{"report_id":"f682971b-1b7c-4370-91ac-3e058972abb2","version":0,"status":"done","tags":[],"date":"2026-08-06T18:05:43Z","url":{"schema":"http","addr":"casinorainbet.fr/","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casinorainbet.fr/","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"title":"Rainbet Casino – Jouez malin avec des retraits crypto rapides et des tours bonus VIP","dom":{"size":39326,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11413)","md5":"3bb97a6a1c3cc10ac1f6c72235ff9685","sha1":"971644d8685039c54c23dfc3b44900a40f6de8e8","sha256":"a7fc30eaf4e242e1ae957e5936016fa4d466ff4068551d16d66080558d48b273","sha512":"84ca202f6cb52c5b792edd7db7e52c7f9da4151268b5b1e4fc8bbbd45f6681af7cc18869eb5f139dca3c21ff95f12e1b4505e2966b02f9537fd25bf07be47cdd","ssdeep":"768:go4i45ubNfysh6j6STKyC+A2MgGwibNSX9gOzXV6B2+g24tLozG:8nsh6j6STKydXE2+g24GzG","tlshash":"d303d879a281a22b12175bf4b521a71b79bbc16ddf5387d4b3bd82904fc3c94cd2628c","dom_hash":"domhashb5a54a140ec0662e57d57a0f4f267f42","first_seen":"2026-08-06T08:19:43.472651Z","last_seen":"2026-08-06T18:05:45.006298Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casinorainbet.fr/","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T18:05:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"matomo2.site.supplies","ip":{"addr":"172.66.40.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-05-30","domain_rank":0,"first_seen":"2025-01-31T05:31:55.623261Z","last_seen":"2026-08-06T08:19:40.443885Z","alert_count":0,"request_count":2,"received_data":232205,"sent_data":1424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"casinorainbet.fr","ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2026-08-06T08:19:39.784926Z","last_seen":"2026-08-06T08:19:39.784926Z","alert_count":50,"request_count":25,"received_data":864849,"sent_data":13015,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":3,"received_data":25767,"sent_data":1673,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":1,"received_data":11477,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casinorainbet.fr/","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1efc9cc7c5cf1a48289e9737451aaadd","sha1":"89af77b8a6eff8ccd69c46f5c21a5aefd893dfba","sha256":"11781113b21a1a80cb8f4409bc87394150478e90cf6efe955ccd8c58982676d2","sha512":"eaa3c660252c94932c8bf058cd203314368ac0ff0dc4b76da21a49f5d99a44331807dd3576f93f83817c09de03767425341659851dc57191d613ec142d29ef85","ssdeep":"768:Ab45ubNfyshVj6STKyG+LP1/FbJGeJAAhXYgV6B2+g24tLL:A8shVj6STKyygE2+g24l","tlshash":"b9f2e9799281a32b12134bf4b521a71b79abc16ddb5387d4b2bd82905fc3c94de2728c","size":35834,"data":"","first_seen":"2026-08-06T08:19:43.561161Z","last_seen":"2026-08-06T18:05:45.053871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa843fd77b2556082d3123f147c30038","sha1":"58e896d1aae1d4abaa546d89ce9ae70f9aef99d1","sha256":"731caf064bc8a801cc844436f471a981323db4bf8e63307ff12decd8ae3adc0d","sha512":"bedbbc8057646e9931b707d59bc8a4c281d7ac217b1a2759de246df72d483789b43d99f57b669a4be56f2ea61db3503e4651c161ee10730c496f9223c3434300","ssdeep":"","tlshash":"9011901de5722d3542bb206d23dfa744373440439005ca193b5dda881f569a049f1ecd","size":1007,"data":"","first_seen":"2026-08-06T08:19:43.563292Z","last_seen":"2026-08-06T18:05:45.056975Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo2.site.supplies/js/container_R6fbo5cW.js","fqdn":"matomo2.site.supplies","domain":"site.supplies","tld":"supplies"},"ip":{"addr":"172.66.40.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b13fbdce92a229f33090e9b4a31341a","sha1":"69cc22466cedf3bea1631c0d83a864db1c174395","sha256":"7baf38b1efa61f9597fe612ef862a3a25278cbd1debd1f6a1ffeea9e768d0626","sha512":"d8fba749e92f9b293e005de2649df16358effab9a71cdd788c07a2dbd3137a137069ee6975707d5d5a9aeeb2fbebeb7174a8f8753a925ad0188879e6358e649a","ssdeep":"3072:MFKT+Z2fu7dzsyWbbVdda8EbdAA0XvBvGlfDqDGDMMDm:sKSUu7dzszRdd8dngpvGlbYU/m","tlshash":"8334503a29c07c3f30ec64d8af2b5940ba82d75309a0d4e6f29fd729bdc94699770167","size":230700,"data":"","first_seen":"2025-10-15T05:28:02.187498Z","last_seen":"2026-08-15T18:39:06.936857Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"matomo2.site.supplies/matomo.php?action_name=Rainbet%20Casino%20%E2%80%93%20Jouez%20malin%20avec%20des%20retraits%20crypto%20rapides%20et%20des%20tours%20bonus%20VIP\u0026idsite=925\u0026rec=1\u0026r=597830\u0026h=18\u0026m=5\u0026s=16\u0026url=https%3A%2F%2Fcasinorainbet.fr%2F\u0026_id=4d000c3d2068b178\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=lIHojo\u0026pf_net=35\u0026pf_srv=114\u0026pf_tfr=0\u0026pf_dm1=482\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"matomo2.site.supplies","domain":"site.supplies","tld":"supplies"},"ip":{"addr":"172.66.40.