{"report_id":"10195f6f-cbd2-4402-9616-648807eb8e8b","version":0,"status":"done","tags":[],"date":"2026-07-17T09:19:24Z","url":{"schema":"http","addr":"rainbetappcanada.com","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"title":"Rainbet App Canada, Crypto Casino in Your Phone","dom":{"size":259427,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6700)","md5":"1a62d07f1ccf36d9cd3e2b266c4a6a2c","sha1":"3992576c476ad8866887774232806553740d0810","sha256":"95e83037c58e45dc90b2d36e7bb5b208bb4bfb4d802c27b5dee359cde5291f31","sha512":"dc690fe13d347c8f0869bbdd5845f67169cc58872c3db5386f264b9327b1fb27baa2f6921a63becd657e83691ceaea2107e36d38f9b4922c172c8e70633fdf16","ssdeep":"3072:mzUvOKpPSEXpefGFKjy1ZwqfT8sTHcEGxO9bELu85:mzU9oEXpPFKjy1u42","tlshash":"d244e927469720593637716d5fad6748227cb013ca05cde87eded1488fcafa249b2b0d","dom_hash":"domhash7938ef6444b41bc16424e07ed02fad5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetappcanada.com","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:19:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetappcanada.com","ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-07-16T11:15:04.307088Z","last_seen":"2026-07-16T11:15:04.307088Z","alert_count":110,"request_count":55,"received_data":1329889,"sent_data":29599,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-07-17T00:44:01.35073Z","alert_count":0,"request_count":2,"received_data":7460,"sent_data":1086,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","size":8564,"data":"","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-17T09:19:36.574842Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-18T13:42:27.47195Z","times_seen":217201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/contact-form-7-js-before","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c166b8fc42926cf4d6a521790873c9b","sha1":"123c0255a65724362cefde80e358c75e15588089","sha256":"665e84536dda000b8eb381a3e435eb93fec145981807df11e3812211c8181ff9","sha512":"1b1282b89c70131e6f13d65d96335e588eb7f0cae46f44cce1702b41543323ff27e18ecb6a5c5b77e4f3afddca0481bff8fecf8acfa4f747c3559abf6cc711ee","ssdeep":"3:HD6SVGDSiCmbFFlHrdeIUKBF/FFhhzVEGUHsR5pHdFQAwaKLlUFrQAv:3LiRhDX1ulgpwAwaKZ4rQAv","tlshash":"38d1809dd9981c4524fac17d057c1314b118b417cb1f5e55f68d414c5ff80ba79182ca","size":6284,"data":"","first_seen":"2026-07-16T11:15:08.726518Z","last_seen":"2026-07-17T09:19:29.590469Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-17T09:19:36.588429Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335be571d1f9586a0cf2f6952c4eec4","sha1":"f3b60c35f4f7b75ceb1266dbda8ac8d4b1ef11ce","sha256":"da1bed209470750a6c89d8f016d11e981ac975127f5db25aaf094404ecbec64f","sha512":"cebaf60fe3f7c0353c89f2de080ab49e6a5fd65040c113ae0d46f9b10f4b991b00bb15d61e287a60fe714a03569ee0fba4247de1acba85fd8ce02484aca505c1","ssdeep":"","tlshash":"91411868dbbe7662832ea0b62bfe52de143e547e7a814ebb7c38405048f48493715c7d","size":1934,"data":"","first_seen":"2026-06-10T08:18:22.002783Z","last_seen":"2026-07-17T09:19:36.590126Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"36b8ee3b3c9ab13885aea78fa521e8a7","sha1":"439fc57d84ceb5a6a088eee398a578ba67fc2d17","sha256":"6312e9e980310900c83d89650f29f74c601fa640faaae60e9e63abd614f285b7","sha512":"cff8da680f58efb83fe01936c574236010341aad36f5d222b98f69c84451ff2c94ff4f9d4a352d3049e34d981eba31724a330285f8c29c20ce02b22b6dd9002b","ssdeep":"","tlshash":"3341fd35b3bd243147bf64b529e5669e2a3950823a878ca7cc9c9c0524c1e9d4875cfe","size":1933,"data":"","first_seen":"2026-07-16T11:15:08.706541Z","last_seen":"2026-07-17T09:19:29.593104Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-18T13:39:35.596142Z","times_seen":28755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"da6f32650144d864eac7d550fbad5326","sha1":"6aaefc425a9d95ca371d52a51cbfe4152d7537fe","sha256":"180b40caa9dba305c4938c42010576c852dedc487068c4c7bf7242701311521a","sha512":"1b64e0e683cb2ac6236247e3a17ff2d689148958dbc5ec745c8a9f6ea36f8fc0fe22103afb049da73c6432d4b1ddf23a55e8f9e2b35d3de6cd303811ea6559a2","ssdeep":"","tlshash":"94c0809d98981c4524fac14d017c13147118b413cb1f5e55f68d014c5ff80ba79142ca","size":177,"data":"","first_seen":"2026-07-16T11:15:08.70891Z","last_seen":"2026-07-17T09:19:29.594886Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2368928f69980de521ae843595e4ccd8","sha1":"650dab17d9e20b5cc4cc5304dabd8a6336d2e29f","sha256":"8bba0b59e2e1eb91e7fda0cfedd29a8405d7f9e1c5873163c8bf216fa808f01a","sha512":"fb249b3fe63f5fa229bd01e25cf0bf35b0fa7ad4320d8f55ad98ad0f6f57a6a008c86a710354b2c6663b20226c13475c176f9d01b3d4bd05c07b536805fed0eb","ssdeep":"","tlshash":"5db09b594dd41f5725901edf4435d776126c7435dd65ac8457c6c860022d7935a98105","size":126,"data":"","first_seen":"2026-07-17T09:19:29.59614Z","last_seen":"2026-07-17T09:19:29.59614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbe819d1d02877f40a80b46ce420f74c","sha1":"ecfc4a3678eda86b65a75cf89398a0bf962d9efd","sha256":"9027181aa71062743897e0e609620fd3ce9c89edcdc512aaf2813494bbfe8a66","sha512":"0b4d01a2ea2e597702bc849204459c2892d7ab26e654a4c5f8b36eb87ecaff6c92a4cff037b98fa9f46c1b62993d0e9cb3b86b633d8ed9268cc2fc4b1fc81e6b","ssdeep":"","tlshash":"ba11bb3a3f6c90b947d563cc11584d1aa5cc7050e19ac998d685ec3c06ac36b5b8db07","size":1107,"data":"","first_seen":"2026-07-16T11:15:08.711478Z","last_seen":"2026-07-17T09:19:29.597042Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8188552f4b3165689d154ca8584982b","sha1":"b962a3910231951e091f2c50158034691465469e","sha256":"edd24643a5b691bcd8b27120184687719669b99dc780086b2ccf668097fa37a2","sha512":"42fbe19de342ce5da5973a6b40760491a78e912c64bb4c86241706226f508e8d8e010451ac8b03c7f8314f8b73f66348575f0ea3afa51bf6dcef4d7ae76570d4","ssdeep":"","tlshash":"cef059db6b5c0432c25f305e105eb3cd3d7d803269412d67fc78c45248f0d98966289d","size":544,"data":"","first_seen":"2026-06-10T08:18:22.009293Z","last_seen":"2026-07-17T09:19:36.595508Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a89ea5fa426154f4f9b934b83329e18c","sha1":"ea868aeeedc6aa6e5dee07c80f07dc5051a47273","sha256":"8cf165cdacc03cb64127f852b4bdb17fe12104dcd16bf246f6fb960df82e06a6","sha512":"3e9816dc608037535a422737af6458dcd83a424da6fc23b5a0aa13fb5909a18ba54e3854b80f1ee2a42310c2e8b08cd11b59edd576e9157368de1b602764a0e9","ssdeep":"","tlshash":"9e2147c2f70c2432d5fe343f694a52cc252da071ac1014ba7d1c672c0572f9d46aa6ac","size":1358,"data":"","first_seen":"2026-07-16T11:15:08.722857Z","last_seen":"2026-07-17T09:19:29.598521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","size":40647,"data":"","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-18T11:07:04.170667Z","times_seen":8141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-18T12:48:28.908879Z","times_seen":16430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