{"report_id":"f74fc480-5b74-4a23-8baa-bc45fa37e8cc","version":0,"status":"done","tags":[],"date":"2026-08-15T19:21:46Z","url":{"schema":"http","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"title":"Rainbet 🎰 Play 7000+ Games \u0026 Get Fast Payouts in AU","dom":{"size":60974,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (701)","md5":"c5a5eb68d8c099095afb4b98543d1ab7","sha1":"c9ab06d5ce9658fd5352416b32b09986f3d8dc55","sha256":"a025d3671dfe8971452743f485d3dc3291780285aaf7308048a079072d2fbca4","sha512":"d5f2a0fc2a3af65b268f0ef30de4ce8e654ff7567e06f09941a20c32eb7de764783b1199e838d885948299502befdc927e512506266263cd08bbd5ff6a82a383","ssdeep":"768:TlFTseeHUs5kSqKLkNfFpXl6aACo/6+KusZXWXPg2Z:DQeeHpaKafFZpo/6+KuyXWXPg2Z","tlshash":"df53182fc1f012bb01032248aeb767467fac40176a01d93471af862d1fdae66853fb9d","dom_hash":"domhashd54ec4d303e96aa36ade07098f7e3c85","first_seen":"2026-08-15T18:22:57.400415Z","last_seen":"2026-08-15T19:21:47.276241Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T19:21:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-bet.com","ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-17","domain_rank":0,"first_seen":"2026-08-15T18:22:53.161452Z","last_seen":"2026-08-15T18:22:53.161452Z","alert_count":56,"request_count":28,"received_data":412175,"sent_data":14579,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":1,"received_data":43949,"sent_data":569,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":11952,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-bet.com/3a6c56d6.js","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf183f4d18c63a74b24343e833af8d3","sha1":"7b56269adf40dab7f7517cb76abc46696cae2804","sha256":"be444c289ac019af8486b50fe2bbf2fdb2890812fb945dc78940b6781a68ac52","sha512":"75e4aa93cd80bb49a69c6f2cce208416d07160b3dd96a85b8d1936346a4a29b73b0eb04196b096b49e7e9e0c6751bef9849736a50d0978f78b827906ccd8e598","ssdeep":"96:5hxd6VIOvoGnRBh/sMqjBK54dZZPnAx8QfqNGMxxs8Tb9mfGuK:5h6VcCkjBOkbAx5ikMxxPfVH","tlshash":"209149e6e44170f13bfd64c6a2781220b23a1bb0b50290a4fabd5c974f2d687257df2c","size":4595,"data":"","first_seen":"2026-04-17T16:50:29.722561Z","last_seen":"2026-08-15T21:17:32.654058Z","times_seen":1007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21db006a2057ed801908662b5ce93a1c","sha1":"9d2bdd6dccc2fe30f6031724630763e73af3f535","sha256":"5bc0a53896685b78b3537e1947a67dc9e8ba9a34b22c619cf39d0ac95bd948df","sha512":"57af451a41d3e1841eaa9571ba8af88462450076c9eab53fd6b603d91052eaf408ae29842b40498c217f235e2390622d75915b673be3e553bdaa1732c72d8a1e","ssdeep":"","tlshash":"fed0a72f11b50079503331654f599795260c018fd044cd373eadc4c93fe0e424af4698","size":253,"data":"","first_seen":"2026-08-15T18:22:57.463321Z","last_seen":"2026-08-15T19:21:47.295863Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c6c9e6ef383e9f6357e9b3d4083e0a6","sha1":"9b876c010de921395d6ed1f6fe26d90beef3209b","sha256":"2b5751e9efba36ae6d2f83d84467e6fcc28e96e5ea299a8788751f20ed5dd86e","sha512":"4d3f7835ea7a38b4929aaf9185f1df1c83237e39c06aaab53fa347673dbbdbeb8f2eb8dbc32d66aa532ef4d07615c0908d7db6bb080e2579a87d0b3ad775dd6f","ssdeep":"","tlshash":"ea21000e51f70138426b70bedea7934072b8200b3605ca5c7e0dc1852fe5e9296fa6de","size":1309,"data":"","first_seen":"2026-08-15T18:22:57.465272Z","last_seen":"2026-08-15T19:21:47.296409Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a517c1a4de6bcacb63a6a2e4c5ea7bf","sha1":"e42aaceed9c89e30f4c9750a0a8bfab1bb7c35f7","sha256":"eaecfd60fd47c51e39f7d6774a2bde248e43c40508a0452c61ab4f1cfc87cb18","sha512":"836fd251fe2d9cffaa392b59a6c45e6d2b4102626030118e87514d7018545aed17109cb29bdf1f5c7ad29445b79b581fc1205039fdfaa5e9d0565e59c23c6e22","ssdeep":"","tlshash":"73f0222e05a0093401ff660aaa4fa784330a60434909ae103e5dcfb46f58bbaa0f86c0","size":503,"data":"","first_seen":"2026-08-15T18:22:57.467786Z","last_seen":"2026-08-15T19:21:47.296996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7598a33052e4ca9053bc712366bf9ed1","sha1":"ce0e5f682a896baef5b38cdeadc689433d442413","sha256":"f6373e3365e3411b810bb89ede61c5828f7a4a25814ca03133afe319a3322bc8","sha512":"710538d3b1c2a4d868d9b791bba48dcde085cd5816630c0fe14186fca3f3c9172ee03585aa07b2db0ad3054ff203e610de7d708a878e62ef00984f9145e14210","ssdeep":"","tlshash":"01d05e2e71f138be443be81e434baaca24a2110f16408d683cbc49419f28d243ae1da8","size":261,"data":"","first_seen":"2026-06-10T10:29:54.353238Z","last_seen":"2026-08-15T19:21:47.29758Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/x.svg","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.772Z","timestamp":1786821678772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/x.svg HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a2ba8fc45f1a1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"348a2e46918405810e8c98a6cc7169ee\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZXZurMRYh%2FSD9XYEZM5QUmSV0Rt7cFiWnI6PwVrENc2p8l1QksDYSOh16TzyD4Ij%2FflGA5LBHYdmqqhwWPJ45LNSIm0x2ZErEqNlnHb8Rn6Izi8uAhlC0x6i8klb6GhoqU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":688,"size_decoded":1219,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99b70554c4c54bbbccf9bd53fc16b228","sha1":"3076eab86af1d6c71411a24f36fb25509b22e369","sha256":"07fabfe3c4de84792e0d203f7f50973c6948a70caabfd99324f6b4455cd9592a","sha512":"f5790cc0044c0756591b2ce3f7e94651900bfec93e84c20e409bbb135914497c15bf510bd55bf9d894fc1846bb798f48e9c7a521706da9ed09f707701fb650ca","ssdeep":"","tlshash":"d701feb432944f4a4b489378c52c30f2b1b4e8e58fa04a1037d03a3b683706a1436dec","first_seen":"2025-12-04T02:25:42.23133Z","last_seen":"2026-08-15T19:21:47.277566Z","times_seen":20,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/logo-rgc-dark.svg","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.775Z","timestamp":1786821678775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/logo-rgc-dark.svg HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a2ba8fc45f1d1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"fd2ab4de41e812bce2818b77bce44b63\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKfWlqcx7nl48vLs9UqX6R%2BmmI9eQ7t0Ci8bQu6fx42J5bajs0xxzkLr3F1ZmBZwZo%2F%2BRLvGPDRkgKkVSynJq2F0gFQyXI%2BZgmiUvhooOZAvIo1%2FPU%2FUpOyzvCRaYukkchM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2128,"size_decoded":1801,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54b0d30fbdf65291723cd170854d0e19","sha1":"f1cb0ee1d8024d8718253a84bd2f94b0efa842cb","sha256":"4e85187965a166b4bae39e8bc6ce11c75b11f9abe5d01250bc439f17e2c8d1e8","sha512":"397e298587325848c74506301759e8d42a013e74032e3d1dcea81df99cfceda7e0e810c7d69b4a2bf5ac17d4d2f4994def0ddbc2534fe80b18f550f44902069c","ssdeep":"","tlshash":"5641041fa32caf7aa401c6fcd6a5882436168fc17981cd84c3da6a1f594054e1eeaad3","first_seen":"2025-12-04T02:25:42.243816Z","last_seen":"2026-08-15T19:21:47.278253Z","times_seen":22,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/book-of-dead.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.769Z","timestamp":1786821678769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/book-of-dead.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f171ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9a3d67558c48c0c3bae41ebae908a1bc\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqdkV2Przg2T9aakNvsJW7hP7lI0ZeXWVUHj%2Fk4LcWvV8kDkYltYbqmU5QlAxTtCaulgYcRPKh7uY0jp%2B7T0HkoFDlhaN8wUotXDl4KF8gbhv%2FsPs2cjoYMyZf8edlc7qpw%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14014,"size_decoded":14826,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"777c067dd2d539b5d434b2bc8543b6a6","sha1":"2acf8dd8c34deffbfaae8be5c48c72dc75b42d78","sha256":"86120b4211f006bb736bda5d184e4c3d2c0ac01f3d3848773bf9c1ec708d4b9d","sha512":"f91d8af5d6d6a4d8610789956ab0d33decc9e87bf6d9afb5e9f4b6ce362b18f5d35e1c2293feb752dc89a0fe2e42670128fcd354e46340c6ab818dca7f715c7e","ssdeep":"384:+wTFqRlrxnMKHNJse9XqI0Xki2OMP1y6cgen:HTFqPriKPgy4Mdy6c5","tlshash":"bc52cf560650632efd7b27b5baca95d03339f87384c0fa52f440386757729b98ccc991","first_seen":"2025-04-19T10:53:23.253674Z","last_seen":"2026-08-16T00:20:07.655401Z","times_seen":955,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/instagram.svg","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.771Z","timestamp":1786821678771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/instagram.svg HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f191ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"ccd675a6f66a362482eaaf5c64e1cca5\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ak7af4PIaHAP0fCgQUqoD%2FBZ%2BpEWJmtjmb5y%2FrwaHLpELIbSYeAspMkXES7GJ4K23Lgq1iULnlOeKf9g7suSrCPFGqWDvDorsGE1CD5i1Ggt70%2FoP3e2GXhiFzBcNXIMnfQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3344,"size_decoded":2078,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab36965d725d968fcaf72399b8e74f14","sha1":"9bc72d1a96c78a86845b6424e78fb45e188b142d","sha256":"aa5d93be84505bee433a02a2cc90c03f63ea8417d8cb23c848b7807e50432253","sha512":"9a605318801c8158531641fc44659f19398c953133fcca7835e0edf793321cda9ae3b96bfd852d7ae9dc5535cd16b0a5aaba0953c37c6d39b229723aebbbf8d1","ssdeep":"","tlshash":"c26112e55788f2d1a249dbb4452fe9b03f6e34fe7837c85852ad6dd1e6063ae0089880","first_seen":"2025-12-04T02:25:42.237277Z","last_seen":"2026-08-15T19:21:47.279544Z","times_seen":20,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/logos/logo_rainbet_1778486567618.png","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.754Z","timestamp":1786821678754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/logos/logo_rainbet_1778486567618.png HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a2ba8fc43f0c1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3ab9be946ed4918175550e7c8d705b97\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWtS01Pb8PRTqQS6kNwh04bA7YnXuw7DRPmIvEeK6ZlPvIiH3Qyjs2xwfpS6eGx915FsBntSNgNWL%2Fbcwf3Wsg8qeoWm0XkA1APHB%2Fyb5nyGdeJoJELN%2BSzKWD1D8P7QwzA%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2336,"size_decoded":3144,"mime_type":"image/png","magic":"PNG image data, 125 x 50, 8-bit/color RGBA, non-interlaced","md5":"0c5a16240b42a97b92013ef13b41299b","sha1":"baa8648cc2ac5b21b8b9f905a5653d4f9e25c873","sha256":"8c2109ef522b7fb58ef374fcd9dea4d5bdc11452c472b70c50abea68be55f640","sha512":"d8fbed18c0f364ec7ae6131db540efe8c22ce64d7750633b789d38797b7f94228db0ec129086b786fb93cf8bea0762e6cb6ba4c921c61b9da375129598a2e82f","ssdeep":"","tlshash":"d7414b1bb2e72e86efd4a137d19fe6119f7a8d19bdb2109c4db0c05b841e430e0b8d90","first_seen":"2026-07-28T16:32:28.066966Z","last_seen":"2026-08-15T19:21:47.280249Z","times_seen":10,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/jetx.