQzN9h3S14BgUDOLVLIyQcjTou7ee7eu8b:SXoW6c17uG1DuBfVQ59rBgU6LV2cryeO","tlshash":"5eb2e0be4099831a36cb38b5149898dfb17c4d19b56b3a33694cd5bed1901a39ef0fb0","first_seen":"2025-09-18T04:19:42.947825Z","last_seen":"2026-08-26T11:10:37.822871Z","times_seen":60,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/favicon/128x128/1968dcf298dbba070123f13fa01b0c8f.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.874Z","timestamp":1787742609874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/favicon/128x128/1968dcf298dbba070123f13fa01b0c8f.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 08 Dec 2025 08:35:58 GMT\r\netag: \"69368dee-274\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 468\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwrtJgB92B7wlbB59IMwS0QaIAouWOuXsv%2FjC%2FoNeM%2FxZMTdgtN8KLM2f6RhON6ucRNAnUEM7mXIbwRGM7TvEMHbHr%2FEmAWqm%2FxWwxu9AdlClWoMu8%2FzWbDzN%2Fzoh%2FtV9BR4NKVF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636fb9b8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":1382,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"0cbac3b643b93bb6ba143cb9c71deef7","sha1":"192b94de6a85110732530ba8914beeef32722621","sha256":"0e4681d3caf2647507ea750ce1afa812be80b3d0715af4ad4638104c4f738d73","sha512":"1726842bcd98e724a7f54f3f991577ea792beda1613f8d4c477a9abe27ded4356db681d26f44bb4af76ee2bd1554ce514b9c88835c77fd63edc19c74ed548739","ssdeep":"","tlshash":"11f0628b33821d7cc8a8137a8db362714ca10a0848f98c51cf2f2d0a180be2d03ed2a3","first_seen":"2026-07-15T03:08:34.018804Z","last_seen":"2026-08-26T11:10:37.823736Z","times_seen":41,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/banner/remove-the-text--up-to--4-000---500-free-spins--co_NiE4L1M/4b287ff2483a6b00f1c6493c3e763163.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.733Z","timestamp":1787742609733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/banner/remove-the-text--up-to--4-000---500-free-spins--co_NiE4L1M/4b287ff2483a6b00f1c6493c3e763163.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=3,i\r\nlast-modified: Wed, 20 May 2026 14:08:45 GMT\r\netag: \"6a0dc06d-1778a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxKFgmAhgZVFCUYkxRp5aL4N8XMGlSz6UUGjq%2BsvnxF2BvHWPwNhkmf%2BxdbrS3q83LrdTfXOAYwOY1bl0ES8%2F%2FN0gLldvQzNhJ3o5XxJHgu0cGu79BkWacubwxgDsYogMV17OAxy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ed97bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96138,"size_decoded":96886,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1180x516, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"557ccbef8f619e5125a0f10655bca1d1","sha1":"4139562e3a497c5f977e9cca6bff8ad29b523dc2","sha256":"e6eca480d3888bcc0157b7cf784760a0310816ec3a54897ff3cf771c3bb1dd74","sha512":"d8d0295c877b0f1a535b83636c9019de62ff888fd3f87730cd2566490bd0234f3568beb28b7f3166e7b3ca4b5ad7387220d9f3680c8967e972a5add6c44ddde4","ssdeep":"1536:7Lk2o5/cAe5dL8wlBM6BV7hGR0s0aFmhgx39BNFnux3lB+tLmFG:7Lk2o5/DkL8wg6BVhD27VudSB","tlshash":"fa9302ea51b2e8cbf2782a62974b5b3211c82eb1461058afcdc9f0f270e1b568d5571e","first_seen":"2026-07-15T07:58:06.681361Z","last_seen":"2026-08-26T11:10:37.824587Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/payment/Ripple.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.769Z","timestamp":1787742609769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/payment/Ripple.