/cmplz-cookiebanner-js-extra","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bf85e1dc3dad37667caeff57449c40d","sha1":"89b66a1f0a89a31e46c9c2bca01737ef3d99180a","sha256":"e4ab6c4b58278df4b03ce04f950c21ccd75026a6a106caaf92d32df48962943e","sha512":"8427febc64af3ba1039400496f6218f9080491da8fed08122a01cdadf63cd22c845acfe826fda16c06be7fdad05f4790e1b8bdcc2c0b309cf75bddd694cd7d81","ssdeep":"24:XRWNe+xCyRbBUGaDFQUiqqR0XEw+a8suGFxEekEwgO2:XRW86bGGhrqqR++4NFSxgO2","tlshash":"fae1c83aef6c90b947d563f811484d1aa1cc3050e19ac998d685ec2c06ac36b1b8db07","size":7230,"data":"","first_seen":"2026-07-16T11:15:08.728194Z","last_seen":"2026-07-17T09:19:29.599955Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-18T13:42:27.341344Z","times_seen":5355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-18T13:42:27.310095Z","times_seen":5240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-i18n-js-after","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"75620a0e89f710eda399cdd30ecaade0","sha1":"0a01de433696a76843bff5118f5c33adf6f442fd","sha256":"fca11bd2d609bad2866061f36d3f88d20e8cbaad7720f2915cbe1dd7bc4a9bb6","sha512":"d8af61e057812fe47971c7b1b0c88b4eae4cf299f745e2676eca0fe9f1e4d818564f97cd50e0f8a9837e7de0c5c28fb0e4a3d7ee1be4afd916a39a5ed98b7ebc","ssdeep":"3:HKaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:qBLxTqtGmVOiFM/KGNMJ2","tlshash":"d3d112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6199,"data":"","first_seen":"2026-07-16T11:15:08.724814Z","last_seen":"2026-07-17T09:19:29.601086Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-18T13:42:27.444192Z","times_seen":224845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/scripts-js-extra","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"30f38748b333e871e8af481801f141f4","sha1":"8756e149e4b76486899e54c89808fb64fdd688ff","sha256":"fb318ab1140aba149d6f68405895e3c7d03ffcd0d792bdff96e0409b0b929ea9","sha512":"b0a988d9c8b1aff919e37dbfc488d2f9283fafb6ba92c38761be99b2089482dc8fba10003ecca69467d5297854a4201f547b21c268f60bd93e10d91e2d54230c","ssdeep":"3:HT6EDew5vNVdeIbgrTHnJH+LX/TNS+GY3r:v9xxgrTQLX7NS+GY7","tlshash":"b8d12b19ccd01f0321900eff4838d73712ac3431cca0ec8057c6c860022c7935a88101","size":6243,"data":"","first_seen":"2026-07-17T09:19:29.60234Z","last_seen":"2026-07-17T09:19:29.60234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"global privacy control or do not track detected: no banner.","filename":"https://rainbetappcanada.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","line_number":1,"column_number":20859}]},"http":[{"url":{"schema":"https","addr":"rainbetappcanada.com/","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:18:46.416Z","timestamp":1784279926416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbetappcanada.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetappcanada.com/wp-json/wp/v2/pages/12633\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetappcanada.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":264080,"size_decoded":43842,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6654)","md5":"805d8467791500d95d6db2570470b02c","sha1":"317da727aa51cb8e9fe5e690f2b2081cb47cccc1","sha256":"2d60947ba567869ce7eb72a78552a3cfab7c0c0c8ebcf62af37aaaa12cc75611","sha512":"b2e8cc6320cf6ef78d6417b2527160310c62cf20f9173cce5d863249da17d03fc0602548f81b81b5bcf4e5777686714f7b4d285d446c76d11f0bcb14f4ebe049","ssdeep":"3072:4rUvO1pPdEXptRRFKjy1LPyH8sTHjEGxO9bELuNk:4rUKfEXpdFKjy1DK","tlshash":"4f44e827469720593637716d5fad6748627ca013ca05cce87eded2488fcaf924ab3b0d","first_seen":"2026-07-17T09:19:29.516611Z","last_seen":"2026-07-17T09:19:29.516611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1102,"timings":{"blocked":0,"dns":73,"connect":20,"send":0,"wait":982,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.752Z","timestamp":1784279927752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Feb 2026 09:50:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ef3dc-ade\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-18T13:09:10.601211Z","times_seen":30483,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.748Z","timestamp":1784279927748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:13:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c0b5-d0f\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-18T12:15:38.788221Z","times_seen":4465,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/logotype-2-1.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.792Z","timestamp":1784279927792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/logotype-2-1.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45046\r\nlast-modified: Fri, 13 Feb 2026 10:02:56 GMT\r\netag: \"698ef6d0-aff6\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45046,"size_decoded":45391,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0342eca5c2b2c018d3cede6dd5575a7f","sha1":"24676b002848bced37ff4612f58c6571107d1aea","sha256":"e680daab0aaed47f8305394efd80e84dc365a7bdfea018e6457c0a6a61875651","sha512":"094abb9d550fc3db0999d17827166b708c3e6d60f609c0e73f2883f7a8a9c18d5bf265b95bcc7d1e31b89f9af5dccc1baf4d6889ccbe75346b6f2d262e8b3dfb","ssdeep":"768:iTHJQ4DN3AAfAzeS9BX0mawOCjWVSwcmA/paWuinhejIPGLNF6hl:EJTDNhfAzLalwOsGSrmeawkjI+P6hl","tlshash":"e813f17d6e60687af108303c6529bb5aed26725d2f2c2484e5268e2b855f0dc8b7f74c","first_seen":"2026-07-16T11:15:08.697178Z","last_seen":"2026-07-17T09:19:29.52298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/1xbet-2.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.809Z","timestamp":1784279927809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/1xbet-2.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21310\r\nlast-modified: Fri, 06 Mar 2026 14:08:17 GMT\r\netag: \"69aadfd1-533e\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21310,"size_decoded":21655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77eec379564edb6287104dfda9645466","sha1":"341adf4051f285ba548cdea4569a7547098ea883","sha256":"a1342708a6d7976d0ae545897dcfeef18e26cb9792b098ac8a72999d78416d17","sha512":"4aab9dc2c8f5fa606939a1588a9d5e9c04754b8ebdc7d6934f05ee3efc0a2c0cf8c2659e3b103f359388e94d1efe75c0aaac1477f2739d2d47ff2af666afd562","ssdeep":"384:XwTxfReHXGpEudnM4xN54obhB4lguiukpxHIPIso8sbCSkGCfIvIcAQ8N:ATxfEHXOJxfxuvk7TzbCvG5rAQ8","tlshash":"24a2bf4acea20493d357cef92ac497824b79926ac429e03549b1460163efcd49e6cfcd","first_seen":"2026-05-10T08:25:06.379303Z","last_seen":"2026-07-17T09:19:36.572989Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/slot-mafia-logo-1-1-8.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.805Z","timestamp":1784279927805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/slot-mafia-logo-1-1-8.