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.762Z","timestamp":1786821678762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/jetx.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f121ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6ec1c65d40494734af9e099f4b439864\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SnmCdK0i8uPRUqd17DEolYNUARJa0MgJw7DskiHNGNtgy044PZmYs7%2BOIaRG5IO8%2BhO816wWKK0aE0BVVfvpU2Ufnon6CwKnvgz87BdU0MzVbLBHVcYye05e71Z3qCk5vx4%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6280,"size_decoded":7087,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a00d52f3dd7d86ba00c9830b470cbc51","sha1":"f948f5fcd3ba1608d5bf792f26a4cd0e99c8a23b","sha256":"25f91a5629efebd6ebd78f64be46dcee740ede9bbdff27d8a7bce06965e94e78","sha512":"4da92e1cb34ae65a33fd578b2b1ab0278b5edd4c66080da24bc6d9cebc6419f1815aaddf6bbd4157b9cf0ecc55aba13ef5c478931b45736cfa9361c8f1340cbf","ssdeep":"192:6wTFqRlUjqwGixpQL2opEQ/dXZ6zA+/H2/GBtQB:6wTFqRlSHVe9ZXSH/tQB","tlshash":"88d19eed67346756c4024ef0c4560b73f6e975a2965e2a99f30248334778a91b82c21b","first_seen":"2025-04-19T10:53:23.251823Z","last_seen":"2026-08-16T00:20:07.678095Z","times_seen":960,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/facebook.svg","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.773Z","timestamp":1786821678773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/facebook.svg HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a2ba8fc45f1b1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"9a508c85b0c58943c2853d47291f3b37\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHPeUx61ncDlQQpdjeip1pwW3sosPmCDDmvliJstHhVHRmKQPYE36v4u8icDaSwyhwIgws7Xn%2Fk3ckPOYSFKkMNxCO5B1yRXdClX15C9S85tl%2B5be8KRLP8KN%2BY%2Fh%2F6pFjw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":1126,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa054141277a649722f2c79dd473b61d","sha1":"4e2fae73d434d156bce799338866d9b43b66aae4","sha256":"03543e9dade87da459fdf8ab0f0f2df0b604f1d12201b4618b364dccaa25bf75","sha512":"b2af74c4d36e81310cf11fbceca106cbf2b8a8c747435850d90b3e786aa6f36701a679f7e7e697692afc92b25e6f0941ba843c417d6317e04f8430399d2a9bde","ssdeep":"","tlshash":"39f0c9d047c4a1dc500053258a3cb6f4077e74c41cbbcc02728d3922fb470a95153cac","first_seen":"2025-12-04T02:25:42.229194Z","last_seen":"2026-08-15T19:21:47.281447Z","times_seen":20,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/gordon-moody-dark.svg","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.776Z","timestamp":1786821678776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/gordon-moody-dark.svg HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a2ba8fc45f1e1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"d020b2dd9ebe923ed2dd7ffcc1bce7bd\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKriRWnsKT3R216N8YQbvFUcoctMcN%2B5Kd6RgpCIiDvh7IshIAWQd37iXMHu9NmJEw%2BLWxkzIXt9J3cLbBO8S80xy1Izc9pJhk%2FinxjtfyOKLjKUoFO5P58e8XbicTx%2FQqA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6202,"size_decoded":2919,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d570b3cdd6305ea6793381b5883cf07","sha1":"3c019c7dd5f2cf4e900ee9d3616f718a37ceffdb","sha256":"70560aea1bf1554b28796e7ca858a228b9f142f24dc7314766baca4ab2507ff1","sha512":"9971a2a4ad2fe520956d5515e6b0e42fe7e3f21f80714054d76209f904120110c3f8747c76c8b62ed5dfdb234784993fa6e78b08e40db6895b2d09ce3cae2d25","ssdeep":"96:AUShZhLhM4IJikc7XdxfS/MiinxBB4B/TTh6C+wZZAscZk9jlz3lWZKk28:Al6/zinuPh6CAscZk9jWX","tlshash":"75d16448838955a8fa42e7fc871da073fae734ea7954d894c7d23427a85e09c5c9cdc3","first_seen":"2025-12-04T02:25:42.246516Z","last_seen":"2026-08-15T19:21:47.282035Z","times_seen":22,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/favicons/favicon_rainbet_1778486567618.png","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:19.017Z","timestamp":1786821679017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/favicons/favicon_rainbet_1778486567618.png HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:19 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a2ba8fc5df381ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fa47691c9097ac3c60c47979a688ade3\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZUy%2B3ttlVF93evcusVy6UoRU4aiYLmlkkdf6ak0WrJ5pMfWY9V91Zr71RMAmOi0rD3rVB8JgbJ2F%2FBYJD2TUgktHJ%2F7nKj1Wn4Hp%2BOrn4OU7tav6%2BoG1o8wociWh3NUAHs%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1368,"size_decoded":2191,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"9aaf481b10264f0d5ad03be5d82237f6","sha1":"274d351ff72a1909812fb36cc1bda2557f701c24","sha256":"6cc420ea5ade4b480cab4a363be162cd3b10a49b9d2669bd4d174be5f5dabf6d","sha512":"2456efb0b1b7da662143e78ab4b7b11667745a114e5e17cd404cf9d7fffb0efaaa6fb138c8272a385811ced7eaf2de600003b463415664e7ec4f67f753506d06","ssdeep":"","tlshash":"6d2108829fdbc4e9834ba181420227b50c766b984d8331283768c460f2364a37ea4ef5","first_seen":"2026-07-22T09:48:56.776178Z","last_seen":"2026-08-15T19:21:47.282574Z","times_seen":11,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.948Z","timestamp":1786821678948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-bet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 