{"report_id":"21a16af8-9d37-4a95-8c4c-13afebe883f5","version":0,"status":"done","tags":[],"date":"2026-09-17T03:17:11Z","url":{"schema":"http","addr":"rainbet-au.casino/","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"172.67.162.113","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-au.casino/","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"title":"Rainbet Casino Australia | Use Bonus To Double Your Deposit Now","dom":{"size":30686,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1505)","md5":"7f40c614d5cd195bd3b5e4d243842826","sha1":"2285f8e75215742d785f39869b3547214f300b68","sha256":"9024db32eb5fa46e7372e012e1ea4cfa8db08a3771753115f63b9276018179c0","sha512":"001373da84e5277b9a3eb284b078a7e6a77a1fe9dfb061cde1244c91160c29391796edb7e7212bb09a5ed96ed707cec1f79732e631bfeeae9b3e8c89f060081f","ssdeep":"384:i4RqWUxgj9YL4RWN9nHSmhB6pQGbZOsOMdFk4aNJ/q7ARdrSFSIBcD6dk3w:iuV9MlEmHGb5lUVFdTIBcD6dk3w","tlshash":"56d21a2b814403f707e302e4bba83f6ef29e4468a61625149dfe838d13c4f69997779d","dom_hash":"domhash27dbbe0275883ae5a23aa476c2b77c21","first_seen":"2026-09-17T03:17:16.119462Z","last_seen":"2026-09-17T03:17:34.822448Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-au.casino/","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"172.67.162.113","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:17:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-au.casino","ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-17T03:17:11.446327Z","last_seen":"2026-09-17T03:17:11.446327Z","alert_count":40,"request_count":20,"received_data":311409,"sent_data":11134,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-au.casino/","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e22f01c5c243f600466b9fdf741859f","sha1":"070fb206ecd840a361258631d4757a5c59344d8b","sha256":"7749f97c29347e28c5c47b6e6c43793ff3e44e3b2a8d4cc18cb8b6c63878b1d5","sha512":"382b7c81da218bea48340f1b95fc9d83e33f6c7f67a0532548e4a601c6d19a98f6c28146b90886ee0307727fc7da48c9c38d276ab435baec9db3f2dec87f74fd","ssdeep":"","tlshash":"61e07d3b3b161c7b81f7545690c056f83e1d00862143405124dcc4244790fc008fbae7","size":305,"data":"","first_seen":"2026-09-17T03:17:16.175245Z","last_seen":"2026-09-17T03:17:34.865625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2ba2580d1020518795a8abd6dbb5e0f","sha1":"609adbfdf3cd3e814c3d2a66bee869b126820fed","sha256":"9f15681abff32802635365f1f01fe35f985dc078e2c49f96eff0988f1f1de2ff","sha512":"85073a6146179871638bd16168f88f326ce3c9a59a02716dccb04f4a45fd91c702ef7ed393afd7cdce45aee983a514d78cebde69d6ed8703acf084f79b7d546b","ssdeep":"","tlshash":"5af0c90e18ca0e7d413a627cbc3ecd2cb6eb1c24d4b2c0449ac9d4756ab9f8a069038c","size":519,"data":"","first_seen":"2026-09-17T03:17:16.178146Z","last_seen":"2026-09-17T03:17:34.867042Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/matomo.php","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67972,"data":"","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-10-11T18:57:22.646509Z","times_seen":19015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/plugins/slot_pop-up-acf/script.js","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8166626c4595df4b03eb6f1ef1ac842e","sha1":"3441268276b5c44b82cc861288b96ece19076204","sha256":"b0accf28f35fac633e974fb0a8e247e637a9bdaedb520af14da07819274bfa2b","sha512":"7a458c23910dcee6a96d9a995fa4d718e5959d62ac5fb533512c0c04491e7ed5f4ca8f73217ce4f5eee904deac984d4e0181ac7840cfc466560e68364c926442","ssdeep":"","tlshash":"cde0ab28a3f044ba8477c0b602a59bc92d7840969bc99655422c7c480fc97e563f00ce","size":385,"data":"","first_seen":"2026-09-17T03:17:16.168005Z","last_seen":"2026-09-17T03:17:34.863712Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/assets/js/main.js","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"096abce4ef86c27ccd92254b42b6512e","sha1":"22a1b7d5d9ae8124bbfe4f4b540d8dd92d4ccfcc","sha256":"b027ce4dc365dfeb1013072433cf33b43ddf937650c9cdf2a7acc0a937a21bdd","sha512":"e2d34d6e646c3d4b8dfff81d02fe54dc5c2c6c224b4c4818f0c773cdcd792c3c25388029bad7ca5158011ba111eed857460d611ecd56fb08ebf6abdb976cb479","ssdeep":"","tlshash":"f911dcb93574183001fab2a5a28fabc8793c20def04b3652384dcdc898d9db514f14e7","size":884,"data":"","first_seen":"2026-09-17T03:17:16.139408Z","last_seen":"2026-09-17T03:17:34.836797Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/b0876-192.