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.248Z","timestamp":1786039516248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"site.supplies","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 02:33:00 GMT","end":"Fri, 09 Oct 2026 03:32:54 GMT"},"fingerprint":{"sha1":"BF:3A:54:80:5E:0F:2E:29:EA:0F:B7:6F:C3:60:30:7B:8D:ED:AC:8C","sha256":"40:35:86:42:12:52:D3:A5:11:F7:28:8C:66:BE:E2:9D:B7:D3:12:BA:07:50:52:D9:FB:73:94:61:8E:33:7E:10"}}},"request":{"raw":"POST /matomo.php?action_name=Rainbet%20Casino%20%E2%80%93%20Jouez%20malin%20avec%20des%20retraits%20crypto%20rapides%20et%20des%20tours%20bonus%20VIP\u0026idsite=925\u0026rec=1\u0026r=597830\u0026h=18\u0026m=5\u0026s=16\u0026url=https%3A%2F%2Fcasinorainbet.fr%2F\u0026_id=4d000c3d2068b178\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=lIHojo\u0026pf_net=35\u0026pf_srv=114\u0026pf_tfr=0\u0026pf_dm1=482\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: matomo2.site.supplies\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://casinorainbet.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-powered-by: PHP/8.3.15\r\naccess-control-allow-origin: https://casinorainbet.fr\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6Z9m%2FCZ5koCwumVIeUyDqfkfPIVfppUN4ZQS1for5TXlMRNcZqlxj6xhN5%2FICGwpGzvda5ORDKBGtPbW5Wh2PEbPGNYMCZ6cvsR4%2BCoMjlnmHJ%2BATeFAPANldbFI8wbX1HpsAfXig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-robots-tag: noindex, nofollow\r\ncf-ray: a26ff8008abe56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":732,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T06:37:20.775643Z","times_seen":17950797,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/rainbet-bonuses.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.706Z","timestamp":1786039515706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/rainbet-bonuses.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:53 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Re5nK0yzaGO9ApOQV8YUSwOxiJ2tswXy%2BLffsUd5IVUiHKQWK5ruY9ju0kccz0brlF72Eealdq0RHYMgYNkPszCIsxqBXHROSrQbENU%2Fa0uNvpBp4OBX2W4%2B%2B4W%2BZ86%2BI3ll\"}]}\r\ncf-ray: a26ff7fd284076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25710,"size_decoded":26394,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x429, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36234ac09ce52a1c4933379c64c57441","sha1":"378df83b8551cec4a23fc435cd923245e137ad6f","sha256":"fb0f489421da800ac986785fa4b110f572b310f9a4b1168b70b24a310feaabf4","sha512":"75b65b755f71217c0a5f0be30a98829a075be850180f3d1bc1db244ee1956a7ff8559340c15a0cadd7c5ff8d3ff1c0e6ce78c28902b0eda220e4ef714e505ea8","ssdeep":"768:hA+CGA2KT6H3k6GI+5KBlYxGq0MWcYjv2LWwur:hA+ZA2A606isC/00kv2LW9r","tlshash":"43b2e0f023c99ee014b6a076fa70667c095c91c5509f7ec7831dd42c8648a9fe2f54ab","first_seen":"2026-08-06T08:19:43.531297Z","last_seen":"2026-08-15T18:39:06.959315Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/css/var.css","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.941Z","timestamp":1786039515941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /css/var.css HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/css/main.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xl1TfV%2Fi5mWGa%2FaLlIy7iiAutH5ugvuAifnaVMTlQonh%2BBDcnu6Qe2rL815hGBFoyqqkwnNfnvnnzR3S5W3nehRfTEJ5ZydXgiNsco%2Fqaobg2%2FYPrffszK68kKJlSQ6dnDlW\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a26ff7fe98a976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426,"size_decoded":879,"mime_type":"text/css","magic":"ASCII text","md5":"9e2c154616663557d6f836e7272fa193","sha1":"006e2e201619953b63270d76130fb18c32e2d960","sha256":"bcc42c1c4142958c67edb2a676c7aa392d3148a238648b8f88cf81132ac16ddb","sha512":"fd69a8bf8ab5eaac9ba453238ea62ee08758b5fc614894a70a8fdd60fb6dc4af84aeb32c091f43df157e1ef63e9837d1ae0cb3b2e54232d65b40458c1655faf3","ssdeep":"","tlshash":"0ee0a081ba5b8907210203ff33e6d1022b388987da01fb6435e4c1f1ee499452c3d446","first_seen":"2026-01-17T18:54:48.11186Z","last_seen":"2026-08-06T18:05:45.014596Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.108Z","timestamp":1786039516108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casinorainbet.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7632\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:11:07 GMT\r\nexpires: Thu, 05 Aug 2027 13:11:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104049\r\nlast-modified: Mon, 15 Sep 2025 16:35:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7632,"size_decoded":8444,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7632, version 1.0","md5":"5426bf50c8455aab7a3e89d1138eb969","sha1":"ec0cbbcb4600e691cb24a63451f758727f90a306","sha256":"17ea10196a490a8d3b8da162c7d4af9c301c5229f70af90dad6fa33eb951d83f","sha512":"c80e5e5d2b52b6ac9a67d62d37236fd791c2736d194ea0828b59fb35011d76fb180d76b3fe5789bf62ebc5c5092975bf6e678e619fdb6c1f28a9d692380729d3","ssdeep":"192:ARL1Yg/M1jL06srp5yOoNWxymcaLoNboeuTbEXFgePuCcDozD1:ARL1YgELorpsOKWJcaMduTbEXvP+Dq1","tlshash":"bff1afc30554054bc74daab7dce3bc60056ff49efc11260959e3adc9962a0fa46cb4d5","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-08-18T05:47:18.848757Z","times_seen":19373,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":35,"dns":1,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/Money_Train.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.130Z","timestamp":1786039516130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/Money_Train.