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13870\r\nlast-modified: Fri, 06 Mar 2026 14:08:17 GMT\r\netag: \"69aadfd1-362e\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13870,"size_decoded":14215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c8c0ec5bca8f1f3fb84bbaaa30919c1","sha1":"865dcf4b34ce4bae99d0ca36f2540b86f6553b92","sha256":"95a61edb440db2381ee48a9fab1c8a2bfe4b92937290a3d8727e6f8f91e0cc4d","sha512":"eeb46b1c393045bfa5e6fa34c93c31c32c18b322696606ee1ab3f34fe8408057b1c91e71d9c8a5aa505891ea0bcd7d51ea05712705bb55e1f50aa37d4cf81d20","ssdeep":"384:8wTcpa/ZFsVhzQdTn/tXBVBWsfBh5u+OOC61hcHr:JTGGiQdT/txnWspX4N61KL","tlshash":"21529c22433152e4ce635dbb23da3304e5f4aef9171d85a8641f22e55bb6abb210c91f","first_seen":"2025-11-13T03:52:08.192508Z","last_seen":"2026-07-17T09:19:36.549979Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/gaming-curacao.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.825Z","timestamp":1784279927825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gaming-curacao.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6094\r\nlast-modified: Fri, 13 Feb 2026 10:08:31 GMT\r\netag: \"698ef81f-17ce\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6094,"size_decoded":6438,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b4079eb9e61e9428de5f638f5ff0386","sha1":"d1f56d5e6ded62811693ef9ea99fdb7b5aba65a6","sha256":"794e21fe530e03e5884e2cefb7c04b90c793e743b900166cb185c3eab2205714","sha512":"1e2a899fcf8e6db4c3e8edf74744d1aaa551605c5958cc1f59fb760cd1bccfaed4474a325383c3b2372af2732b85c4133a11afff21b343d2b0dc86c93ae06d2b","ssdeep":"96:cdElbw+iap17QBbfkIbvwxllPhgKFIG3aboy2QNkg2TN46nxT4I+HycfAcdyU7zK:9wq17QBzTwxHiKFIGKboy2xN46nxc9yN","tlshash":"8fc16c1b77a68b08cb303bf8144b7746ebb1981b85d18faa9740a70ea72d6cb7d50017","first_seen":"2026-07-08T12:11:29.132987Z","last_seen":"2026-07-17T09:19:29.529057Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.983Z","timestamp":1784279927983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-4bc4\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-18T10:56:39.587472Z","times_seen":138,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.772Z","timestamp":1784279927772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 06:49:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a587ef2-1664\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5732,"size_decoded":2841,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-18T13:42:27.310095Z","times_seen":5240,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/fat-pirate-logo-12.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.794Z","timestamp":1784279927794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/fat-pirate-logo-12.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10304\r\nlast-modified: Fri, 06 Mar 2026 14:08:16 GMT\r\netag: \"69aadfd0-2840\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10304,"size_decoded":10649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb3abf1b63b529dacbfbce77141d0713","sha1":"d66d7cd249f048046bc3eec8d7eb37c345e6754d","sha256":"de13940234c35f39dc1a5b48c9123b4869f8df868e4290b255fb6683d48f86ee","sha512":"9454bf9ceae50728a7ce9a828c47a7001815531a84397bde6a5731cf3cc357f378fce1599a511f85536c1e6705c38a139d10b89c79111f3e10150865514a9202","ssdeep":"192:wwT9cKAJo9hSHQf5H4Q+uKTWl9S7gFuIM5fiQdPncQ/nQG3Rq8:wwTTVoGYQkWbSy2piQdvcCQGQ","tlshash":"b322c0f022522da8f203fdbb64ea5340d6ba2427961d37519311fbbf1f079c4249e98a","first_seen":"2025-11-13T03:52:08.194529Z","last_seen":"2026-07-17T09:19:36.553583Z","times_seen":13,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/04/interac.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.818Z","timestamp":1784279927818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/interac.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2982\r\nlast-modified: Tue, 28 Apr 2026 12:13:20 GMT\r\netag: \"69f0a460-ba6\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2982,"size_decoded":3325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"641926d0a6599b44a06964a62a5b5733","sha1":"d4496627f44e1c66f24231c6bb73b181527597c3","sha256":"b64169ca899a5cafad62fdf79323ce1e43e080fc64f58eebeed24e9c3839ebd0","sha512":"b17ba90c6f5d8776bb20cb654ad3fd35aa9c9812f6511469ef4e0480fbb6254dcf7b134e99fa98fd335deeeacff572a7290e7f72258c9afb374d7c90350e3fb1","ssdeep":"","tlshash":"d451f816acb313a3d55fb33a1ce93b5cc7234645acc053ea36e589630e414c22d77183","first_seen":"2026-07-16T11:05:09.655069Z","last_seen":"2026-07-17T09:19:36.56594Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/images/rating/badge-4.svg","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.991Z","timestamp":1784279927991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-4.svg HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588190-5fe\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1094,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da49c60a038c21ad060f0b53ff910426","sha1":"174fdc729062994bb104f00c9c6072a0cf4faccc","sha256":"addd89150ca262be3c0335ee993d4559fb1d5ce30ac6c25c6c3bdccb7c49e9c5","sha512":"38a85e0737612e812633a5b3f7f66a8bd9609ff6d24011b479ad55027f61373b54cecb7750d75d45fd2765931456920866eeafde617bc6e6d018cdc206d072ab","ssdeep":"","tlshash":"cd31957ee10d2c2af12885bcae52d478047abdfb4cc2000044e1b9abd0a24c60cebe5b","first_seen":"2025-06-05T18:04:56.85468Z","last_seen":"2026-07-17T09:19:29.534296Z","times_seen":27,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.781Z","timestamp":1784279927781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 984\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-3d8\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":984,"size_decoded":1353,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/log-in-to-the-application.png","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.816Z","timestamp":1784279927816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/log-in-to-the-application.png HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 123027\r\nlast-modified: Tue, 17 Feb 2026 14:10:55 GMT\r\netag: \"699476ef-1e093\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123027,"size_decoded":123373,"mime_type":"image/png","magic":"PNG image data, 250 x 510, 8-bit/color RGBA, non-interlaced","md5":"644a12abde113ff01b55a671ebefbab3","sha1":"834aa41b70d6e538f27d0e7ab8a3e62fc5f68c47","sha256":"2afc9ef4469e486f4ea9db1646a7451c3517abb00ab383cc385142563108fe4c","sha512":"92a55320b031bd60667c4fada2b2f09a4f3bd3f7e1ae5160012bcbba677c84b0a1ed20ecf6c3212d79b57ce85ea0a6efa0854d707bcdb39775d233877a23e4bd","ssdeep":"3072:KNXpzD/zNQdpLyVO8aDGsbIwjosdQx/uZgWr5EfJu:KNXh/ZqLyQ86GGzjZmx2Wf4","tlshash":"15c312bc0f2543b991acf67bbcab91c5675305f80f62698a3c98462368805f50ea5fc7","first_seen":"2026-07-16T11:15:08.692712Z","last_seen":"2026-07-17T09:19:29.538489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCA_logo-grn-btn150w.png?ID=a60bc0b1-4120-43ed-8154-a28da1f55329","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.817Z","timestamp":1784279927817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 