{"report_id":"ed623998-70da-424e-901c-7a1846832490","version":0,"status":"done","tags":[],"date":"2026-07-22T09:59:29Z","url":{"schema":"http","addr":"play-rainbet.com","fqdn":"play-rainbet.com","domain":"play-rainbet.com","tld":"com"},"ip":{"addr":"104.21.51.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"play-rainbet.com/","fqdn":"play-rainbet.com","domain":"play-rainbet.com","tld":"com"},"title":"Rainbet - Play Top Slots with Bonuses | Rainbet Casino","dom":{"size":12658,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (436)","md5":"2795e39f2a43454d9fc8ec1f763c1b07","sha1":"2569576040a2aee2d647625376a1318c0d907223","sha256":"a74d3b035058b352c1ad6eea9945531ef224906770bab675569b48cfc4553025","sha512":"33b208e9da355ce8b65a7a9a09a25dede0b6c5971c22ee2d79561bf9a28d36b2359612cc528a02e7b06ecec66a2ac33d771a081128d8df05337a54a398d7b9f2","ssdeep":"192:j/KtXFsFfUg7bPFYFwjzYFbkydNbPuTP3yZSefdqNX8wj:8yRtFYFJAyekdkP","tlshash":"1a42945ba5f0050b1653a15a1ee6372c6f9e8087e30c9ea835eed07e5f847494cb378e","dom_hash":"domhash089c0988205183138df8d21b17801021","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"play-rainbet.com","fqdn":"play-rainbet.com","domain":"play-rainbet.com","tld":"com"},"ip":{"addr":"104.21.51.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T09:59:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"play-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"play-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"play-rainbet.com","ip":{"addr":"104.21.51.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2026-07-22T09:55:13.52522Z","last_seen":"2026-07-22T09:55:13.52522Z","alert_count":4,"request_count":2,"received_data":18690,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"play-rainbet.com/","fqdn":"play-rainbet.com","domain":"play-rainbet.com","tld":"com"},"ip":{"addr":"104.21.51.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66f2b85b9f403cd53e7b829da31ef034","sha1":"c0072048eea50e4bbda34a85f184236b1292e472","sha256":"31a374dd4c0a2eb5083f0e296e475121a998096022c4f4e2b9d0aad00deed5b1","sha512":"4524c950ef9ad943e81c53e60539eb322408b346e5ff0aca5955151aff402e589d685a22fea5f0e9914bc32b4e0c0f5683114226feed3b6a43fd5e96b66fea47","ssdeep":"","tlshash":"f1e0d838277211604267f15117ea960e223e065f6188cd463e2d48452fe0f1131f0bf0","size":422,"data":"","first_seen":"2026-07-02T16:04:15.9599Z","last_seen":"2026-07-22T09:59:29.600019Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"play-rainbet.com/","fqdn":"play-rainbet.com","domain":"play-rainbet.com","tld":"com"},"ip":{"addr":"104.21.51.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T09:59:02.516Z","timestamp":1784714342516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 06:03:46 GMT","end":"Wed, 09 Sep 2026 07:03:43 GMT"},"fingerprint":{"sha1":"DC:90:06:45:84:6B:D3:D5:1A:32:C4:E9:20:65:3D:DD:11:42:C7:1A","sha256":"40:FE:42:98:91:71:B6:A1:2C:A6:BE:67:77:AE:98:D3:89:C6:B4:2A:54:D5:21:A3:7A:D8:D7:E1:DC:D9:47:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: play-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 09:59:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ct6qFnQWrOF0a4acdHoi%2BHLOVfJPK2gdpToYcNHDN%2BdpqWBt4bBU%2FO9EJDgzl%2F%2BEi7s4RbL8Bz2xsy27qrJmhh0Qw4kLYG1wD7bjNnnb9WddktR00rnyVMw0HEowh3zAMlrL\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f19720dcfcb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12634,"size_decoded":4928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (436)","md5":"40952741a34d7182fa72de58b9f944ae","sha1":"99de7ba775142fe0da239f508c83466668ce5bc2","sha256":"0a3e7b8c11944cde554d765f5c6af1346328b8d10e414d73f542da6c10575c7e","sha512":"7f642d93f19f6b98bcc772d236e59a6dee5654126d9bdb62f3897ec7e190204b80954e884204ab2f6038e3ff0c112a096bc445f6c55ed3ce94a8fef472bbdb23","ssdeep":"192:/HKtXFsFfUg7bPFYFwjzYIbkydbbPaTP3yZSefQqN68R:IyRtFYFkAyskQkn","tlshash":"b042a65ba5f0050b1653a15a1ee6272c6f9ec047e30c9ea435eed07e5f847494cb378e","first_seen":"2026-07-22T09:55:16.906139Z","last_seen":"2026-07-22T09:59:29.597019Z","times_seen":2,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":3,"connect":20,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"play-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"play-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-rainbet.com/favicon.png","fqdn":"play-rainbet.com","domain":"play-rainbet.com","tld":"com"},"ip":{"addr":"104.21.51.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://play-rainbet.com/","date":"2026-07-22T09:59:03.036Z","timestamp":1784714343036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"play-rainbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 06:03:46 GMT","end":"Wed, 09 Sep 2026 07:03:43 GMT"},"fingerprint":{"sha1":"DC:90:06:45:84:6B:D3:D5:1A:32:C4:E9:20:65:3D:DD:11:42:C7:1A","sha256":"40:FE:42:98:91:71:B6:A1:2C:A6:BE:67:77:AE:98:D3:89:C6:B4:2A:54:D5:21:A3:7A:D8:D7:E1:DC:D9:47:11"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: play-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://play-rainbet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 09:59:03 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 13 Apr 2026 13:56:26 GMT\r\netag: \"69dcf60a-1286\"\r\naccept-ranges: bytes\r\nage: 257\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=El1NcO3JmXypjA72%2FUphfsc5%2FyQ0ysqistODVvXBqva%2FwGN3i77bMrijPNhzGmCxi2qjEmbrFgtLfIBoc66u0WYTZpVn9lvxM%2FuZ6qbbMqj9W7AJe%2BzYjqGv6yBKInoOOhvY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f19723fd23b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4742\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4742,"size_decoded":5444,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3","md5":"ce85798346229e61cf50e2cdc41db904","sha1":"eec8bd3619e2762ad01d8f9298ce44d4095a39c4","sha256":"4eea2cce8c182e9776ede07859346bb8828051cdd6d6f92c55535df9ea9d16a3","sha512":"746db8c5dbd1eefc8da8936c3a3e65a603953ee1e25a9ebefb6dadc10448b0841280e8bd0311e3d08a624c4c7671f3f6613309c63bf23ecbd0945a8dd9d312f6","ssdeep":"96:m6lWNa3OB/NEh4xZ4yLa9sVKKKKKKKoJHKKKKKKKswbNSKl:ma3OBah42awz","tlshash":"16a14bffbf059ed7f8868bf658004e804fe4b69166445a5320ed24235a7b1f098c2b92","first_seen":"2026-07-16T11:17:18.903314Z","last_seen":"2026-07-23T00:51:29.143851Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"play-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"play-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}