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jd4Jokvm3KbSvZ9djx7FgSO9gnYBNa1kFfqfGrZU%2BrNvXlzu4oadOJynYDuzfzwmIQyQAMTRRLkr%2Fb%2F6swdVXLiTu8ZdeJ62MV3gs1HXZ7c1zwTC50btTXEBHd8l0nGBaHXn\"}]}\r\ncf-ray: a26ff7ffc8fc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26302,"size_decoded":26980,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b3aac2d44a25140604e34080bac8404","sha1":"0ea1f3abfd2e66a5bb1ac77c8dd4c797d482f4d1","sha256":"e995a9e2f925f4a39f4ff97ff1aa800d00bd46bcae325bff761be4be7293e03f","sha512":"07ee9b39f7708fb096b4dd550736e0e76ba2cbf05c68336eeb15db323e11206c20ee35b768a485e88bea5c868f72da9b397582df161602f745d8905f263933cd","ssdeep":"768:PWQzFnABFP6xEF7utVrue5O/e9w4kzmvNg9H6a2:uMFnAHCxEN6f5aeK4Mek69","tlshash":"3cc2f1a683b19a01cce09e3915c3170f7e207b1d2b29dd248b86574f6d87dcd6e7129a","first_seen":"2025-10-15T05:28:02.33462Z","last_seen":"2026-08-15T18:39:06.944936Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/rainbet-login.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.703Z","timestamp":1786039515703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/rainbet-login.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:53 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LM41JjrR4gTS8uxtPOD3Ke6NX9bwUKcXr%2BXy1ssCsU9BlXPCdNXIeowh2VWZtp7%2FWz6co2L%2BHi90c6WwkYpzdbn89Ldl%2BhxDJcL7yUHlhvzx1dZ3gyXp6A%2FMWKteoq8xoO8\"}]}\r\ncf-ray: a26ff7fd283d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58002,"size_decoded":58684,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x430, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b6230b93be12e67adbf200288195bb2","sha1":"ec56c0b79a5c0ad3789db94ef9de21d831766ef1","sha256":"1fed3c10a866366a2dc71de0f01c2b18d083351c766ebbd40a0a08eeeafd04c1","sha512":"85edc999bc33334bc3452c9d6ed93577d1f8d07ae1e5bfe6c3671e9bba2ce12640675e3bac449699065a0e55ca785876f80875225314cdfdc5da11ac3901f1d8","ssdeep":"1536:HJfgk4MUbpNcIvtLKTJ3rcFH02+1xy5ztkBv3zfL75bposq:pozMUbpNcdlO0D1xgmBrf38B","tlshash":"1343f2ef24a5223fd81606a0135238f96dcee9135e714904f79b70f26e1cf98516ee36","first_seen":"2026-01-17T18:54:48.093971Z","last_seen":"2026-08-15T18:39:06.940419Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/7_fruit.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.126Z","timestamp":1786039516126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/7_fruit.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=swXZP7q%2FQ9YKvV2jFazbiRy9Bfy%2BufHYwqZ%2B0MDnT%2BZs7t7yAfbXoTgQS6Ijls%2BYwoWTLqYXc0eMPA5nCnGvYgj6JGeZsKljqx6qnBudibbX5snbONwlK0jp%2FMH1bTi3qVWk\"}]}\r\ncf-ray: a26ff7ffc8f876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23714,"size_decoded":24398,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c01da9e47b82db296e087aeeec303c98","sha1":"b373fb0d7a8091828aa44b6e4d6e9b702609953d","sha256":"c7213d27596d68d7d85c04f9e77a3460bd9eeea5455667c869e4dea2d9ee664c","sha512":"c98eb7d8a85fd3a18d32e04cf51f24e9851dec5fbe0b7c8b033b188baa91d5a0502d9fa50be90a009e91228fabcf0fd10d7de7a20383d1e544a120c097de11e5","ssdeep":"384:QwQdZK04mzcxSWag9Uqpvm0+OK3h7kaQ1lr9QvjfvWS5l1ANBgcBGcKzY:FQd54szW59LFm0H2h4aK59Qvj1NwBgBi","tlshash":"aeb2d1a2d7c64af8e6c2163ad8b2a93d975ce8cdb523f83e46cdf28876244d5c41c315","first_seen":"2025-08-27T06:19:32.573042Z","last_seen":"2026-08-15T18:39:06.932539Z","times_seen":14,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/Dog_House.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.128Z","timestamp":1786039516128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/Dog_House.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FBn8bAxK1eSuCqhgecmURJTdCnnqS8ax8uSD2sHEHB9jMd66Iacszzk%2BbjtLeqKQePFwBYxPNMVGqsTIQUTgHnDXyV15c%2BJQOuUlQE29l39L55Lig%2FEslX039qDCOsEPxm5\"}]}\r\ncf-ray: a26ff7ffc8fd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18114,"size_decoded":18794,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88dfb1bfaa4913bb45ceffd81cfdcd83","sha1":"c6f0ae6c40409697cdc45a24c72c9f9c7c163256","sha256":"693e12e22f608d60338b1916d5fa9de7ee083d554c7d3cbd69899fa36b87314e","sha512":"f4061fa57576a632384f2634b842aca307c4910aed728bb79fe9490fc85c5febc92845012a5c25af707a1ac4152a62a980ec92e600c9c71db65a29c7a0593df5","ssdeep":"384:6wWrZhTnb0y890sZyup1kH5xyUN4j90WkAyGRiRVjGZmoDDKeQDd:7WrZOy8HQufO5xyUNi5kpGRiRVjGZm4I","tlshash":"0482d0f9934813f7e6a896b99b713f55b332af0741232f14b1049b200e164c3a1c17bd","first_seen":"2025-08-27T06:19:32.607272Z","last_seen":"2026-08-15T18:39:06.938308Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/banner-logo.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.692Z","timestamp":1786039515692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/banner-logo.