205420\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-16T01:03:26.564742Z","times_seen":263341,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":31,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T19:21:18.014Z","timestamp":1786821678014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\npriority: u=0,i\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a2ba8fbffeeb1ae6-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2BzwSNpjOGEnSot3CP0bJjCUexh5oQqEzv9CjQHzFpqeTyYu98jdRGLj0Jk6o7pqWJNa4omwtPMeYP6LN9u76TCeiEI%2FwLj4rDosIvculHMRwmJC4D%2BZiPl0SBzlg48z%2B%2BY%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61747,"size_decoded":14723,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (701), with CRLF, LF line terminators","md5":"b19b9ca0fd1e3238e36af2c4f32ed361","sha1":"95f204bac2cb98e498cb868677c335a89e03faac","sha256":"fe433c8fcae078aca4add3d98cecf30950b6d8caf3dc6a7284d514551515e7de","sha512":"ff3fb2d2fc0899b2dc6188c140ad63f49fcc6f0a715af773937e14df5b10e545ec1d6e21b66a363fe44515dc3d0288bcbad46c0406ab03c8fb23f9c95fca8a46","ssdeep":"768:y7cgp0RRsUIikSuKLkNfFpXl6Ub6VEe94QTnSktkEZ6N:QCRRsaeKafFZAVEe94Q7SktkEZ6N","tlshash":"0653b62f91c0156b01332358ae669785fbac401b5302853674ff866f2ff2e61857bb9d","first_seen":"2026-08-15T18:22:57.42558Z","last_seen":"2026-08-15T19:21:47.283972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":31,"connect":23,"send":0,"wait":23,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/3a6c56d6.js","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.749Z","timestamp":1786821678749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /3a6c56d6.js HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncache-control: public, max-age=21600\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BeZVrWus7NWjcfo%2BDULPWdpW0BWXJuoTfN2NnU9wx%2BcMKJWiN06PMOTUHF%2FsP7iaAeaV6RLgBJQn2mx4S3mEVRsMDfiKoGxWyf3jal2bhvaoevAvdaklq4r0QrgSxBI0X9k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a2ba8fc42f0b1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4595,"size_decoded":2889,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4594)","md5":"8bf183f4d18c63a74b24343e833af8d3","sha1":"7b56269adf40dab7f7517cb76abc46696cae2804","sha256":"be444c289ac019af8486b50fe2bbf2fdb2890812fb945dc78940b6781a68ac52","sha512":"75e4aa93cd80bb49a69c6f2cce208416d07160b3dd96a85b8d1936346a4a29b73b0eb04196b096b49e7e9e0c6751bef9849736a50d0978f78b827906ccd8e598","ssdeep":"96:5hxd6VIOvoGnRBh/sMqjBK54dZZPnAx8QfqNGMxxs8Tb9mfGuK:5h6VcCkjBOkbAx5ikMxxPfVH","tlshash":"209149e6e44170f13bfd64c6a2781220b23a1bb0b50290a4fabd5c974f2d687257df2c","first_seen":"2026-04-17T16:50:29.722561Z","last_seen":"2026-08-15T21:17:32.654058Z","times_seen":1007,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/crazy-time.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.759Z","timestamp":1786821678759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/crazy-time.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc43f0f1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4a02a2d550b1f1f58a5ff3fe9a76b06a\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3akNxtsENU0Tgisd7iO0NxXStmqAhaTOZJn2i1smpMRdreZVZpbgNPAKeKGkCGsPKAbf2MRjAcB8qEOIStKSNS8Pf1AqdcCsbGuw7G%2BnTTFUCNGWqMe%2FfOk%2BhdEHO3AYwrY%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17332,"size_decoded":18142,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7f674307036b0fec8530ec599dc3515","sha1":"0dd1f6cf347042db0738b69a82fd791816e88f4b","sha256":"1ec77c60a4fbd9221214f3e78bdd7fcfda083996261ff3bdc832b2f60893c66c","sha512":"5f2ad32d5d46cc233fca5b57ae72e29b5814a7e6b596f1a69ebb3791bc6207e6a44c1ec7677b3003dc9c72ee6ced6fb354aedb75396414901732205018e992ef","ssdeep":"384:FwTFqRg9xMTjbPT8IDxT5+jPQGkp7Ve6eV/M9tfRrDFfiMrj1W67TCWBomYX:aTFqq9x83Tpxt+ENej2PV9lBW+TP8X","tlshash":"7d72d1bb45ebb98dfeb4ce3610d51987da522283cc5f24e8b2c6ca540107536e7a674c","first_seen":"2025-04-19T10:53:23.27597Z","last_seen":"2026-08-16T00:20:07.661991Z","times_seen":957,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/mega-moolah.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.761Z","timestamp":1786821678761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/mega-moolah.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc43f111ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a5223b5b4c8e166e605669c68bb63df3\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHsMh6M6yKIWfjeIJo4RAvZAI5rXSAe4KAHgT%2FU18CJ5eNdQzojguGd9srhIEC5%2BWHVpue%2BbO3jCHw86BXIeBD%2FN9eKjW3PMMsPJzqb7nfnGb8N9JLxEWCtN2%2BZLap1GzAo%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15554\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15554,"size_decoded":16368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3243d98e16eac91808aa3f7f08bdad5c","sha1":"dfbb71d67238ab4deb6b67464a316d45e7113d78","sha256":"0b312ecbd9c9e2b10517743adb9756c7ea19d1a5091b10ab448bf4b39d9968e8","sha512":"14a7dc09b980110c184ae82e1a386bbe94cf45894ee4eb35429cf98b5bc69f63aa86d81e3e14ccca96988bcf753189ab87327b83052cee49236468056277b3b1","ssdeep":"384:owTFqREay7j8giaPUy9lzuKtEK93St6/W0bQsUXAgM1fQ4nRH+Ur0zKT:NTFq277j8I9IKtr9CN0VWk9MVW","tlshash":"f562d0552d3b2706f4b303b45bf7db16973be8133a082968685ff852c7a44864f16e2d","first_seen":"2025-04-19T10:53:23.257344Z","last_seen":"2026-08-16T00:20:07.65006Z","times_seen":968,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/tower-x.