22:04:02 GMT","end":"Sun, 11 Oct 2026 22:04:01 GMT"},"fingerprint":{"sha1":"6A:51:15:F9:1E:02:E4:35:97:2A:18:48:2D:11:45:75:3E:66:46:2F","sha256":"6F:74:D3:86:E0:35:38:B0:3A:FC:F7:85:47:E6:68:5E:32:F6:32:16:56:40:6F:E8:27:E7:B1:AF:3A:99:98:28"}}},"request":{"raw":"GET /Badges/DMCA_logo-grn-btn150w.png?ID=a60bc0b1-4120-43ed-8154-a28da1f55329 HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 5564\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31536000\r\netag: \"35de63a955e2ca1:0\"\r\nlast-modified: Thu, 22 Apr 2010 19:54:47 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:19:10\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCA_logo-grn-btn150w.png?ID=73aeba35-fc4c-4fb4-b78e-36a65f8d17d9\u003e; rel=\"canonical\"\r\ncdn-requestid: 6e7b318e370bc9968dd06c63ff7c26fd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5564,"size_decoded":6293,"mime_type":"image/png","magic":"PNG image data, 150 x 53, 8-bit/color RGBA, non-interlaced","md5":"0b8ea1c676eefb62c60bb4068ea34067","sha1":"8376e96625a649fe9c3b71c4bce21d46a2ebb83f","sha256":"c7a42f81525e857ebc551c666dde1684dab8e8e2beb0bcd6b8fbc04298715cbc","sha512":"98e8d17ab52701da7bf99a2dac643628d397da2067bc5670818d55b9b23df14ce840692bd1ad79f9621e857a39e16944715b54cf9d437b9698beb9d97b6e9f65","ssdeep":"96:6dHaiMKzB3Dtuv0cpx1LxQHw1/+FA6TZnr6P0JSF7MhDCL1Ky8IrbEFiQUfM/:6dHamxws4x1LxJ1GHTZnrO0GEDYUiEA4","tlshash":"c4b18eb3a98be6c8aff9b16e8823627f0c6aed4f40f45020774b0247b775b25e450219","first_seen":"2023-05-06T11:25:28Z","last_seen":"2026-07-18T05:54:45.083343Z","times_seen":67,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/gamblers-anonymous.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.824Z","timestamp":1784279927824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gamblers-anonymous.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4188\r\nlast-modified: Fri, 13 Feb 2026 10:08:28 GMT\r\netag: \"698ef81c-105c\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4188,"size_decoded":4532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d679ae3bd48192653c8c8a6e5942ce7","sha1":"c56b71f5996147947ed4a92afa2ad43885f1111b","sha256":"2e580df9323a347044575ef2b4eeac85b12affff720e913d8b91a7252207a994","sha512":"3883caea8078264cfa3cf455f1d5322d221ba5ab748684a1b2b224722ee42f3d480e4f9fed0812ddfbb777d9fbc867312254251be3d4f27e562ccafb30b58bbd","ssdeep":"96:2Elbw+iXQ0o80SkEglTOFU5v1P0gslhX7kQZid4vO8uu:zwTWKgZOK1cHoQZe4Ou","tlshash":"a0816d6df3b62356e8031bb8e42257563e1ebc744b83f06b864513b23d400e6669c353","first_seen":"2026-07-08T12:11:29.148058Z","last_seen":"2026-07-17T09:19:36.56832Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/favicon-18-300x300.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:48.034Z","timestamp":1784279928034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-18-300x300.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4984\r\nlast-modified: Fri, 13 Feb 2026 09:58:16 GMT\r\netag: \"698ef5b8-1378\"\r\nexpires: Sun, 16 Aug 2026 09:18:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4984,"size_decoded":5328,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a25d5383999b8469ffd495ae287050a","sha1":"8a0ec1ace4858473f8468ed9d4dccc0c17ef4bf9","sha256":"87c28b17c7eff14a0761838a939e0522dd4f461c01c3a41af73aa5fefa685ef4","sha512":"20ec0eb4a3a588d8d621db496402d9fc8890013264664834e21632fe4e7352891b7ff569f4b5fe96d01bf1c26bc45ede2d271de0ca524a771203632f789c33c7","ssdeep":"96:sElbw+iXK1aHIXmPYuQVFq/lOv7PgSJM92yu8aZM48QGOqM3qBpfX3QM:5wT0aLuDqYkaM9M8JSZoSM","tlshash":"b5a17f75827c0a5ee37ecefd40c66e53d715fdb147641a7802d9818411e828e547e28b","first_seen":"2026-07-16T11:05:09.62458Z","last_seen":"2026-07-17T09:19:36.55148Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/share-icon.png","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.814Z","timestamp":1784279927814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/share-icon.png HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 204430\r\nlast-modified: Tue, 17 Feb 2026 14:10:57 GMT\r\netag: \"699476f1-31e8e\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204430,"size_decoded":204776,"mime_type":"image/png","magic":"PNG image data, 250 x 510, 8-bit/color RGBA, non-interlaced","md5":"2ff1f416c59ba757719f4ffd21c78688","sha1":"577ed6a4c85a900febe3ff8e579f0244c3cdea91","sha256":"5230aa15c51f5bddcaf59af3bf0f0dc6a0aa954344893f511d95817fab8c4d1a","sha512":"c62924cc05373f7d9e58666d9f594be3fbf97ddd5c2f2c9473336a177515a9d6824bf5fe4f5781b8552804027b7e51ee2a92b83ccad8b08bfe18f2f2567ab5e1","ssdeep":"3072:3CNDdwpjxTMvJmYHQMESsRIBEXtKZaEgeZwRN7tMLe316B1ekMvy0A+2Vjh:34pAZCD2lRIO9KZhJC16aLWh","tlshash":"8014134558aecbc2e3bd292d9115ac88f7838cddc3ad1db22c5dd8ef85249524f1236e","first_seen":"2026-07-16T11:15:08.690165Z","last_seen":"2026-07-17T09:19:29.544614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/visa-mastercard.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.819Z","timestamp":1784279927819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/visa-mastercard.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4608\r\nlast-modified: Fri, 13 Feb 2026 10:08:36 GMT\r\netag: \"698ef824-1200\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4608,"size_decoded":4952,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55a9e09633d5e4380ff62dca838709fb","sha1":"fec88ef9c189490f1982269ca3505cbb7967e05a","sha256":"478ad4887b473a408724e99d4c19151306d68ecf07b7cea0c962d594395b3d33","sha512":"b3d9d3a6006cf23134ca3180fa3263516ce86a7bb5eb13d1dd5ab0fd813c3c53725b383f7add8d319366747a97436c861eb444f8506afcb3c3eef25d0454a605","ssdeep":"96:3Elbw+iXWdcv3Q4SIUPYlh2Yydngte86k476X9juJfxFK1hatF3:qwTWOvUcBt+k4gu7c1haF3","tlshash":"23917e473f6699c4c0a1a9f1e84935e3ed16bf4f096f705185da957022138c2af6931f","first_seen":"2026-07-16T11:05:09.645774Z","last_seen":"2026-07-17T09:19:36.550735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/crypto.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.820Z","timestamp":1784279927820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/crypto.