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:53 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7eWu%2BlQ9sSIm2IDDBGzCAkTk3uTOjMZGvhiWkhVNaBLaNLXHzxXZTuY79Xz56H4zedekQDv1Me1yuQ9tjoNrW7Diy3xqG0%2BDYwabkTNDbyIeLwciE02QEnmnCHh7PeNNgcvM\"}]}\r\ncf-ray: a26ff7fd083876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62420,"size_decoded":63096,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2338x622, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d139b269360eb5c01651b322949b474c","sha1":"6ec82b3e6d2e537c8b6d19a2122b33ca94b12584","sha256":"6fa314ae13cb0437a820c778cbbbfe260cfce7b20dd7e489d5fc3902c38e9a6f","sha512":"03e2318c640742b7f5609f58ba89d9310bc4c1a4d41f459c95f299e56bd7ed335a8981c7e182a4326025c924d0f7ae7ac1036294db2a2e24779dabbf8c8046e1","ssdeep":"1536:5W0pELK5QwINFKOl7tsEFG/MjFAsryn8dnX:5WPK57YF5tsEFG+Gs28dX","tlshash":"c25302c9b8e57e2762c55ce705c0a34f405b07a9c823e09f3f2265779f8e8fc24a4156","first_seen":"2026-01-17T18:54:48.092506Z","last_seen":"2026-08-06T18:05:45.021859Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/rainbet-games.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.704Z","timestamp":1786039515704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/rainbet-games.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:53 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2meEMG8ucPvsgddwcVkojdI1%2FCL7mTO9KyA0WmCm3XX1%2FdmIgKUYyxsZlAxFNP8jMpOBO%2B1wwYLxNPGINYez1UlWvBFZuHJ3dLpCi5ooI5KSmKvNBHDCXGRO%2BVFuW%2Fy1yIu\"}]}\r\ncf-ray: a26ff7fd283f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121688,"size_decoded":122370,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x429, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bfd5ca487d6e29bd5a133a4851a90e7a","sha1":"87baea7b6051345c2693f9c1167234e9c3732541","sha256":"48b5d97c010a6e82cc3dec6f40a8a3df932471b86b4e787a2e67a6b23caed5ef","sha512":"42f448f619fd30e09ae508a42915dfc3b1ffa2cd039f4f581ed4c05e3e3c914e7e7b7688272ed02c01ac89cc535ccec61090fb3af598c32f09f59df600ff5b8d","ssdeep":"3072:MHBSy57KBZsK5RkxxIJs6Q0QIzUmddfOMGnb:MB74/5sxIJ+gzUEdmMSb","tlshash":"0cc313876ad3dc4833842797fbceb004c9fb26246556b7934629f0e327b0509b6b45e7","first_seen":"2026-08-06T08:19:43.5165Z","last_seen":"2026-08-15T18:39:06.95249Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/favicon.ico","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.246Z","timestamp":1786039516246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nCookie: _pk_id.925.a772=4d000c3d2068b178.1786039516.; _pk_ses.925.a772=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8DGfyNFmHFmKa7jwJozLR%2FhqRe4GlIYlnwA9UQuMeIbfyP3mqXx3cJuGEFkOW3nBrTVovGu19GZctKyO81lpvSGzYZO4034P0RCueyw3JqjmoXTL%2FZArL128X7pK%2Bx10wOFA\"}]}\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a26ff800894976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59582,"size_decoded":3003,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 120x120, 32 bits/pixel","md5":"87fc323bcd69dc15d7c3dde75d8895f7","sha1":"4785dfc62519b72ee13b67e53145887026c522a2","sha256":"d7b00c6f2e2604f195568bd59f5f04615aa1e54f04d911ef4da93d7692dd69b9","sha512":"be2b19a6f4f94dc94aa5c0bcc54d8be052b675b447c59eaab4eb5509f02703b72f432999c1157925e3de0d6335336250e2542154a4febcfd6c0daa88db9908b3","ssdeep":"96:HTw1/mwzDW/3bEev9F883jUm6edNB7z9u4WXVUb2a0Z:fV3oPedYcboZ","tlshash":"6a43591222a2dfdedcb926f5901aee641337edfd23011a88a3a73612553b74226e74d0","first_seen":"2025-11-08T18:44:01.308178Z","last_seen":"2026-08-15T18:39:06.954734Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/lava_coins.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.144Z","timestamp":1786039516144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/lava_coins.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAbGVA5DkG8VLld4Mki%2Fdf0OmOkcH%2Ba%2BF9ddbk19pNvIiK15UOOvQfzttb7KWn07LfoHAbRJTVlflJvEraeE0Qr7GWEPA45t0tBFw4AXMRYXv7VbvuqZma0xW0Z0BYq4fpZf\"}]}\r\ncf-ray: a26ff7ffe90d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21658,"size_decoded":22336,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97e80360b926487706035dd771c2e4b4","sha1":"3ed016b7afc6925f7a8a2940112ffd0ac091be95","sha256":"1da30a20874736c65f6e5d64b756453a7ee1612dc4f6f9ce577266cfd9255b1f","sha512":"0ccc043befa7eb16af38108cec98bc11b4ded6c0dd0b31a644bf6bddb89929e697166461bc7c804c1263e369c09a08aa07b3c945da3665af5dbf8f9cac95ea3c","ssdeep":"384:gw0CJHSgQOS1gFahfclN8kJasxSY9ZMqW51jLcjFVRgMg6JAPtPRD:1DJHnHChclNvbxSY9LW51jLcjFntJg9R","tlshash":"1ca2e1df5b8d9320ea87037034b2f18ce4901d4aaa567c9dcf468598ae512f0390fcdb","first_seen":"2025-10-18T04:23:26.404567Z","last_seen":"2026-08-15T18:39:06.948673Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/rainbet-homepage.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.698Z","timestamp":1786039515698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/rainbet-homepage.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:53 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQxIzHoduViHqaImoLdjKz%2BUyzZtFpkV5zF7PyJodWFig6caGgcQkT40YR29AVbCrti1IIbSREJ0EqUWZT1cmK%2BC1p%2BFz334wa6eJ7GVKblBo2PL1nG0TaPm03iKRSOtkaFL\"}]}\r\ncf-ray: a26ff7fd183b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69784,"size_decoded":70462,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x429, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"709e2316a12b252833a1a4fdf7191ea8","sha1":"d78caeecb2dc6af8a3aa3391415779174acd431a","sha256":"94a5835733229ca032e9d0afe0166ddb98b277cf7bcbeea0e7634b364f06e928","sha512":"bbaab2d7b2ab8f7d7d3a0c49efccd7513fbc703c2dab96fb82a9f140a718044eb5912664679d6fe236cf739300cdd2980be7a642c46b546add0d4f8fac89882e","ssdeep":"1536:0rGx42vF+DHn7/4f/RbzjBHWqYd+Vdf6FmxT0vZHmt3r2t4qn:EM5EmJdHxj1eHW341n","tlshash":"6d631220c825e2979c48108aabd32487317fc61841d9bec54b7c2ccd8bb1b6776277bb","first_seen":"2026-08-06T08:19:43.476106Z","last_seen":"2026-08-15T18:39:06.936355Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.939Z","timestamp":1786039515939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 06 Aug 2026 18:05:16 GMT\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":1349,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-08-17T23:23:24.094503Z","times_seen":8292,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo2.site.supplies/js/container_R6fbo5cW.js","fqdn":"matomo2.site.supplies","domain":"site.supplies","tld":"supplies"},"ip":{"addr":"172.66.40.