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.767Z","timestamp":1786821678767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/tower-x.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f151ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3960b4441ce72eef089c8920f2a53ad7\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awLC%2Ft0iILEsAxkjhceWMWmP6jm4hnKzggVRmc62rp8TKzZF2wmnvZyJgcbAyp4IDhuai%2BEyk5hx8Lt06oVg8oT%2BlbhN00EK%2F7gMYyKOJ1QRisw5DCOpwF%2FCo5kJyt79SSY%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8864,"size_decoded":9677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3539421a80170107bb41f6bb935dbbd2","sha1":"f722002c56fa51ece186d93c1014b9e6a015780a","sha256":"a6b93060802d39d2c7bf0b014225a5f7bd66531b0ed54bc409abf8d3dcd1c040","sha512":"b1c47f43063752262159be7cdcec1c9e8282c5b7a11713019f84e9435e61b9b08823ee9a51988cb07316ecfacfed8ed053c1fc54e46f1e48823383b3523ae820","ssdeep":"192:wwTFqR3wI+y7gBux3uiodm/aUfSX/pd1ra4BFjj9YX9Ix:wwTFqR3z+y7gsd9lfSRd1u4PjKX9Ix","tlshash":"b702bfa94abd6278ca67f93034719c17b1bd192083a540e912ec860fbf95180f51746e","first_seen":"2025-04-19T10:53:23.250783Z","last_seen":"2026-08-16T00:20:07.682329Z","times_seen":965,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/live-baccarat.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.768Z","timestamp":1786821678768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/live-baccarat.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f161ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c2f8b4ca3e39cc1f24664532f4076ad2\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9v3ExcizoJdupl70yGRs5GxbtSpd3bNJsv%2BgUWVpZ%2BrBAiAN%2FxzSuYXbt1uu4yV4m542%2BnkVg4CXBlqB3B9makCTyxPvx3l8gXsdlXOF%2BEezRMiO%2Fdzd6iayAhr6c4rQ0Rc%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10516\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10516,"size_decoded":11332,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b59b25103166cb709e1f2f2591d91d09","sha1":"d6f4b56f3d83cfa818a482cbf33e9127f6705930","sha256":"50b48665d929d55ab4a09f53e38d7794e2fbcf446df55bf1e024cf197917c88f","sha512":"fc300d5d00fa815115a8e2721a9cdf9878bc80f3fe4c7fc0d644fb019e8d3f69a5e229f3f09e9009effd250eb717799776fe534ff0e8aa545e222ea19982b770","ssdeep":"192:/wTFqRF8xfbMrxJ64H8y7HE15hw5CaCbrBEUU7KXjCE4vkQfYuYFlrbeELNnzIg/:/wTFqRF8xTMrL11k+5CaCbNCqKviuYH5","tlshash":"d822af2291c8b5aae40e49bc82991ee7bd5bbb535541909a3380322f591836f680b37f","first_seen":"2025-04-19T10:53:23.267683Z","last_seen":"2026-08-16T00:20:07.653871Z","times_seen":962,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/starburst.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.770Z","timestamp":1786821678770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/starburst.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f181ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ff997868fb45eb3be08cd704a9a696fd\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNhMl6RCRVGhkqv90Y63jkVAH2eoBy858guzbAIK79qy8qszZkUIz2pOlZdy%2FFbvGdd9Eugym4vIVRlqTs5zsALIi8y9GcePGT8ptJm%2BvA7jbSruOPMqvTLIupMTbDBHOn4%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7832,"size_decoded":8641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2fc60a555c5198436b9cd57fa6ebbe70","sha1":"ddd34434cf0e4d76582129c250eeaee92fa83e30","sha256":"fdbd3ff75f2f0b33db7ba2fd86e60e929026bdc5a0173b6efb6825bd920c7339","sha512":"dd515e71192b83beabfa369933dd9d185b0c93915169efb221a5ef62373f2149300bcecfba8f64bb7aa79a271556c333ac0812d082f2bf1466122ef9a3fed449","ssdeep":"192:MwTFqRbuTNBLW9w6knJcAPPaJPkTJqTmPDNCUOdAFf7y5bI3g:MwTFqRb2NBLSkJcKayTJqT4hSG7y58Q","tlshash":"e6f18e2ab38d0929c929a134d0d09281e7d7cfe2285f1693518e2535a755fc1ecf8fdb","first_seen":"2025-04-19T10:53:23.28601Z","last_seen":"2026-08-16T00:20:07.643682Z","times_seen":962,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/promotions/promotion_rainbet_1778486567618.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.744Z","timestamp":1786821678744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/promotions/promotion_rainbet_1778486567618.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=3,i\r\ncf-ray: a2ba8fc42f0a1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"448ca54ec8a1eb89e8dead0713af3c4d\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8rM%2BtAwZ1bPgq2pGgDPGTLZlm7OIPfmi2eGbHp9zTMC6NalJ6KkLcUCPUipoobc9jBoceB7%2BW8G%2FCt%2B12%2FIuPlh2JvQM4MpU%2FICtpIWyEfQA0Iu0LL%2B%2FrgQJKIQGU2jOZQ%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46848,"size_decoded":47668,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1110x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"305020c2ca4f56bff7162e3b0778cfbe","sha1":"2c9ad2b3bf02e596967be2c1413788a95456d8ca","sha256":"ceb854c2612f2d3b391d44459443e9e154a66a0204f281c17109c2dbd7331509","sha512":"1992794dbff92702d80dd2889a6f08320634659e8deea2a8e6d895a3160833643e0f566a54d3579d73db202fb2cdcc1ead755047ed890d9c3b43bb7d04fc0331","ssdeep":"768:hOj8NzzC7+UmmJHjpPFcuKHeHrCeB7m43/SRLwT52iLQ9MLr1Q9o2Y:hM8Nzu7xXNcuseLMa/Sk4iLQYrExY","tlshash":"bd230234563d0e868ec37b551392979a294c97ca71fc85ee799332bfc8e1484897ce07","first_seen":"2026-07-28T16:32:28.064512Z","last_seen":"2026-08-15T19:21:47.288642Z","times_seen":10,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/legacy-of-dead.