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8936\r\nlast-modified: Fri, 13 Feb 2026 10:08:14 GMT\r\netag: \"698ef80e-22e8\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8936,"size_decoded":9280,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90be702530632980af151d7abcebf060","sha1":"d0473a07b330d5c150cec97a9461a5d24e7f3b54","sha256":"bff570ae13f2f006ede83d31dfd81fdffc51aa1e0a6a62a9f3392493dd9ae91c","sha512":"08f9003e4c9d1af880acb17dffe7e30ee754889453c7c02d05a7ecccecc08da0b50a2c539912b858e9f4c86fa0e9e97927b047a123c12f17fcb80a219f362a09","ssdeep":"192:VwT0qSsxhdzLgaiB6aY5sOK5UYWMPOvOQ9w1NbtCD3C:VwT0qxhdvgaiBa5sOAUYnPOvOIwRCbC","tlshash":"2602b063b768abd9e80a6175110b2f24d42339230f8d34d4fe5c25c3566bba82f455fb","first_seen":"2026-07-08T12:11:29.165598Z","last_seen":"2026-07-17T09:19:36.567149Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.776Z","timestamp":1784279927776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-348c\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":4641,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-18T13:42:27.444192Z","times_seen":224845,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.793Z","timestamp":1784279927793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588190-5fe\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-17T09:19:36.565344Z","times_seen":43,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/lukki-casino-8.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.811Z","timestamp":1784279927811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/lukki-casino-8.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4418\r\nlast-modified: Fri, 06 Mar 2026 14:08:17 GMT\r\netag: \"69aadfd1-1142\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4418,"size_decoded":4762,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d01b3e09ac6a68bf4ddd5088eeece361","sha1":"bc6eb050ea932e43f3c03c6dde7a584b9545b7b5","sha256":"d9db133b5472ada60b4553b9b14628cbb581b4aa8d9040806980bf3e74e47cdd","sha512":"d5024135988eb1fe6d7343af4b185a87a3bdccdec270cdb5c02be82dd856bcb9db604ea4e2d70131e6381ed321d99905a9c27909e6c4b5d92d4302d9a6314db2","ssdeep":"96:TElbw+iXtIRGmci3vpvaJmkrL9Bu1ROoSD86pOvBVeKlginBdCrbFzN:OwTCUmci/BaJ1XSFVFLBYPf","tlshash":"05915d1e97a6d382eb216ffce1902356a3157d31c2857d3145e9672b8300ee42f59e2b","first_seen":"2025-11-13T03:52:08.129441Z","last_seen":"2026-07-17T09:19:36.562412Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/lucky-hanter-1-1-7.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.812Z","timestamp":1784279927812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/lucky-hanter-1-1-7.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8428\r\nlast-modified: Fri, 06 Mar 2026 14:08:17 GMT\r\netag: \"69aadfd1-20ec\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8428,"size_decoded":8772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"500497469fc4d9c8535196fbcc740b05","sha1":"354360f6ddbe55afc69f59e694de47d9ea88fcc1","sha256":"a1130edc12b108309f078b239cf9edaf461ab0dbe162323bfa31721218194d7a","sha512":"31b94c02fd24cec0c61e530db7036a52a4c3942847548355977e3f56923661d6003b8423574f19d698c621f6b9d7f4bc73af7b032ec53d5e6f76da963f1e5e6a","ssdeep":"192:NwTJLik8H9zUQ1K0oTatnYrJVphEzOph0ldaT:NwTJv8obQcJV4zldaT","tlshash":"0f02ae092bb60dafe490517d5e69cfd2958841a6c2de3f9903cecb26716ea441c4a273","first_seen":"2025-11-13T03:52:08.173283Z","last_seen":"2026-07-17T09:19:36.581337Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/e-cogra.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.822Z","timestamp":1784279927822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/e-cogra.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3290\r\nlast-modified: Fri, 13 Feb 2026 10:08:26 GMT\r\netag: \"698ef81a-cda\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3290,"size_decoded":3633,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"784df1bc85fceab4db9b889f86aaba8d","sha1":"a885264019d189425f1070ffd650b9b154e03f92","sha256":"5114fbb60fe14892f8b53ad458cb5016625951dcc9d8332979d42c84f0673985","sha512":"9dc98766d7126fbc40ab7f185ec67661d3bae74285866b935118b28fa8d7fc9e21a711b7d480f0b4cc6e889e51920c59475988dbbbdc0c7c075cfa63d7b152c9","ssdeep":"","tlshash":"3e612b72737dab6ae911567260402787d25cf032d66ac74a37d01273a36dddc1e1f0da","first_seen":"2026-07-08T12:11:29.19487Z","last_seen":"2026-07-17T09:19:36.567715Z","times_seen":5,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/gordon-moody.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.826Z","timestamp":1784279927826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gordon-moody.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8412\r\nlast-modified: Fri, 13 Feb 2026 10:08:32 GMT\r\netag: \"698ef820-20dc\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8412,"size_decoded":8756,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b6801447e2a0eb8005ea9b1ea536b2e","sha1":"04b25d7031d68f1cb58c359d69152f88c0ab0407","sha256":"0fa8da4c5da56ff8399c43b87a0358f96eb5de05b69fa5f3fac75a5ca94cbb28","sha512":"629ee0c1001ba59596518e1dabe32ed8edd8492086fe36474397de9d9f01e38d5d27278fd4a95c74f3272156af1acaf97629a8f542108ad254c71c8a6da56b7c","ssdeep":"192:DwTOz4Izc2gY05FFP/k99+jn2qYlt28b0Ro67dWbHbp6par/ss:DwTOZzd70xwYHYfe7AsarE","tlshash":"7402a073bf2b9315c4b19b3951a6f3c145e06c770742e49ea25601f826c623b799c0ca","first_seen":"2026-07-16T11:15:08.679292Z","last_seen":"2026-07-17T09:19:29.554448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-includes/css/dashicons.min.css","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.750Z","timestamp":1784279927750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 06:49:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a587ef2-e67c\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59004,"size_decoded":36087,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-18T13:42:27.374933Z","times_seen":62154,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/gamcare.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.825Z","timestamp":1784279927825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gamcare.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5270\r\nlast-modified: Fri, 13 Feb 2026 10:08:30 GMT\r\netag: \"698ef81e-1496\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5270,"size_decoded":5614,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13a4c0199375d4cd3588a0b0024d6b57","sha1":"939007e67050a62cbd2c7f6fc3f73a9612fc197f","sha256":"64227876fa2b8ef9038309462cd8d8c0c0460ee0d2cce0f4ba1117fd1f629bd0","sha512":"5708bf31ccaf3b1c25cbcca5f7fc2111748656d32371970453f26b26a72d2088d5025320aec18f1b3f19616675bc0b3affa64540e90a81da1156fa6fa8a12bd3","ssdeep":"96:8Elbw+iXj+J4arxOc28cEMbbRrYDdVW60g0bd+yXLdYN2+qtY++H7Ooj4eoGZrQ:JwTWanbbRrYDnE5+Kg++H7Ow4RCc","tlshash":"5ab18f9432588b49fc937bb170c04f96d5047b1b4a509d9647c892e7a70ddc24b0e753","first_seen":"2026-07-16T11:15:08.65552Z","last_seen":"2026-07-17T09:19:29.558015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/ssl-secured.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.828Z","timestamp":1784279927828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/ssl-secured.