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.059Z","timestamp":1786039516059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"site.supplies","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 02:33:00 GMT","end":"Fri, 09 Oct 2026 03:32:54 GMT"},"fingerprint":{"sha1":"BF:3A:54:80:5E:0F:2E:29:EA:0F:B7:6F:C3:60:30:7B:8D:ED:AC:8C","sha256":"40:35:86:42:12:52:D3:A5:11:F7:28:8C:66:BE:E2:9D:B7:D3:12:BA:07:50:52:D9:FB:73:94:61:8E:33:7E:10"}}},"request":{"raw":"GET /js/container_R6fbo5cW.js HTTP/1.1\r\nHost: matomo2.site.supplies\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Oct 2025 10:46:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 06 Aug 2026 18:51:48 GMT\r\ncache-control: public, max-age=31536000\r\npragma: public\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTQS5bQuuhjkaA13B1t1ZXQOBD5Cu9z2W%2F4QaZURihA45iRvTHbPjXhzsivNknOxZB%2FbhdBsqixP7NcqgZ%2BGI5uM0KUZGG4e8njNVSVb7PAnwGmrEf%2FiUYl919i3e1vPkEczRiQX%2Bg%3D%3D\"}]}\r\netag: W/\"68ee29ff-3852c\"\r\ncontent-encoding: br\r\ncf-ray: a26ff7ff7834b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230700,"size_decoded":37878,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2878)","md5":"5b13fbdce92a229f33090e9b4a31341a","sha1":"69cc22466cedf3bea1631c0d83a864db1c174395","sha256":"7baf38b1efa61f9597fe612ef862a3a25278cbd1debd1f6a1ffeea9e768d0626","sha512":"d8fba749e92f9b293e005de2649df16358effab9a71cdd788c07a2dbd3137a137069ee6975707d5d5a9aeeb2fbebeb7174a8f8753a925ad0188879e6358e649a","ssdeep":"3072:MFKT+Z2fu7dzsyWbbVdda8EbdAA0XvBvGlfDqDGDMMDm:sKSUu7dzszRdd8dngpvGlbYU/m","tlshash":"8334503a29c07c3f30ec64d8af2b5940ba82d75309a0d4e6f29fd729bdc94699770167","first_seen":"2025-10-15T05:28:02.187498Z","last_seen":"2026-08-15T18:39:06.936857Z","times_seen":26,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":63,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/Book_Of_Demi_Gods2.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.127Z","timestamp":1786039516127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/Book_Of_Demi_Gods2.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2zR2%2FzHR1ErMmA%2FIoL64ATdvgwC0vA0SVrBwwguA%2B2zEKoBDEJb16sCOoMOO%2BRo7TpO0vvYFaTYLsZyOXNKexTqvyssf%2FlblP2Be1rR%2FXEYCY1MiA2ikUga3045g9KZCnLt\"}]}\r\ncf-ray: a26ff7ffc8f976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21240,"size_decoded":21924,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"478868ec46f5dbe93b91dac4e6ad5c68","sha1":"dd59529cd6054edeed8b1166bbe691bc4a55acef","sha256":"a7789ecb8c39592e5590c7a6ae87f0b4bbdd564a397342583aaccefee0fb8a8e","sha512":"cf68b05d8a24e93e6399618a1a3f44d3225deee48007abb5840fa623bfd2855bcabb4009db285177f5243fa14f18b171fb65c3868bb9bf780ef22cfe9e0591a2","ssdeep":"384:gwDoW12PP1KFbeAksyDJajjzdy7XnfOmWlZftjtp40ure0PW1MxgTuUPEdw67NCJ:1D9mKhrDyDJajXdy7XnfOmgfZti5PW1n","tlshash":"dc92e162bb411385e91b7772d8921f8223b1cd8fdb98ade5421480e0bd05bfa8f56397","first_seen":"2025-08-27T06:19:32.582883Z","last_seen":"2026-08-15T18:39:06.955251Z","times_seen":17,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/The_Dog_House.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.136Z","timestamp":1786039516136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/The_Dog_House.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dekHvRrYtEkBkqLB02K5RjF6wJcQuThvBfKNcRDWrkpQmCU1uC%2BJSEBMLUWGpFery7osNZwVcmHKX9KlUbylRN6o026mSPi3ntOjv0V3HBj17zim2rpSb%2FHwO5t9kGwJ6dh6\"}]}\r\ncf-ray: a26ff7ffd90276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19180,"size_decoded":19856,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"196734f21f0df687d455977387f9c2a7","sha1":"14d740c187d97a029daa2a66e384597bbb450168","sha256":"829119b1fbe940f2337add777a92aa46819b27b0726105ff5954216b3277d821","sha512":"885ab45e5e5c94771c1c43bc9072183bb54c092cd0c389595f971542e83f6c61c3e2f5187b5e121b8fed644769d9b869e19f2978f6d5e766e27e4968f56694f1","ssdeep":"384:0w5qyGaaaYuKRrCnZEAuLaUY9f1oENWVl6BJy14sxMx743:x5zGfRC5uuUiCOW/6fFsxMly","tlshash":"1882e04636592ffcfb30ea3673e361c4a26b3a1b48a4817be504d21c5790d9b5279cca","first_seen":"2025-10-15T05:28:02.342683Z","last_seen":"2026-08-15T18:39:06.95632Z","times_seen":21,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/book_of_tribes.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.140Z","timestamp":1786039516140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/book_of_tribes.