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:24 GMT\r\netag: \"6821c640-dff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MfQq20B3GeRm7c1VuJfcSupHAzEuNxYmUnu7y1PHlit5cpw0TvU2TAiXj9jbkpI%2Fs9qSZ0iQ4ySfhv7LAVXLf0HZyvm6pHEpusHm1u97QEH4bHxJV9CvfCQjNxFocZh6QEi8GB9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f0993dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3583,"size_decoded":4321,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"4823fd5b608b00c72d7adedbf0f86506","sha1":"d4f4a3697669b57aa6b46d9e37885bb74ac73138","sha256":"cba88bb0ea7a602f596a955e585aa60f245fb5c03d4a87efc18b2d2d1e270e56","sha512":"483a8266ffb568f0cedca2090cd30497cbd8260bae55cfba14e23d8aa85f852aa87f61490c9d12c7eda40dc259eeb06578e1e28ef21ec3bb7f4a1e001365d23e","ssdeep":"","tlshash":"e0714b8cb881e7a051aeec841ce6c8830de54bc506d4e9fb95cec83649185ed612ecdb","first_seen":"2026-04-10T09:56:16.259858Z","last_seen":"2026-08-26T11:10:37.825392Z","times_seen":42,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/648b6052a0c5236eb036fdb7_skrill-1.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.772Z","timestamp":1787742609772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/648b6052a0c5236eb036fdb7_skrill-1.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Thu, 11 Sep 2025 17:10:45 GMT\r\netag: \"68c30295-1562\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvvKlT2F57968Ba%2BARuFla3LF4vDJFFq64lqilyw%2BXG6ruvFINV%2FHyW04szD1EBjjs6FH6kVrvVy5xdce5fnRERidKFkJN2BskiBOf%2FM65I5kNN4tNOmSZLdrzAtYNfXoQ1X0m9z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f1996dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5474,"size_decoded":6220,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cd63b1fb34a95e5c47c69d8753a9c2b1","sha1":"877b8bf216221d3dc9148b48a35bf6bf51aac028","sha256":"b764becedfa21af44b31d6d8b4bcb66371ad01349935d112526aa5f9ea6685b7","sha512":"f643c1b18bcbf39f5e2422c14ce387f19e550308848311136190d6cbfa80d20e37d715baeaacc41dc16f4b0ec0cfefd2eea90e2f81b757f238b3fe742560c764","ssdeep":"96:lgpyi0hrDceCafhv6XvaZ2M/H/Xf7rDxn1UzNyP:KUrDYc2iv/XnDxnec","tlshash":"f4b15c6d3430035ef1b59873bdac2cb59a167ed6a510f3e1f155a581c22e01bbf3a0a8","first_seen":"2026-07-15T03:08:34.033395Z","last_seen":"2026-08-26T11:10:37.826113Z","times_seen":41,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/logo/88C3OiI5074u196AJuW12h46kpk.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.816Z","timestamp":1787742609816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/logo/88C3OiI5074u196AJuW12h46kpk.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Mon, 08 Dec 2025 08:35:27 GMT\r\netag: \"69368dcf-4476\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TU8jGcr5vo3OSwTYzeZrsw0kV2swgFmUmmWtvVRJqoWrfhh7FHG3q4bygZQe7Dk8cXx%2BOmNp3ZzfMQ5Mt71Dto%2ByjE6GMLzbFwdMvwUq%2FaooEBAtJ6Xt5821k6BNltrKpeWx2GE7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f599cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17526,"size_decoded":18270,"mime_type":"image/png","magic":"PNG image data, 300 x 125, 8-bit/color RGBA, non-interlaced","md5":"2dc35242a1cb68bfc05b9089b5a9ef15","sha1":"4d89a59529954f45800a74ffd0a4dd10ebe6763e","sha256":"bbe650cead065af4f4149270381e947e8a01781bad513b125ff0474ced4e512f","sha512":"8875a05797cbc5182b5c14992444229c2882a7c5b1d2e6ea907ed7ad74d927817f1415e5daee27b15d85c9e88bf9ec16aed7618f6fb2326cc3d80e6cc984d3a3","ssdeep":"384:lh2QIXF0ZYJeR1sQzGBZpvLbOkIpjN0KAr0NLMfI+QM:ybF8jRSQzGBvzbOndqEkt7","tlshash":"8372d0416a61167866d3026fd3c31c3a39fa6d902b2a8f42fd1c5d9206f1f72c986ddc","first_seen":"2026-07-15T03:08:34.03456Z","last_seen":"2026-08-26T11:10:37.82704Z","times_seen":41,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:10:08.904Z","timestamp":1787742608904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nexpires: Wed, 26 Aug 2026 11:10:46 GMT\r\ncache-control: max-age=60\r\nage: 23\r\nx-frame-options: DENY\r\nvary: Cookie, accept-encoding\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnVaPcV3itNsaw888chIJQb6Y%2FyeepKVrErh0riuMvRyULSCqGK4L%2BTokdx7UkNxNkfiM7JWf9ytnPoMmjv27FHpib1dsQsgMEzIzCifdLaKf8yZbYo%2F4FjW0vtVPJSCas05rxGG\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3126369e8b1dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104419,"size_decoded":24176,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (899), with CRLF, LF line terminators","md5":"0a8222353ace93d40efdc993572760c4","sha1":"69f5480a038b81ff9b9ad8f6255e954b72329b11","sha256":"ef9c1a0465710f47e4a88a1e06fb65f1b59639ad7464855e3f65576de91cfc05","sha512":"7407312de0a6b91ca32693df265197180dbe33dd50e75ca7e2163f4786a411b31624cd66e23b3cfa56c562f6676b48356b9deab5857cf13208088dd74edf6803","ssdeep":"3072:h66gGHg2scbMuzw+U8Jwi9nOYl/axrGe8SgMgChRL2T:h66gGHg2scbMuzw+U8JwidOYl/atGePW","tlshash":"6ba34b23c4f33647605763793fe5ab4a3728e003860aed24b69dd29a8f89e214c7775d","first_seen":"2026-08-26T11:03:01.868338Z","last_seen":"2026-08-26T11:10:37.833909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":0,"dns":14,"connect":24,"send":0,"wait":439,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Crazy-Time/e6357b5c9be5bc713d25cbfd45f107af.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.757Z","timestamp":1787742609757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Crazy-Time/e6357b5c9be5bc713d25cbfd45f107af.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 15:06:49 GMT\r\netag: \"6863f989-5942\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzum0oTXtAdFvF6CLPGj9vopinDatovKgbwpdkvR9lWionvXcEh0vgQrHZ%2Fgya9GbD5ZChIplT%2FNwP5P3OrVoKxIBWSu9r7hCNS2wbg3h1dL9XMNkQN8Hx6rdSuT6dGyEXx1%2FVMF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef986dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22850,"size_decoded":23595,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b00cc523c0cd26523a44632eadee2f33","sha1":"fcd9ccfec3582e263fe8c19b948facc11a52cddf","sha256":"bce88472d7db65cab6f5b17c0e453723c14662cf53bfe7fe082f38dcaf813bad","sha512":"af9a350666d32d6646b8d5e269b610f1950fa6276136e440f23e88c28cfcfa420a861970327ef640ac887a41a2da4677de0ed9fb79722448aeb3d97a8bee5853","ssdeep":"384:EjvNrCaY5ExLHqxlJEcjT+hyIYpTvzLEA5YmSZD1qutHUQmI6FPbA/qv7zNFf:EprrCExePuQIYpTvzLP5yD7qJFl3Nl","tlshash":"2ea2e11f0d090aa459e20c98f63371db04948859fb284ed23bf7fe64e2d396f0e0a571","first_seen":"2026-07-28T16:27:16.491028Z","last_seen":"2026-08-26T11:10:37.841462Z","times_seen":32,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/payment/Mastercard.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.765Z","timestamp":1787742609765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/payment/Mastercard.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Mon, 12 May 2025 09:58:33 GMT\r\netag: \"6821c649-9ce\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIqCTFsjB7A7wfJW1g3YkGoVSoNrnrTfBkWDrurkcP6AVHEx%2FAluyJxPysn53ULwBvKKZ%2BIGrdj3xo4ciFUnomIPBfitdJENR33khtFipvWUnTCwT01aY%2BgcpjqIRKi7CJPZn2Zc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f098fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2510,"size_decoded":3252,"mime_type":"image/png","magic":"PNG image data, 75 x 45, 8-bit/color