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4792\r\nlast-modified: Fri, 13 Feb 2026 10:08:35 GMT\r\netag: \"698ef823-12b8\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4792,"size_decoded":5136,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2852abb5d2784a21f7af235e332f6d32","sha1":"cd836f41e0e47bab1729096e8ad29e8085e2be65","sha256":"f19c6225cdc5789bef81e53a10e28265a5185bbcbb33bde7181be362ce8c83fa","sha512":"1e02c32c8635c6f6db2d673b0a185de7bcbeccf6751e77999bb9463d7eb5e84da8d940cec19c0dfe40547ed410f63b2255b3ad81b380182a71acfbf14cedfa4e","ssdeep":"96:wElbw+iXtcFUwALK6FBhvWn4z0lqjyQHlyJx+UZ5isOYgetltGau3yYAkmbpFBe:VwTiyVK65ug0gjyQFyJpZ5dzbtijafe","tlshash":"c0a1ae7dd69172c0dff72e38a0906d505f5e1d294fc2c28392ed1201ffd4982a45a00f","first_seen":"2026-07-08T12:11:29.150265Z","last_seen":"2026-07-17T09:19:36.572405Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.987Z","timestamp":1784279927987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-4c08\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/mc-afee-secure.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.827Z","timestamp":1784279927827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/mc-afee-secure.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2086\r\nlast-modified: Fri, 13 Feb 2026 10:08:34 GMT\r\netag: \"698ef822-826\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2086,"size_decoded":2429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01cc7ffbd9b08546811c16d036cde6a0","sha1":"561c6a6520bc561aa2c436c9ae1152f3bd617a7b","sha256":"3788a634740edcf53414dae9102ea8aafa097cd3549ea21df3a5d297736c757b","sha512":"ec9e1a49dd546a61f97f195f6cb516707e8452d2fcc0256e7d791cdf902f91ed257caf31dbb24047e956ae93cc3315b7875d83eef9c019d91a9dcc8b94bc7da0","ssdeep":"","tlshash":"e441c876e36cd3dcc094b63d76b21bc173ba3834ca56afd2818088694a35dc43454cd3","first_seen":"2026-07-08T12:11:29.149171Z","last_seen":"2026-07-17T09:19:36.577282Z","times_seen":5,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.754Z","timestamp":1784279927754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1027,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-17T09:19:36.556937Z","times_seen":34,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.774Z","timestamp":1784279927774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-30e0\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":3879,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-18T13:42:27.47195Z","times_seen":217201,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/background-10.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.975Z","timestamp":1784279927975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/background-10.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15746\r\nlast-modified: Fri, 13 Feb 2026 10:18:49 GMT\r\netag: \"698efa89-3d82\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15746,"size_decoded":16091,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e6de3b2741fd76b7e5dc21689524234","sha1":"9c3543cbb4251d5eca8727f63948ec855a548c1d","sha256":"5c33aa405b6e37fe780353890685322370ecdbd4795d333eb1c5b257cf6fcd9d","sha512":"db427daff9d1b0571b1a933ee2749429f29b4a3b631c9d2467767224e4e725bc3c72f7b053e2703a05d62e5848b63af6ab9a37f1f21fd02fc3a6baad1a3cd4f2","ssdeep":"384:twZ4tw6ZZcDFtf7vFONSWQvr2EKVeIRie:SmtwMZcff7dO4DvCJ7","tlshash":"e262d1e2b3b4c310f30a5d3668c9ae2ac880cf27456ae4d9443d1d5d29c1541defe6dc","first_seen":"2026-07-16T11:05:09.621218Z","last_seen":"2026-07-17T09:19:36.564172Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/favicon-18-36x36.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:48.036Z","timestamp":1784279928036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-18-36x36.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1gIG1oZBVgcChcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1014\r\nlast-modified: Fri, 13 Feb 2026 09:58:16 GMT\r\netag: \"698ef5b8-3f6\"\r\nexpires: Sun, 16 Aug 2026 09:18:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1014,"size_decoded":1357,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f52fe9384425b2a5d3984c74c2d5262","sha1":"12725b70ce9e011248a6908d74b511abe3544d5a","sha256":"f7406815ac9bc5ed8b1269d2685f438f8e990c11cc8e6a17b87831f80ccd85f1","sha512":"035e46ee832dc6f27cc324512cd3c6d4858edb4958b3cf61197d3745d2638980f61be40169d42b2af239b734e8929786704b16df55a9a6f2e079ea4b5fb8992e","ssdeep":"","tlshash":"4a1196305f16171cf5134bb026b00f52ffbc3d345289c6b58040026213086d71b2c78b","first_seen":"2026-07-16T11:05:09.647425Z","last_seen":"2026-07-17T09:19:36.586969Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/0x0__28_-removebg-preview.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.799Z","timestamp":1784279927799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/0x0__28_-removebg-preview.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15200\r\nlast-modified: Tue, 09 Jun 2026 14:00:53 GMT\r\netag: \"6a281c95-3b60\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15200,"size_decoded":15545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a29908cb688d388f9d676f2df3005a","sha1":"08fd835f8877b50dfa0bf86c7c7289bf80bceb19","sha256":"e5387df49b389f37e9edeb9f2ad57bf1a905bde34505abd4b53abe7484104207","sha512":"5e8b9b2aaf1e4add5ab7d7fd51938b68f06bedbcc2fb14e60ab325e939b7ceb515d979ab18de9e276618df0be209cb4408b775264c1c0cb74d7da5acd852abaf","ssdeep":"384:VwT6fMoelWQoVm1B91IqkeutDRdzIww132gLcpznBGrJOov:KT6cWQoIWeMDzTw1voBOOo","tlshash":"f962d162361e5d30f093797ab2c3716f2329dd21a3794780624e54ef1bc8de20e885f8","first_seen":"2026-07-03T10:53:35.712019Z","last_seen":"2026-07-17T09:19:36.555317Z","times_seen":8,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/gam-stop.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.823Z","timestamp":1784279927823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gam-stop.