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cT8zaR5tNOT5eA1NipjrwTqPqf74hrrujxv0zalVLXW%2Bf9jVNAcswiMQUkrHG8KQ0cwwiGNOCAJkY4X2m9hmovGWWJbgjdnxVDBOfb43qeE9bEBTRwtJhpIfZocXlv2ivnU7\"}]}\r\ncf-ray: a26ff7ffe90b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19354,"size_decoded":20028,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9516db6045fd6aba3af7151ddd2d1a2a","sha1":"e1087ac81c11d19c5148f29c19a73a007798d2c2","sha256":"42717e4795fa2d8255433320062c52c5696ac194fd34623b95b88ec61e9f404d","sha512":"08d1a582a93c640777f9c4e3eb3d9e57ff13427015267399e0aff4735382e5f0518afb3ca36fd8b498d0e297e6ce613b86e997b9fe39fceaeff2aadb15607329","ssdeep":"384:Hwerts32LTtvT6KvLfIyAPLxv9L9Z95TDfi4TcdPXIOHXQ5LYN2ZFcdVcR43rLLc:QH3qTtvT6K2B9B/DIdPXSzcd6i7nvdG","tlshash":"2892e0d8405afd93d92034f33c69296e256456dfe3b7a282cb02a185a9039c34776f83","first_seen":"2025-10-15T05:28:01.692775Z","last_seen":"2026-08-15T18:39:06.947601Z","times_seen":16,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/css/main.css","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:15.689Z","timestamp":1786039515689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qS9xLulYalKQJUQEgeY6c5o3uJbGBVhYjRaxdcE7TZv8vIJm8BRMEp8Fmp4p1ly37gpSSccWiKmtDQl2Hd7FKn5d4DEMJ1weC7ermp5ZH1LGfA8Gtm46gcoNBiAKFmKWFW1l\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:53 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a26ff7fd083676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81189,"size_decoded":19373,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"b342aef24b46b560c175bc4840a171cb","sha1":"2dfb89040f73e3a7d4150f568af4b394ea0a13cf","sha256":"9e5c95c7961640ee4a4dcebd1ac2cb7e92c9a67782c3072de9b9ef5a3bb58ccb","sha512":"02462120b21abd7c7f1a0217b93d1642e2a0b7f4044d323692befb4d92d0ab881a0209143406a62945e3da4c866ce3fa6d657263999b2b44c23256887480ad31","ssdeep":"1536:Gv+WvnzGFLg4SLwNMHg83yF/N/CNfgZW0Yk:GFzqLMA8iFFaNK","tlshash":"a383b69749a72135681fa1df7bea1b4b67719043950afd783ecd21488fcb1f880b1b89","first_seen":"2026-05-19T22:45:38.474819Z","last_seen":"2026-08-06T18:05:45.034658Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/Ramses_Book.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.132Z","timestamp":1786039516132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/Ramses_Book.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMjnSQJJHB62tJDrEzkqJRmpw0ZZDjecpfG8qzl8TjXriiDa1abpHXpnlYnqk2Xy0dY2rxUZfSWKfDFSIaWh%2FLarsrk3oobLrtUQFzSJR%2B%2FfrNRs8%2F4DfgHUQ%2FMhnuUZIxy9\"}]}\r\ncf-ray: a26ff7ffd90076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31702,"size_decoded":32384,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f362d5bf9f7c6880eae24f8d5c9bebf7","sha1":"fa5f8040c9ae9ff9b26924e8473c623fc72182f5","sha256":"4f19f710515c8bbe903027e030ef6555b3843d7208cc285ff506efff16199b07","sha512":"b6142bab0c82943aded51371e770b4a0dad67ce6366d192cfdf66681940ca8d7c09c8193eaf340ea27c68161162399e0f24366299b714a11952fe294e72b987b","ssdeep":"768:sxAI96KsQcT6NyCsXNCF7SCxg2XnNt9s/+hAHg:er96icT4yCsdASmg2X/W/EAHg","tlshash":"28e2f1c1247a0d68cfc43f3ae811674abe6af1a6fb551823c16e535b4eecb782c13152","first_seen":"2025-10-15T05:28:02.107296Z","last_seen":"2026-08-15T18:39:06.945488Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T18:05:15.338Z","timestamp":1786039515338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlb2DuWCQkT5H1zlGmxMLEMTC9hZbEkUaTKWU3uQGaMCDW8V4oMDDfxx0h1z0NQYm3xVNF6KzS7rslYu7AQE698t6jL8GFdxHNUcUctcgiOCq0G4saafexdOH687pdZ1PTq8\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a26ff7fb0f8676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39239,"size_decoded":13753,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11431)","md5":"f51213b9faf78a773d234cb4146ba1d5","sha1":"3b433fcf35156eeaa80f53caeb5f71d85917929c","sha256":"915e3524f9f96e9d4811652c23e665e7a9083396eb3c93b7db4188cdb20c5726","sha512":"b389cfc62a4be7830d38e6c1cc68e340a617958480ae2641e137887349de23424d429d3bca8cac58280fb3e23de9d27eeedc93a00e4934156c3ae8db03d34482","ssdeep":"768:l5Cb45ubNfyshVj6STKyG+LP1/FbJGeJAAhXYgV6B2+g24tLTzq:e8shVj6STKyygE2+g24xzq","tlshash":"a003e979a281a22b02175bf4b521b71b79bbc16ddb5387d4b7bd82904fc3c94cd2628c","first_seen":"2026-08-06T08:19:43.528724Z","last_seen":"2026-08-06T18:05:45.03612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":6,"connect":17,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.111Z","timestamp":1786039516111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casinorainbet.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Aug 2026 23:00:33 GMT\r\nexpires: Wed, 04 Aug 2027 23:00:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155083\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-18T06:35:09.119828Z","times_seen":299372,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/logo.