RGBA, non-interlaced","md5":"f15759ef638b5c87f4974c102e9bc8a7","sha1":"cc0df5ebaab9f0bf6c9dcef8dd97c5ac983a3595","sha256":"656df88cb87954db7af82b9511220efa04cf07fe2531d2b6bbe6612c95834b40","sha512":"63ffd1f4f7b0ff61a0c7ed506ce1b2fa43ef2cc7962d49c67f0694c8319e17429d0769ad7d0e9c890500d482af280f3d16d9dfdccdb17ec6021c5a74b1c74b9b","ssdeep":"","tlshash":"c5510a9ad68068569b984a63b0e4191685338dc04ff0d5277ecf8927597d2f400182cf","first_seen":"2025-10-08T10:43:09.336962Z","last_seen":"2026-08-26T11:10:37.843788Z","times_seen":52,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/payment/neteller.png","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.766Z","timestamp":1787742609766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/payment/neteller.png HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Wed, 19 Nov 2025 11:14:37 GMT\r\netag: \"691da69d-10be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjpvdE2BOlyz%2B8%2Bmo6PdvGubsTknm7gj6jCGRjNGlXKITQeC1TGQutLrmTn%2FwXfL4WffzOU%2FEREN8F%2FH62NRvgs2bQHZlSsia87H9j%2FqEwY1DnKqzDZZDRRHs%2BGB8Dg3h%2BYomhIV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636f0990dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":5041,"mime_type":"image/png","magic":"PNG image data, 640 x 360, 8-bit colormap, non-interlaced","md5":"a835dbb871782f0a8f3af7eece67aa06","sha1":"9d61983e919af7129cdc713d1cff40b89eecf843","sha256":"c97a8ef3a40821f9fa52a5ccf9c04dee966794c0ce4189e85eca5b2fed638a12","sha512":"be50497f1aa67a1c4a3ed8e7550536839e77b7b588cb45f7e68f36615c6089d0243de971ab9d2601a4f761db3389d1b260f8b35ff09ec650465f52fddff6ec45","ssdeep":"96:RdbzjExUISuzUnFxEJkJaNKkkd4CaC/w9PgTQexqg4:RdLI7Suz+xt4N/C4CaB9PgTFp4","tlshash":"6a915d517e6f8d6cda7e9233bd8e3933244a42746c6081caca246bc0ede5261c1f16a1","first_seen":"2026-07-15T03:08:34.037141Z","last_seen":"2026-08-26T11:10:37.845385Z","times_seen":41,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/chicken-road-game/046eeba88fecdf21c823b4c1bd96aa69.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.755Z","timestamp":1787742609755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/chicken-road-game/046eeba88fecdf21c823b4c1bd96aa69.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:42:37 GMT\r\netag: \"6863f3dd-4d68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvQOZJRHbLFKzxgRRBzjzgzMV2KL0wYZOLBNb6CY2Xvt3Qfgg5N5Bv3%2BfStwvzQTrEpM63Rj8XkTD3ApY1WV6FvoJm2Im816XGgrF7BhkAdXhpd8xT%2Fj5qICIyJTiwHcTy1Wahyr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef984dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19816,"size_decoded":20559,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be0e925eec75600dc082a6058cef01b3","sha1":"e45374fa08a13ea970f9cea8c9046e7e000fb0fa","sha256":"aa2b530005d23919a750238cabe8f89aa9476786917ce774314e86111a19eb69","sha512":"514aa51b6a1a1681ff92cf57a5e0940c028e719b0ff7884960ed8c9b627feb0819a5673ef00654b1bf652b0abacf8054bb55e38bc4ff314fb37bf39533488342","ssdeep":"384:9jP1LElHmRWGBszJlxGg/kGcX1yaC4iNKycIM5Gr8BkumwPM4lu4:9jOlHmRW8KrGekh19C4aEMr8BkumwU4R","tlshash":"cc92d1e7a1b87d34c21fc055b4cc2dc92e6daf58602a9f03fba64cd9b5d85a40b729d0","first_seen":"2026-07-28T16:27:16.533007Z","last_seen":"2026-08-26T11:10:37.850305Z","times_seen":31,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Chicken-Road-2_p8Vz2Av.0/6be705b33c1eb6bd81c497bbb07be9bd.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.756Z","timestamp":1787742609756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Chicken-Road-2_p8Vz2Av.0/6be705b33c1eb6bd81c497bbb07be9bd.