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.756Z","timestamp":1786821678756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/legacy-of-dead.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc43f0d1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b1b78e1b3922f349d526a3dba0b58bc7\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJH2VoEAwlTSBN46CdbXjmOnl7YGnsQbPjdtld1UvA1sFlPug4FB%2FXnnnKCIIggeuoa1DLSn9m%2B%2FmOijfvy3%2FLvkZducQshsh4ZPN6u7VHYjz0GxYqvXEGeLtsQ8bset870%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12606\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12606,"size_decoded":13418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"621b6637d11299738dc7b325a4a991f4","sha1":"c556da2eabc9c79491326dbc1371012c8f0c9171","sha256":"d0db4d47e4106bca482b3ac0e85136c447e7a292e53095ba0077a46277ff62a4","sha512":"1d11437a4814d6c707945076103efaf8f31d42162c5fe3877aab3e7f58a9b0aeb763acdd1b66183dc6b8419bfa3c9ceaab4fd0764957b2de05093ab26dc4ef9d","ssdeep":"384:ZwTFqRLwTHeo5RZYEep5WfnBPIo585grx8:GTFq6ioeRsfWoAgF8","tlshash":"9842b002c6beb00bcf5f6a76b190266757fe182c1b3cf427fad390464996cf187a2501","first_seen":"2025-04-19T10:53:23.277992Z","last_seen":"2026-08-16T00:20:07.654374Z","times_seen":960,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/cash-or-crash.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.760Z","timestamp":1786821678760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/cash-or-crash.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc43f101ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"defec5a99e32eeec6eb7ae3b089bcfa6\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Bg%2FBRfWNJayc%2Bq9KOkI78XQfbEM9D0xni39XHRGK90pYTAtTAi5gKSTdmbwQYFlX7HMBUMBz8kxpERa7doFt33kMfzY6%2B66x2AKl4klAXJ7iEUv8PkhHnfrhIehva9WCH0%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7546\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7546,"size_decoded":8355,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c074baf866e66ffac6b0b764974a1bc","sha1":"8a7b3a58d85d27ce205b37ce1ac684ec1e7d1e8c","sha256":"49443b68a770a900a8de80c05902c4999dcd7eff5ed15bce0866226e2774fd33","sha512":"82720662e1a09d02ce31d838eb579dfcc72b85d3e14c1adf9b3913571e40158858b3ef2e61612f58b4586df1a4ac644fdad3adcec3779b8506312096f927e6ef","ssdeep":"192:hwTFqRfHhbSmBEbS0Ee7ymC1bootqIcX4DiS:hwTFqRUmBEej6ktFQsl","tlshash":"d4f19eb753b01bcdfd18a37c58b48f0b331c659bd8d87b6da9526a40671da8c8dc8291","first_seen":"2025-04-19T10:53:23.290989Z","last_seen":"2026-08-16T00:20:07.674332Z","times_seen":971,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/boom-or-bust.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.764Z","timestamp":1786821678764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/boom-or-bust.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f131ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"245ea57074a1a67d2519d9a705c9086b\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5VnwIORXtNX4KfGdb5CZg1l5u0IyYoJzHan4jwPLKybqnFKtrv9I5ZzGSZyMxnhQ2YMqpizSbWnNDVtIPDgbyuLj3Yn430zFjyjIEsUgZ7Fn6s2Sb%2FnDIfPruz6KgzCv9s%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4380,"size_decoded":5185,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25a34f6fabc7482e268bbf070cadcd25","sha1":"cb3316051cbe3f3dfd3db21bd441e761d0b81e94","sha256":"50c1b4f068c1fe9d416be82494cbe613c1054144eec38facfd02d4165d4c3ac1","sha512":"2127603aa93f8fe93d09038aaeb05ad287a4b0b374c182f6cc58b53a035149b1680a4d41c212fadf5c488bee073f00580cbcbfe2ba39460d6980c672e9a41d75","ssdeep":"96:6Elbw+iXFqRphylvjzT5YREtJ4LO4hujn8WR07qH3Nyn86eKI:fwTFqRPInTua6O4hen8q0uH9y86eJ","tlshash":"dd915932064b3a65f6ca90f8e5c20b5ab3a96bee62c7a363248c353f1f1578017146c9","first_seen":"2025-04-19T10:53:23.270188Z","last_seen":"2026-08-16T00:20:07.686564Z","times_seen":960,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/telegram.svg","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.774Z","timestamp":1786821678774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/telegram.svg HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a2ba8fc45f1c1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"c55db3277a7bcf11d771578e964f3b52\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bcodphzk%2F1KdnmyC%2BTtt9ZOg%2BFwr0K3zm2yyySynPx95gIssUyq%2BhNSU6bjpzYo%2FQ1Y%2BpFKblkRpxTzQPSiRGkEoUmN81dmD8vKXzU98OrRF4GyqhBb9XBSJS93q7nJfy8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1358,"size_decoded":1544,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"007dff4835e60598c81778bee06fddac","sha1":"68997b3d674fba6912bdfa86c03383f374072211","sha256":"af4cd0194b297d762165af575a969f586c8efc4e78ea6a9e002bd67d27b338fc","sha512":"e710f06c40cff7370081d9de01eb2beda59f95c1cfef5633c86b21881692739dcbb530c066d4477e55c55512df5bf321360de4ae7738a4ff891b010f899bcc47","ssdeep":"","tlshash":"6f2172e793d8f3f5e14193f5c23a94f237b230b63a01ca28dbd42ea1e41288d10c7898","first_seen":"2025-12-04T02:25:42.24301Z","last_seen":"2026-08-15T19:21:47.290942Z","times_seen":20,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/gambleawere.svg","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.778Z","timestamp":1786821678778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/gambleawere.svg HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a2ba8fc45f1f1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"f4dcbbcc3fd19a8544606d7ad3bc1694\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLRW8%2BhahjL2QVRGfn2Xx8IZ9pUR%2FFsvALeU8OUQifR6WHB%2BD7rL6sCtJXHgJIx%2Bye%2BwtR9R99yOFgigzpKOHy3nvx5YJYRDOeciSkWJWcjnpsLCUliS4DKxkSe%2F%2FKewqtU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5152,"size_decoded":2903,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac53cb8c499afcf54162d6af2119d416","sha1":"d54f5df42f0c201a58ffa1d2910805020e8378e0","sha256":"337d23ff773c82664806104f4c0c59d0e1037c000829297f3982d6919e7cc355","sha512":"943feb8aa96cd01e24446cbf261c3564604f05c94e4baf9d39ec0dad2819ffacd463863b167949167e34b9cc7b977c472bd897bea0c3fe6c5c0bfee695f93cf6","ssdeep":"96:8fS5WMXQUPQVfuk65AuLa948BdDDfhie5ojtbnypIyQs+GP:8+WM9quxF8rDTEe5wmpr/T","tlshash":"35b14f812729c3f8d70cf7b9065d54316ea927d17667c05ddba32c4790e206e88b8dc3","first_seen":"2025-12-04T02:25:42.238191Z","last_seen":"2026-08-15T19:21:47.291473Z","times_seen":22,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/favicons/favicon_rainbet_1778486567618.png","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:19.015Z","timestamp":1786821679015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/favicons/favicon_rainbet_1778486567618.png HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:19 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a2ba8fc5df371ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fa47691c9097ac3c60c47979a688ade3\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZUy%2B3ttlVF93evcusVy6UoRU4aiYLmlkkdf6ak0WrJ5pMfWY9V91Zr71RMAmOi0rD3rVB8JgbJ2F%2FBYJD2TUgktHJ%2F7nKj1Wn4Hp%2BOrn4OU7tav6%2BoG1o8wociWh3NUAHs%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1368,"size_decoded":2183,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"9aaf481b10264f0d5ad03be5d82237f6","sha1":"274d351ff72a1909812fb36cc1bda2557f701c24","sha256":"6cc420ea5ade4b480cab4a363be162cd3b10a49b9d2669bd4d174be5f5dabf6d","sha512":"2456efb0b1b7da662143e78ab4b7b11667745a114e5e17cd404cf9d7fffb0efaaa6fb138c8272a385811ced7eaf2de600003b463415664e7ec4f67f753506d06","ssdeep":"","tlshash":"6d2108829fdbc4e9834ba181420227b50c766b984d8331283768c460f2364a37ea4ef5","first_seen":"2026-07-22T09:48:56.776178Z","last_seen":"2026-08-15T19:21:47.282574Z","times_seen":11,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/api/send","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:19.047Z","timestamp":1786821679047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://rainbet-bet.com/\r\nContent-Length: 258\r\nOrigin: https://rainbet-bet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":258,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"004f8a04-7548-46e8-90d5-c36a1392540a\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Rainbet 🎰 Play 7000+ Games \u0026 Get Fast Payouts in AU\",\"hostname\":\"rainbet-bet.com\",\"url\":\"https://rainbet-bet.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 15 Aug 2026 19:21:19 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3OYWawOPAR5VU8krEqGG0V%2Fyhb5YsL2cm1RNw7wB%2BlLVIhOlbGomlQXEhroDXn7KMXx8W7othfoqtIgo%2BCtLCIqTNImL9OzdewA1dmPBoJYYEp1%2BISwBvjo6gHEoVQKzdA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a2ba8fc60f3a1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":895,"mime_type":"application/json","magic":"JSON text data","md5":"76cace391275581f3f8c4259db5ed242","sha1":"2ede30cd624f36dde683da82b202a6a829031151","sha256":"a31a19f902eacc5e6de59897a3f93fd4f7d86539c28dbd16465a7da80ac10c1b","sha512":"c9029bf9386587c9822803b46ce43e7b6c5a6e357096b8b9897ba16c501bf9ef210454a6c6956a10fdbf7d9513ab6e2c7de9675d7321e40a5bd208da92d8db14","ssdeep":"","tlshash":"6ae0abde4a6e0bfe59945380dcd842e5089952fa67a104e216f92030ae7ca23b83b0a4","first_seen":"2026-08-15T19:21:47.291995Z","last_seen":"2026-08-15T19:21:47.291995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/funky-time.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.765Z","timestamp":1786821678765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/funky-time.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc44f141ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3999a7b213732a2f34d06747c5978780\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F46EdBzXxobORUNH%2BLRU5bUKCDyLCRi%2FSFwy%2BLDLXplpwCs4K4ciE3oLOIBgQDCz9KPke4Lx6QRX5lpisc9R6JV3NGlQ6SfqSl5cx0CaLz%2F6B2sYOE0wxl5PHzJIzA0NxPU%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15924,"size_decoded":16738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c09effc78051b3f0274fcff2a80bcdb5","sha1":"78ad23f8bf5587b2020437774a45ba725a830f9c","sha256":"3090ced9447b6244415c5a74f5b118ccb1a25858d045f23f5eba53519ca588bf","sha512":"db80e26c3df0f72498fd4de89583cf464baa0dfeff756a1cdd0624ba1acf698b3f84f0f2897548ce003bc29fb2517ce759a0f76488d5e9883b8f25854f86a82b","ssdeep":"384:AwTFqRlDZJNH8FYuZbSOOkmaMJXj1mg16hmaf91PVu3T6p:VTFqzDZXQZbSO+DJXZmg1WmqXu3T6p","tlshash":"6b62c0239769925cf3a24bb065b06f2e5739ff450f3086a501c62a1d299d1f12c0b6af","first_seen":"2025-04-19T10:53:23.25643Z","last_seen":"2026-08-16T00:20:07.68581Z","times_seen":967,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/Gamblers-Anon-Header-Logo.png","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.779Z","timestamp":1786821678779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/Gamblers-Anon-Header-Logo.png HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a2ba8fc45f201ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b2127ded5bf94666599691c47f05df16\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOiZuui4U0jcc5TN0dBRupeOxA6oWGse1gufGGtruHv1g1%2FzBJ2WA1TZX72HWsMeHjf3SASB6dODGdjXdU%2F41In2UzElrLIJ3bNm8QKkiSlAi2s%2FzMU7bK695cj0SlsvgUU%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21146,"size_decoded":21955,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"701b79092698f45db4e702cbd2e77e69","sha1":"9dc17d992d15f4806388367f3ef001b5d991bc08","sha256":"e43320d02017033eb569e3281ebc7279e29b00eb86f1dfbda4f2c93fdf3375f9","sha512":"a45a121d9bd31c05acca8c98ed5c881c925a02c28772f18d4846f43e93858383d7a5bebbb0addea2718f5759c290bcf45b7ee95ea551d00f135e42ccd25552a5","ssdeep":"384:bNHSMeAz5J9uANJD1OpCm336k4fAWj7b6h1lgsE6KZaZ4CRVHW6r4:bNHSMe2dgcmnfRnoaFrHW6E","tlshash":"fc9202f3af6af01b6115837272faf443a0d6fc546084486915dbc8610aac5e729cfeed","first_seen":"2025-07-01T01:54:58.692354Z","last_seen":"2026-08-15T19:21:47.293415Z","times_seen":25,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/images/mega-ball.webp","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.757Z","timestamp":1786821678757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/images/mega-ball.webp HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2ba8fc43f0e1ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"de73298e9901f63a3ff892dd4b74439b\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fN01Vmv9o3xZC9iKQVH7SV4ok9p8kE5lVftshm7SUegIRTrRD7db1WLiP78TmGD%2FTD18Nn%2BSeDS9MW9KxXxG0qiLAAG4D5adEGlHX3q4gQi48NNKDUJm9p4MTmpfV8%2FcZU%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12348,"size_decoded":13158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e48b3e0a64be2fe6ecc1f019c7094346","sha1":"078a96c223cbacdbaf140e3c71c85cc1aecf5e91","sha256":"3598d8cdb398a041210ee8bdbc9f262a63db9dc46c228483c76b0ab87039cf08","sha512":"37f819e8654a2b3fcc56a4f72be7d0a6369ba599d3fa2f5da4a4b7e63e14b565b9d7ed75ea15f6c495cf960c1fc80bf9cfd51f2b8a1e3a8cff5446bbbfed5dc8","ssdeep":"384:mwTFqRGeFsJHesZef2Gx0+VIeTnEyiJMcqAfjm+:fTFqkepsZ6d/xiOcqALm+","tlshash":"6242bf13267caacdc7adf8f71988732cf75cb52fa484c7d6412dc2012a05da099adca9","first_seen":"2025-04-19T10:53:23.255482Z","last_seen":"2026-08-16T00:20:07.648874Z","times_seen":968,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.740Z","timestamp":1786821678740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 19:21:18 GMT\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11268,"size_decoded":2352,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0480a7b5f548d87b4900258575726b59","sha1":"db195efb64363a35a75bf835ed23cef2f8e211a6","sha256":"89796185ab1f9d2ea2acff84d1f6fa64f5f902130cd7157268bfd2389157e26b","sha512":"25b9f18ef84686f84d608bc54ea9dd03d2caf50f41b225ed37a5407283088bf151ac9b12304cef90ec83936343a5ff7d381af4d7b27cee64b459f960bfa6a4d1","ssdeep":"192:yuNJGCuNJbuNJT+uNJMcuNJPq1uNJebqGIwV4nuNJ1uNJ+AuNJ0N9fKN9DN9MN9n:ykcCkhkx+kRkg1kUqY4nkbk3kk9fw958","tlshash":"d6321e91040b50449b838ce223cebe35fe1f92507141d1b9bbfc9b6baddbca2526835c","first_seen":"2026-02-19T23:58:38.600237Z","last_seen":"2026-08-15T23:59:10.827508Z","times_seen":5889,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-bet.com/assets/styles/style.css","fqdn":"rainbet-bet.com","domain":"rainbet-bet.com","tld":"com"},"ip":{"addr":"172.67.173.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-bet.com/","date":"2026-08-15T19:21:18.742Z","timestamp":1786821678742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 14:40:42 GMT","end":"Tue, 15 Sep 2026 15:39:24 GMT"},"fingerprint":{"sha1":"F5:CB:0A:36:04:1A:16:6C:92:2B:19:76:C7:C6:9F:C5:B7:B8:85:C3","sha256":"6F:EB:DA:5A:2E:B6:BF:3B:6D:02:C6:7F:13:8D:B6:14:C2:9C:2B:8B:C5:F0:CC:C9:52:AE:D2:C2:39:03:1D:24"}}},"request":{"raw":"GET /assets/styles/style.css HTTP/1.1\r\nHost: rainbet-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-bet.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 19:21:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-ray: a2ba8fc42f091ae6-OSL\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"840f0a3f924ee8df442da3d23fd17055\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8br9LWpGvvWNwh%2BzHMdbL4NCRBFJ%2BVTbAzHvwtNWPvJCu0tupjlsJac5Y%2BWK4LhVub2iUCdCq86DcnkrKvrmg0otwrrxdTcjqGFSxdV9GYQeLoa41OH68Z6FMglxvGb3Lc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97374,"size_decoded":16261,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a698ed94931552cb4f787cd16a35a3a1","sha1":"944aae8a8fafcf3f790eecf9b1a9e9994b83911b","sha256":"eb563ac8c5527e88642d8db7db84c6d50a25f69f4cb863b19048fb0ad481d683","sha512":"6c648f585995024708f7e5012b3986c3c7652e40935dc12ae03411f5d80662980777f6c179ddb5f731954e3c9d15f0c1bf741a5efd9a51277c025cc85409bf7e","ssdeep":"768:XQB4vFABsdFGF82dvjroaBHcGkDfPk/R2nE8de8ru9NepuPFKMtMBRLXXne2HOYQ:XQBOeBic+Te2HOYZtiwyM8gik0+e","tlshash":"b89342df4ae1140c791fb43d1d664604335d5402aa0edeb9bad2a02ceee53e6d53abcc","first_seen":"2026-08-15T18:22:57.428642Z","last_seen":"2026-08-15T19:21:47.295259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"rainbet-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