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.123Z","timestamp":1786039516123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HS%2Fgg%2B8qMbuSLHQGfm4iRps1pdqBmBxAz4SNYHnptFhdzlds%2F7jGpr3yXVtYnur05fr7J36EkXYtj%2BlbX0TB6fiM%2FRIyUI23gxW7EqgaZIXBhViy3uOWCEdYsf0E7LNVOQR3\"}]}\r\ncf-ray: a26ff7ffc8f376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13670,"size_decoded":14352,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a1d4458fd36072620e39443296e4b4f","sha1":"857c9b26fd649582bda61945e5bd5dedfea5e259","sha256":"642a4e80c3886f95722add5e6d880df35a879d1da61d4a3da26172107a7985c5","sha512":"41de1b15c85eaadb86fd127c7baddf314295b060560160cad8100e01bc707a3f1d7aa78006818f6285e9f206073047eef0af31abc74c6b2e9a04926fe2ee4bd2","ssdeep":"384:mgTCkQIsLTb5YMkQkorziI999jy+TLKI:mghQB35YMkQZrzDBjhLK","tlshash":"ce52c0535ee89c1be60949e11ad52bdc0e5121cd030ef6c0375a9f61f9526f22f1c774","first_seen":"2026-08-06T08:19:43.497728Z","last_seen":"2026-08-15T18:39:06.937387Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.107Z","timestamp":1786039516107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casinorainbet.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Aug 2026 02:57:13 GMT\r\nexpires: Fri, 06 Aug 2027 02:57:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54483\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8695,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-18T06:35:09.170704Z","times_seen":392813,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":3,"connect":35,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/7_Burning.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.124Z","timestamp":1786039516124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/7_Burning.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bz9RkqgaaOrwtt5DXYmtbVsNKvnXztahDlNSEDhteUjOgJM6X40%2BgzAObMffSZvWsEXXNKtTRcpuUKMzMmnQtHVvyirGn686AzdYRCiXFJ6nKy6G2pNV%2BYmp44L29Wj8pxKN\"}]}\r\ncf-ray: a26ff7ffc8f576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13018,"size_decoded":13694,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58654a569f335f95f2f391e5e8d01342","sha1":"d08cdb6995b5fcd56b14a7ced362e86a1cd098fd","sha256":"0fde62c4749da8bec75840079fb70c16efa03a82d9e4a9c3279d75ee6259cd33","sha512":"5c40940e733a99e858f4a4f9e56f925d3480eaf78094ceaa2a6f5b79ababf44b975735d1fbb185945a5ecb4c765c770e93ff8b7b03a6c4d5c4d145213a6b8c05","ssdeep":"384:WwxVS4XyvztCesCU34grNGonHFme42vbFBs4g:vaLbtC3fr0onH8J4","tlshash":"4742c0b7fbf1b1d4d20d15bb63817a62a7698c41a12d4f2cc0896837dbca5888afc1d5","first_seen":"2025-10-15T05:28:02.316695Z","last_seen":"2026-08-15T18:39:06.94147Z","times_seen":25,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/Joker_Stoker.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.129Z","timestamp":1786039516129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/Joker_Stoker.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywqIXXcbAeJgjfnKzix4UfIxCcwa4%2FRy%2BVn9Y25mbaocwByN54ZrSuPR2xEesxJ5%2BwZkIu2ckVqXVAwZkOcnUXlW4b3bSkowQYX51OEBHobUVTxdw3mtMSbLQdZ%2F5Y%2F8FoIo\"}]}\r\ncf-ray: a26ff7ffc8fb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17876,"size_decoded":18558,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5c7fe79467282200f68b520995c899b","sha1":"9a67653a593b11422705266b45f3725f74b8d3b9","sha256":"a61fe53eb5a52849a90405ce770eef040a01a87130c40e360d0385669fb6057f","sha512":"78c5fa3346ab0a157f6e1546dff38fdf7bab89b7780d746619d930a346e9a5721ef3e6eea8450acfb6aaad20c905300e2db29f29a0469830112986db69eee8da","ssdeep":"384:LwKIc42c73iZCRZuQg7mSbqyllRLdDr3N478gubd74XC:cz2EyZCTuNmsrllDr3N28g1XC","tlshash":"2e82d1b9d7781c28c11f8cb2a27cd639df52a2502888e31541d7a27b153dfebdc84b58","first_seen":"2025-10-15T05:28:02.325002Z","last_seen":"2026-08-15T18:39:06.953025Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/bill_coin.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.137Z","timestamp":1786039516137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/bill_coin.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HPMAj%2Fr6bENZ6a11%2BT4S%2FdgglTh3hYTKPpBb4YTUkIg%2BJLWnR0URJlUExfVyNoOJAhKeblyyB0Y5wyY36Jz8eL%2BC3Kit33embUKvuR2g9FW%2FYbffAov%2Fz4HK4YZMjszYxpH\"}]}\r\ncf-ray: a26ff7ffd90476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23794,"size_decoded":24480,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16d36a1a3402a4fcb28af3b4c02e2e4d","sha1":"ae544561f32205c0dcd777cb47774f245501ed75","sha256":"c949c7bf843533eaa1c841ef4c060891eca5cef823d1797a81067f43e842230a","sha512":"7fda0a74e49786e43d4a12515c4f6a344fd9a6b190e5bb932c2d26b7ce3a20e8f424579986be28f4f8c710d4c40cf2f41dbc31297b959de528aaffd06baf168a","ssdeep":"384:AwyTFLTV8tvX9jcgCFDjEApz/AFn6T0wIvCtGwM52GUHjrNUM0MONMKe2aBSbT:VqLTV8tgZEaz/qTIRM521jrMMi3bT","tlshash":"8fb2d14febe86062f8657b3043c02a53bae470460be9a4fe961453f1f64b1507dbdc94","first_seen":"2025-10-15T05:28:01.985553Z","last_seen":"2026-08-15T18:39:06.960446Z","times_seen":15,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/elephants_gold.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.142Z","timestamp":1786039516142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/elephants_gold.