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 16:00:17 GMT\r\netag: \"68640611-37a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HiXSlRO5RWtj4If7fAnlC%2FD6lJCwU3AaXc70krgikPUAOVXuO5X2AebZg0HxbJ1HZOoEfoY4OcCIo0363%2FnaEFLe8kn%2FiudGurHee1UMM4dZGfthXI4HylKaUKgv2Pa3A8vqP3kD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef985dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14248,"size_decoded":14993,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x128, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"978e8aa53cf078ba0f879e5afb44e688","sha1":"c89a6fc3e72511ad19eebaeb16ff65dabe1bb136","sha256":"52d504250d2d91abb5f1b1f8e51c174285a2e7ad3f506ba3897743dc4b0c68e7","sha512":"60c2e51d7d39cc2e38c8817a9815b73038d28c4677e605ad225e1a4240453122545f0c89f7462652e23d33c464657a2272a32721585869a83297a05523520710","ssdeep":"192:fWtf0ovcAKLBA3f/qjyRE4lqr9ODTNfP09tlqSBLlCmYGAOU5mKNRX/lBEdIfAgH:4/4LiqZAhilqwraO8DN5N2dBgKCQ7gxn","tlshash":"a852e10c35359044db917973f64d17dad08c2b6150dd56bf966cb02ab0f8e4ea6037d3","first_seen":"2026-07-28T16:27:16.487896Z","last_seen":"2026-08-26T11:10:37.856445Z","times_seen":32,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Das-xBoot/462b3f00a1b43b94802313325d165a9b.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.760Z","timestamp":1787742609760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Das-xBoot/462b3f00a1b43b94802313325d165a9b.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:10 GMT\r\netag: \"6863f1e2-447c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPYM2Pr%2B8VBN8wcl8zDlbT19IoHHf2DaaRJvuF9ab9FPHIzRr%2Br1ySqRFGAAxsres2y2i4n6LVnzC9q%2FIznmQUz7uzfuEmABY1fiz%2F985P5V3JTv9P1s49J37ROoy3GCvHe6leBR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ef988dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17532,"size_decoded":18279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"18b55c22623f1eeea0b65bb74a2a4ffe","sha1":"a838385ed64c5781f729a6e5543b966ce8b77806","sha256":"c38c662af114bf41471c349f98d35cfa34dc34814a65493b3870950ed0eafd7f","sha512":"cf23249c25ab92cb6a4d2dba334747aa70a1b77f9ed7636513b6fcc27f8d1e7323165e94fb9afd9046af21cb8bb5253bb961fc42ecfdb0ba9992c076c1acd6d2","ssdeep":"384:fcOVDSCZy2noa3bdRn1XHS7nRcMNveoW/e4BWpL6d+EVTB1yMe:f1RRZ/noMXyPgoW/e4BWYd+413e","tlshash":"a572e163b8fe55bc32a88d7d736d5b876050f1fae8aa109c773c087c286b590d1b8487","first_seen":"2026-07-28T16:27:16.49911Z","last_seen":"2026-08-26T11:10:37.860724Z","times_seen":31,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/static/sites/img/icon-menu.svg","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.761Z","timestamp":1787742609761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /static/sites/img/icon-menu.svg HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a1075b2-5bd\"\r\npriority: u=4,i\r\nlast-modified: Fri, 22 May 2026 15:26:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4JJU4x6UVik45TYL%2F%2FK%2F5GpE1btQm%2BjIWqeLesKdZSbIjp7O4iNe3ayE0BfiZ4B8EZmiN7W%2Fcoaj3gqPrxhYH83WiERr8XLGlV1NTIATrczMmZUnZBEk2l7EwDnk6VFzdz%2FxD8y\"}]}\r\nage: 469\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a312636f0989dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1469,"size_decoded":1220,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bf4f129d14841bc2049a5af6a12fcb4","sha1":"98e394689cbd857bd6b21770dc8e7a8bf4ddbbd2","sha256":"bd50fdb6a227c577ffae65cd984a4a3a005353ce2328304ec3601e4672e7828d","sha512":"84370c90a51f0bc38ad375ab8c1b58e486bb36428dd439d5040b282d7e1eb0f18f5244ea84e88cddff24752437ad4fea818f503b0c68ba581b2ebb46687622cd","ssdeep":"","tlshash":"fa31aee7515c88c4660f9be7dc2b24bfa10b7dec1fda8090e64429c73b405e95848c9e","first_seen":"2025-09-18T04:19:42.956065Z","last_seen":"2026-08-26T11:10:37.865005Z","times_seen":65,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imamuenaebetugif.xyz/api/send","fqdn":"imamuenaebetugif.xyz","domain":"imamuenaebetugif.