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4578\r\nlast-modified: Fri, 13 Feb 2026 10:08:27 GMT\r\netag: \"698ef81b-11e2\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4578,"size_decoded":4922,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68273ee78cb0a572602b04987c2ec5e5","sha1":"f7abe89f849b5951bd7787d5078bdb9d52b54ce6","sha256":"0c9a7ee15e0494134c1756d89c54cf887a84ab3b28aaef31dae30d7a558df6c9","sha512":"75a0a11961b946d49f20176c3ed58335073b5db71b566a96ab237d4993835075df28863785714adedf67d44653bff9d19e8f3bafc0a10865f4cb291da026e234","ssdeep":"96:RElbw+iXF/E3icgCBUIULfgIlbVJ+h3DRkAZG+IX24kjA/BhYAZeWlPugz4T:8wTF/EySB7ULfgIlbERBEXRwAvlWd","tlshash":"d3913ce05255c714f4e03f71b072db13d1326a8a9f87963c890286d69b0d9da3aae8d3","first_seen":"2026-07-16T11:15:08.684555Z","last_seen":"2026-07-17T09:19:29.574146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.979Z","timestamp":1784279927979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 282\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-11a\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-17T09:19:36.583551Z","times_seen":104,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/images/g-close-icon.svg","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.981Z","timestamp":1784279927981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/g-close-icon.svg HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 329\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-149\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":329,"size_decoded":674,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7bc0b4de3f688514ea534cce822455a","sha1":"a7835f8f1d10e1be1f1bd1594a92e6f9d85f5520","sha256":"98074d2ef04999dfacdf80528b8c0a5b0994946eeb1d38a7e827fb5d2f32849e","sha512":"2c5f307207620c52ed973ac17e1063fc858252698663001787e4874cdca3d224a1d0a756c039fd01a327a51c2fdf876aea6d5fae5d0b1e9131bef823e4f42482","ssdeep":"","tlshash":"04e026dc72bcb850c7008312faeb703a3c6230a409aa0958cbd159d1b51ccba2f15fe8","first_seen":"2025-06-17T02:00:31.780234Z","last_seen":"2026-07-17T09:19:29.576146Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/bitcasino-1.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.796Z","timestamp":1784279927796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/bitcasino-1.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9362\r\nlast-modified: Thu, 28 May 2026 08:56:53 GMT\r\netag: \"6a180355-2492\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9362,"size_decoded":9706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-07-17T09:19:36.554611Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/02/install-a-shortcut.png","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.815Z","timestamp":1784279927815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/install-a-shortcut.png HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 172135\r\nlast-modified: Tue, 17 Feb 2026 14:10:52 GMT\r\netag: \"699476ec-2a067\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172135,"size_decoded":172481,"mime_type":"image/png","magic":"PNG image data, 250 x 510, 8-bit/color RGBA, non-interlaced","md5":"fecfc6830ee7eeab679e9c74958cd7a0","sha1":"0f30bb5183428181dda9060b38d24337a3d8539f","sha256":"eb7f3de74e6916516352fcc55ae482220abf34eadebb86c7ae411660ad4daa16","sha512":"b8dfe5fd7fa01ac74fa666aa6191e8ee18b44b44acee05e038f39de4f1088686f3c177d69704e2c1addbc3072fa01d59f6c94c0282921c8e97f54b061b3e0727","ssdeep":"3072:sKK8AN5zMB/U3Gx6XEBe5mCtbaSuFIBoQY0E88tLkCmaXa00BiKoi1uZn:sKpsNc/U3GxDe5mCtbaTKBZY0E88tLk6","tlshash":"46f312aee9cdfa45e3d977bd2db80a79476e79021d2863dc105a1c230b748c4ed253d4","first_seen":"2026-07-16T11:15:08.673326Z","last_seen":"2026-07-17T09:19:29.577518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/04/19.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.830Z","timestamp":1784279927830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/19.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3748\r\nlast-modified: Tue, 28 Apr 2026 12:13:07 GMT\r\netag: \"69f0a453-ea4\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3748,"size_decoded":4091,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cf8297ef9496d20c579c118769c9dfd","sha1":"eb2b7769dd763fd3aeb5410ce6863c82f9594668","sha256":"9dd2b0a1806477da79569b5d03dc133bd8bd393083b5df44a34e48885de0806e","sha512":"d727557d2cbe6b1e9abc1a5e2b48978ed4e6332a5cc0fe9206707e7f014061dd8ff63c4505d5c93843745bef85b1d1ba3d5f9064c77a2dcb7630dcaa5d94400d","ssdeep":"","tlshash":"77711a145cb213a2c69d7b364deb2f50dab316468ac4c3dafde9cc635d518403b2b08b","first_seen":"2026-05-15T08:04:12.089938Z","last_seen":"2026-07-17T09:19:36.579554Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.780Z","timestamp":1784279927780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588190-2174\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8564,"size_decoded":3064,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-17T09:19:36.574842Z","times_seen":11,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.785Z","timestamp":1784279927785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 598\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\netag: \"660dd398-256\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":598,"size_decoded":967,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.797Z","timestamp":1784279927797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588190-5fe\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-17T09:19:29.581557Z","times_seen":38,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/gransino-casino_logo-13.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.807Z","timestamp":1784279927807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/gransino-casino_logo-13.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11764\r\nlast-modified: Fri, 06 Mar 2026 14:08:17 GMT\r\netag: \"69aadfd1-2df4\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11764,"size_decoded":12109,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de4423a831842a22de1885b71e228ab","sha1":"c9bed5a72e642a86a69087fd150cb6db0c0135cd","sha256":"457a0926d55c930b17bd92fe88049283a2f53f8b39136fcb5fbbcb23a0b8b176","sha512":"7ded7a6382ed74a24188b344dce13e47e154d4faecba1376498af60ddb1b4f84cd2a77214664807eff4639e1e6c0d9d8c75a252956611ecaf1ba88574abcb71d","ssdeep":"192:HwT88rZHYe3PDSIhmR/VSRVOUSsPvpGftFGIfX+6xGhZ1xASU2:HwTNF4e3mIa/nUtPvcfbGIW66D","tlshash":"0b32c057f730ca4ccb0943331d559f849b2a2d366227cddd9894e8d325173e8ae6aa33","first_seen":"2025-11-13T03:52:08.138651Z","last_seen":"2026-07-17T09:19:36.580705Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/logo-playfina.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.813Z","timestamp":1784279927813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/logo-playfina.