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XARODr6c5m%2BfKIQthYJdcKGNfK1DqvdsstQvP5MA5w8vzx5GP2DuDiyFvRjE4J1bo8tB9g3KTZxjTrLo%2BUS73u%2FBNToTh8LaeMVJdrhwZSdsJlZR%2BVONUlI431f1iFe2%2FUTY\"}]}\r\ncf-ray: a26ff7ffe90c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19074,"size_decoded":19756,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08cafa960f2ae93f02735690386a7ca2","sha1":"27614178c1c48e9fdcc489ff2b853b4b177d60c5","sha256":"71b088c215c80b41eec3d76952e86e6cb7fa1bc6042b4e7df2127b166f278610","sha512":"8e578fe80852401d904a6a69852c32826e0db63afe9dae496daddc181a2195002d78cd81ea8c02a28821cd8da2a2a30debab7021b0e9b1f5cc72b3ec3ccf6d5a","ssdeep":"384:WwG0myF1GQf3g52+9y5SuXEQ8QmD1N8DEkUceq:vJF1Lfg52+VuXF8kUW","tlshash":"7682d0e6d7ab5f3fe105f27230311bb3d629beda90226e50e5490f2822dd6c975ec118","first_seen":"2025-10-18T04:23:26.303974Z","last_seen":"2026-08-15T18:39:06.93935Z","times_seen":14,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/razor_returns.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.146Z","timestamp":1786039516146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/razor_returns.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4ag1Y%2BIEeoRbVHy8aKcGMo7BqJ9ShlSJ3uj%2FkMzQoCRm7W4tms5e8eoFBixAOOz1yp1lqiZZI6ExwhPQa%2FslTL0yWFPovLVV4V3IsgmIk8aXgSrwstheQKycRR7bdPfM8tx\"}]}\r\ncf-ray: a26ff7ffe90f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25642,"size_decoded":26320,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01faa26a2ac0da2daf6b06ba1fc87be9","sha1":"d6515542e0a90f71768b6191a19460bd4c799ac8","sha256":"d8962e1e8053ac1573a5fedc1e50ea39d43c8506f9338e021cfcfa5ec7048809","sha512":"967a369c1c4269b4c076a3e5e10b3f2ccc64e365a501af8e3f82d36aa038b01b29d8b5e46349066d97d493214984a1f3a5969b1fb6977a7de1c7d2f8bdfda963","ssdeep":"768:V0qaHQtopas21NL0dj5lbEYnlgkvtwvDcR:SwtQasWLonjnlgitIDcR","tlshash":"fdb2e14497cc6b7dea49633601354347c5c22f9afa88eb2d503da217360e7c07d2aa6b","first_seen":"2025-11-21T02:20:08.718392Z","last_seen":"2026-08-15T18:39:06.951556Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/Starburst.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.134Z","timestamp":1786039516134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/Starburst.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gSBMLzY035HNKK49CnjY5GZFrx39gcAgoJs%2Bahk6yAi59zrRJWzzZn8jF4I43WBCQ2sOjvd112bfJok%2FsNnnnhkpfixTdhWnY8ZmAECXGEhBm%2BzwtTltnlVyRnJRwL1QjMg\"}]}\r\ncf-ray: a26ff7ffd90176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10586,"size_decoded":11264,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"200007086bd5ee2dfb714024a2ea12b0","sha1":"b2236dad960919de9b8890d60729fa27b3ac012b","sha256":"bcbd7821dd82069e1033692cb9926127ebf63374b76f9071b76d7818a753f486","sha512":"524785bd5b20a52b37ea30cb700a6675fa181dd2f896a6e5d1fc83f216db8c06bfc86baff421431dd41a545558d74f8b83e90c1d7ed9b81159957edc6455da9c","ssdeep":"192:lw0GvGt3x2/gVGTxHEz+IfTcv84byW3lQ0HnYOvDp8Jk9:lwz0x2/XHCuR3lQUvDD","tlshash":"1b22beedb3530329e47897b5dae30bcab151362c5656cc90e2c4672acf18ccc65cd0b1","first_seen":"2025-10-15T05:28:02.228077Z","last_seen":"2026-08-15T18:39:06.959904Z","times_seen":14,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinorainbet.fr/img/games/book_of_dead.webp","fqdn":"casinorainbet.fr","domain":"casinorainbet.fr","tld":"fr"},"ip":{"addr":"104.21.48.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinorainbet.fr/","date":"2026-08-06T18:05:16.138Z","timestamp":1786039516138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinorainbet.fr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 16:53:02 GMT","end":"Sat, 12 Sep 2026 16:22:17 GMT"},"fingerprint":{"sha1":"1F:3E:29:C8:CD:A0:F5:E9:64:60:AD:C2:41:1A:82:DB:4D:48:D0:BE","sha256":"05:C1:AA:63:05:7E:8E:D1:5F:74:B0:77:A5:08:83:4B:9A:54:85:F4:1A:5B:31:32:4F:3B:D1:A1:A7:C4:07:F8"}}},"request":{"raw":"GET /img/games/book_of_dead.webp HTTP/1.1\r\nHost: casinorainbet.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinorainbet.fr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 06 Aug 2026 18:05:16 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: public, max-age=14400, s-maxage=86400\r\nvary: Accept-Encoding\r\nage: 35181\r\nlast-modified: Thu, 06 Aug 2026 08:18:54 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndnZttmJxsnwpEdyIOL48HkaeRM86kqtU72QdWDD7tv623fuaSI7IL6tK4SfRGsraX2csGXsW%2BHOzqMPrpXhyrd5O1AUnkGa1sCBp7x5PRCzNseMfJ8wy0yKmTA%2FqwB%2FB6Zp\"}]}\r\ncf-ray: a26ff7ffd90776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24892,"size_decoded":25570,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2fb98b33a234485d9207294c99766168","sha1":"0689e0db083654963ef70e10a0af6afd21138118","sha256":"2bb22610273828970ae2a178e4d15cc2378c9f0f9acd3ea9d24a3a6216a7363f","sha512":"48c68cc1debf5654fd819b60992a51cb1f6a2ee03d80f8f8a3a1a043f72582ccfeff1791a6541f739b23e2d643fece060a4df41724ec4acbbc691b33c76eba6c","ssdeep":"384:nwrSITqoWqmVrn2+r9FJfcyGyEx3L2sfIYbasBZaKpyT22kwNQVn5j3tDqulxm:wrSITahVS8xI3qsfID3cyiWI5j9x3m","tlshash":"62b2d09df3ae4b28c6c553ffd116389ef489a016865366eb804ec385a0c28b4d7585ef","first_seen":"2025-10-15T05:28:02.14716Z","last_seen":"2026-08-15T18:39:06.947113Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-06","alert":"Sinkholed","trigger":"casinorainbet.fr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}