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.884Z","timestamp":1787742609884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imamuenaebetugif.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 02:23:55 GMT","end":"Sun, 01 Nov 2026 03:19:37 GMT"},"fingerprint":{"sha1":"88:C0:F5:62:08:76:CE:B8:92:CE:C9:8C:C9:34:91:53:54:F2:26:D4","sha256":"4F:34:42:1C:B4:27:98:8C:4B:EE:8A:C9:97:7F:78:9E:E9:21:33:39:E0:4A:5A:71:9F:26:01:0C:C2:62:07:30"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: imamuenaebetugif.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://rainbet-casino2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 26 Aug 2026 11:10:10 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HpCcys7ZPgu4XVz%2FhXiHHlVZLEAoHadhtgtwgsxQgHai0Ik9AtgXX5Zpo%2F4DhG7rliypHsfP%2Be1CqNKL1Ds3T34N2PoFCJtvuGXFkjfbeRm3qap69k1AyC0d8CCMD4zz%2BSkw188hQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a312636fd882c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1060,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T15:40:45.624659Z","times_seen":18115603,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino2.com/media/CACHE/images/games/Big-Bass-Bonanza/3334e695292a0857cc261e9bfda788e4.webp","fqdn":"rainbet-casino2.com","domain":"rainbet-casino2.com","tld":"com"},"ip":{"addr":"104.21.88.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino2.com/","date":"2026-08-26T11:10:09.749Z","timestamp":1787742609749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino2.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:36:10 GMT","end":"Sun, 25 Oct 2026 13:36:09 GMT"},"fingerprint":{"sha1":"E0:3A:53:7B:37:D8:4D:BE:1F:22:8D:D8:78:90:BF:6A:FE:88:52:85","sha256":"B1:32:6C:C8:5C:7E:4E:23:E9:48:F7:13:14:4E:88:AA:CA:41:78:49:C3:4F:62:A6:79:41:A8:44:A7:40:A5:11"}}},"request":{"raw":"GET /media/CACHE/images/games/Big-Bass-Bonanza/3334e695292a0857cc261e9bfda788e4.webp HTTP/1.1\r\nHost: rainbet-casino2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-casino2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 11:10:09 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Tue, 01 Jul 2025 14:34:24 GMT\r\netag: \"6863f1f0-3f5a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 469\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3urwzCTQkbesIUDXqCdw4gjSkJfnvUgStu7ig8cT%2F6N3P3wcxX8O3bX%2FqYp%2FdpYY5pdBXwx2YBBE9F3Iu%2BY396lAeAij83QBl4yXM9Xkxgza7JQwOQEAvIGGj2XkHHBZQ0Rr5F9z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a312636ee97edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16218,"size_decoded":16965,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x154, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9f34e9a75e459464449e64cbdfb4859c","sha1":"1918bd6618204101af76e534181118f135d702ff","sha256":"aca99e8c549656637702f70a579ee12f5cbfb941d44bed8a16b018bcd6952783","sha512":"ec78b208f4698b5130118eb801d6406ef20986ea679ce5300c7e333cc81278eed6c2f43d92565ddd645189ade3b72d166968cc30637a79c99bc2f8101ca0abf0","ssdeep":"384:MYWxPzskmPAc/J6yWxwyB9J/XGBt4Q6lN8n0:QxPz5mP9/J6yY7wBiKn0","tlshash":"2272c025433a2237e0445a8bf4932bcba66d38d3ce3d47fa56cae094f3cf5988256845","first_seen":"2025-09-18T04:19:42.952846Z","last_seen":"2026-08-26T11:10:37.876169Z","times_seen":60,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbet-casino2.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}