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36516\r\nlast-modified: Fri, 06 Mar 2026 14:08:16 GMT\r\netag: \"69aadfd0-8ea4\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36516,"size_decoded":36861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78d693c5ffcb8938f9d786a438c637a1","sha1":"cbab5f0e49f47e88cbcf3e0e929dfe9375c7ca11","sha256":"159396cb290ee45165cbaa7d8d0d691d22e090f6c56ae107106ec4589af3f15f","sha512":"606109185e43a415dd6bc365a8fbb1cf975436ecd6a119ffb108c18bd4bd6b5025f1ab21568df69f2202c0519f327cd4f15210ce8ccba4a47b5aea8103d97021","ssdeep":"768:VTNOoMmLx7Qh5c2P8lV8/ST7KBLuuyWn/6pBGdCF0SJWgv:3nzx7Qh5c6+8/ST7uuuy4ypwu4w","tlshash":"b6f2e09b6316770aef789b7c7ec2ea53702b79109ef85aa3d07084a329981c69495c84","first_seen":"2026-06-22T07:10:50.512438Z","last_seen":"2026-07-17T09:19:36.566536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.984Z","timestamp":1784279927984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-4c7c\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.978Z","timestamp":1784279927978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-df\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-17T09:19:36.586377Z","times_seen":37,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.783Z","timestamp":1784279927783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 13 Feb 2026 09:50:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ef3dc-9ec7\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40647,"size_decoded":10956,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40647), with no line terminators","md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-18T11:07:04.170667Z","times_seen":8141,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/Logo-black-2-scaled-1-1-1.png","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.800Z","timestamp":1784279927800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Logo-black-2-scaled-1-1-1.png HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 35674\r\nlast-modified: Wed, 10 Jun 2026 14:48:53 GMT\r\netag: \"6a297955-8b5a\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35674,"size_decoded":36018,"mime_type":"image/png","magic":"PNG image data, 240 x 112, 8-bit/color RGBA, non-interlaced","md5":"e3e7d3767b0ec1a8dc053f8a6d64b7c3","sha1":"f56d4cfe52e6207ea2ba7f4727e6f6b78f50042b","sha256":"1e9e342045c462ea2050b85f8489f560c2fc245da8136cae9e98827940748553","sha512":"b080ad48f4b33103f3f1c41a12e0e578f2951cada4ee3418922ffd983499cb37686ef31319eb01ab5dc5d3ba0d1512e627204b7947360b1d1e0b967859f7421d","ssdeep":"768:nLPNALQ1XHGFOHLLT6eDDHhV8x0oLu5agG3oAz9vVq+:nd1XH80LLu6HTN+u5ag89zxVJ","tlshash":"cbf2f1e25e5952b49d18e328cf00d16a573f196e80ff3a9f88f84f24132ee5ee40465a","first_seen":"2026-06-22T07:10:50.454495Z","last_seen":"2026-07-17T09:19:36.557534Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/casea.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.802Z","timestamp":1784279927802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/casea.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4626\r\nlast-modified: Thu, 28 May 2026 08:56:53 GMT\r\netag: \"6a180355-1212\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4626,"size_decoded":4970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99854d0a11a9071b5bd0c7b524240ec4","sha1":"cf6a6a259afdadcfe429374ad3a0d51e30c9262d","sha256":"333b32661434cb1ae472903224465055af7f02193ac37189529020f6204276d6","sha512":"017b2a49e749a74b0f8b61217bbffe0a88b766d7441410b96d0672b3b4826b3edb71c4e139206dc9d734b68fd1593e91b9030969ee93b0824ab027a7943110a1","ssdeep":"96:gElbw+iZT9OliRStMUZedQGjvTOIimJV8endhCPllse5DHFmEF:FwjGiRStlopj7OIisVNdAPbxF1","tlshash":"45918d712f4653bdc1180af80b69f18b83ddb03cc1ee466b54940023be614e6acd1ec7","first_seen":"2026-07-03T10:53:35.713042Z","last_seen":"2026-07-17T09:19:36.55851Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/uploads/2026/03/goldex-casino-logo.webp","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.804Z","timestamp":1784279927804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/goldex-casino-logo.webp HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10772\r\nlast-modified: Fri, 06 Mar 2026 14:08:16 GMT\r\netag: \"69aadfd0-2a14\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10772,"size_decoded":11117,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b743c8b52d59a4896ed4a107b8464a5","sha1":"3c377e02290e1c945fe95683c6c48a30e9133af0","sha256":"3f6459adc35f31999790a201dbac78ccb7e39be24e50e3b903c0e1757ed6f995","sha512":"f8c1a06382479a20b21bafa7ac56d0a931e35372ec915d63195edabd161310b5de2b284ea2e879d256f63446033b10285caf2573948cdd17c481cae6444c986c","ssdeep":"192:QwTCf/R1TjpVlxSLqYUGYrcXrpbyC+oaAn/k1WL7bqVItIuPxwEmmc:QwTCnR1vpVqG5GYrcXrEhAM1XmtImwE4","tlshash":"2a22bff052338ab5ed435134a0e27bc4a0eff51c4fadcfa6874507032e66961969379e","first_seen":"2026-07-08T11:54:42.219485Z","last_seen":"2026-07-17T09:19:36.556302Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.985Z","timestamp":1784279927985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\netag: \"6a588190-4d38\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.764Z","timestamp":1784279927764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 22:04:02 GMT","end":"Sun, 11 Oct 2026 22:04:01 GMT"},"fingerprint":{"sha1":"6A:51:15:F9:1E:02:E4:35:97:2A:18:48:2D:11:45:75:3E:66:46:2F","sha256":"6F:74:D3:86:E0:35:38:B0:3A:FC:F7:85:47:E6:68:5E:32:F6:32:16:56:40:6F:E8:27:E7:B1:AF:3A:99:98:28"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: zstd\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:04\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 5f7c6999c66159f71bf31aaf59091969\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":991,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-18T12:48:28.908879Z","times_seen":16430,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":40,"connect":39,"send":0,"wait":2,"receive":-1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.770Z","timestamp":1784279927770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 06:49:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a587ef2-13ba\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5050,"size_decoded":2205,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-18T13:42:27.341344Z","times_seen":5355,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetappcanada.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbetappcanada.com","domain":"rainbetappcanada.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetappcanada.com/","date":"2026-07-17T09:18:47.795Z","timestamp":1784279927795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetappcanada.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:01 GMT","end":"Wed, 14 Oct 2026 06:11:00 GMT"},"fingerprint":{"sha1":"4D:D4:64:C8:B5:0D:4D:DB:65:01:D6:40:FD:FA:68:33:20:A1:21:B2","sha256":"DE:CB:69:59:45:87:85:2B:2E:0A:08:0D:CD:08:BA:2B:8B:5F:26:86:6D:11:85:D8:C5:37:2F:E8:1D:AD:E1:77"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetappcanada.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetappcanada.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 07:00:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588190-5fe\"\r\nexpires: Sun, 16 Aug 2026 09:18:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-17T09:19:36.560105Z","times_seen":44,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetappcanada.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}