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.742Z","timestamp":1789615001742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/b0876-192.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:28 GMT\r\netag: \"6aa31f94-1310\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUWpG%2Bx84kWQ9CWuQKjlmf97Nvo%2B1D9%2FJHLIE13LLkqudDIANer%2FRgelCNs7Nu8bsImyaOi4Xi2c%2FoI%2FbBjZ07m2YjwJjsOGZ85doTYi6A6pMrg4C3a1j6F99t29PGn3sP7W2A%3D%3D\"}]}\r\ncf-ray: a3c4f420ed71b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4880,"size_decoded":5591,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"870847f1359c08b0d4052d972ed025a4","sha1":"0d83f8febcdac0b0634ece7a4223642264189db7","sha256":"42bbc03b97fe5747bc23dfde54d79c35bf39f0e9b724d7ae44645527d5c83303","sha512":"c0679ade8d128b669afb365c2abe7c9da4d91697993f54e6d32bfc2b093a35d48ea419a2a6f57181844fc783c687124ecc72f021e32cede9a407a07fa38ad08d","ssdeep":"96:70wQGWcasjxM0tQN7Wy9nrIAKw+MX73Zo/8zaV/o5UYtv/loV9:73j27rIAKwjQ8uY3lA9","tlshash":"22a16bb01f01457df23e5ec8274a9b613e5ab3b25c0627b1927e52110fe6894af6e624","first_seen":"2026-09-17T03:17:16.124709Z","last_seen":"2026-09-17T03:17:34.834169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/1fc5a-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.287Z","timestamp":1789615001287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/1fc5a-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:21:47 GMT\r\netag: \"6aa31f6b-1e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dz4VvV5iL60N3FuKE3cmF2lVjXfPINWi72R0oMEaZtd%2FivzqbJaxGcQRWpkKQiKS8S0CDerzhehVh0JQxnzNe216uWk7udR0GL36VpWpn34qMKdzY2Qnw6KKlDjDhIB4zLsgrA%3D%3D\"}]}\r\ncf-ray: a3c4f41e0d54b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7744,"size_decoded":8442,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5f90f0b6356853f1c9a3c338a1444d1","sha1":"6c1fccafa762deb986cba26f6d90356caf435ea2","sha256":"67c46e6a043842ab10d461b9a78dd374f2570351428854afba6330bd5eeeaf42","sha512":"95f288e1a294042520376ed415d7b8679bfa768caa1176cdd84c264bb1f704a6e4ad2737395e0a595605fe85a1c7c0d2382e9f40c6e3bd390d167a32d75e4b08","ssdeep":"96:hV1ZDY9RZU/mCHioOKgOXvnnQQZs7gSR4evLFBxyLwsOFED19mwUXIPa40j/brlU:LLDakCbo/nRCljBygFEfmR4r0zV17XS","tlshash":"c9f19de92a1f0e4d1aa539c019ba093c4bba547367686aeecb5f944348c987063e3652","first_seen":"2026-09-17T03:17:16.129868Z","last_seen":"2026-09-17T03:17:34.852145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/68e60-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.290Z","timestamp":1789615001290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/68e60-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:05 GMT\r\netag: \"6aa31f7d-2a30\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiAer0HnOQGLDRU2Utc5%2F9ZfKZ%2FobNRo3D5EoOyzvYicBpVAwKe1Px2ccf8Po8uieYnFuxpltOR16%2BxM8qBZSxLgFzT64tenp3HcOYDVfzx4nkCIfTY%2F9ScmrvlqiQ0GZ1%2BIOw%3D%3D\"}]}\r\ncf-ray: a3c4f41e1d56b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10800,"size_decoded":11507,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"26e121bc56c18484a9740de53008cb0e","sha1":"15b57780326950d1f046eb9d1bf6a71f12da43fe","sha256":"1eb3ce0395579eb8d9b5111e5026f71d3dadbf36289d36fc873e8b42afababc6","sha512":"a6776596cc3b75fb8d8bee07c235c104dbf3a84c54a6e59eaa2a5e2472204f2ddf9f47efe6967e278abdbb21ad44890620ea375830f58c3108307b25ff6af0ae","ssdeep":"192:Og1K08zdgXy1j+YdNNvw9GYOptJaFRilGG5oh+DspFWBxRmQok47D:aP2yJbfNSK/lGGC+DuWd9okKD","tlshash":"0d22b0156460004c255af1eddc1afc2e1ea3df5ea431fd6fd07e8a98e9c5145e9829c8","first_seen":"2026-09-17T03:17:16.134505Z","last_seen":"2026-09-17T03:17:34.855701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/matomo.php","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.614Z","timestamp":1789615001614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /matomo.php HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver-timing: cfExtPri\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJNcoZjzwVMWwQRU0GLBsRuULgwLujH%2FIe%2FeKKOfWqVsNFy8ATYsuipquuX6E42QhHzNkesw4s9NqwClPLasghR9npUjxCk%2FSUGckQ%2FEM626Jroj4n9rKzw2eE1eCOlrpnC8vA%3D%3D\"}]}\r\ncf-ray: a3c4f4201d68b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22105\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67972,"size_decoded":22808,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-10-11T18:57:22.646509Z","times_seen":19015,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/assets/js/main.js","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.281Z","timestamp":1789615001281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 10 Sep 2026 21:21:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8M38VpZLEMrA6Aq8LkwMuXT7C7qGbtbvPUl6oexCuow4yrxNhMilcpLAfCWyYFfwpu7A%2BcZoYouTjaA2Ayycar9%2B8i8g%2FJ8mQRYJPTo5vRJx2qu6WHWSM48m4CiTWDb3t2Y%2BA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa31f57-374\"\r\ncf-ray: a3c4f41e0d51b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":884,"size_decoded":1162,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"096abce4ef86c27ccd92254b42b6512e","sha1":"22a1b7d5d9ae8124bbfe4f4b540d8dd92d4ccfcc","sha256":"b027ce4dc365dfeb1013072433cf33b43ddf937650c9cdf2a7acc0a937a21bdd","sha512":"e2d34d6e646c3d4b8dfff81d02fe54dc5c2c6c224b4c4818f0c773cdcd792c3c25388029bad7ca5158011ba111eed857460d611ecd56fb08ebf6abdb976cb479","ssdeep":"","tlshash":"f911dcb93574183001fab2a5a28fabc8793c20def04b3652384dcdc898d9db514f14e7","first_seen":"2026-09-17T03:17:16.139408Z","last_seen":"2026-09-17T03:17:34.836797Z","times_seen":2,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/a320c-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.288Z","timestamp":1789615001288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/a320c-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:20 GMT\r\netag: \"6aa31f8c-2920\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=97eY9JgXRWVFfeJFVyhURaJnaP7GKHLXLk0I2pBHiVF8c8xsYTRvZOyKny1eghqEdij6khbpsL58PynzAjvfrH5s2YhCvMSR1EPcPPWsblF2dahGuFwCE9gC4DLmgsCh2B%2BBgA%3D%3D\"}]}\r\ncf-ray: a3c4f41e0d55b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10528,"size_decoded":11227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92274fab04c6ffccf763d166be7d0abe","sha1":"93a2e6b605f3a86e6285d302ff2c0cf1bf53fcea","sha256":"e3fba9d542e5edde33efefbb9d0c677332c5b1dabdad7ad84047bb3bdf9bfeb9","sha512":"f85836816a60ba3873400ee254a725dc51998fbdd88810300216060a1e211a14ccb0c8cdd5703e6e557dd1fa5ca18f95d23ab30d029d11c6522d59e186a5f596","ssdeep":"192:IxXZr/bFwI3rX2S06rdAO6XF23ph5QpCZGovVY7oR:Ip5/bFwIRTrdAz1YpQpiY70","tlshash":"8722c012bd677a3a2385866c0010bfaad102e87fd397ff30c5ec7b9628014676b38316","first_seen":"2026-09-17T03:17:16.142419Z","last_seen":"2026-09-17T03:17:34.854112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/0e272-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.291Z","timestamp":1789615001291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/0e272-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:21:45 GMT\r\netag: \"6aa31f69-22c2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8JOhZrOKYKWD3fRudilioMy9TJg0lurbWCZrEmjXr2Fx1oZwagPVeZ37W9v0GDI4srEgj3aPQniDNSWf2rB%2FOmDFKd0bpduUYmWw6qKoNdlW%2FBIGvaH1krW5rKuyRYza7wMww%3D%3D\"}]}\r\ncf-ray: a3c4f41e1d57b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8898\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8898,"size_decoded":9598,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35a274b0d1dc0dfd3628f0cb82849008","sha1":"c4fee469f7ca7123f3c1eae7f5d845866c594c4d","sha256":"f5816140f2741ee574d3bd03bf42b2cfaa5cf54318acafad767db6fd3bf17be0","sha512":"f5083f74ab5fdb644fbfad9fa865d2870d72d5f3f25817d674cb31b4a21923c7f61611ca76ecdbc6045ea91ad384f7937c1699fcbcbd32c2e6bbcc90e078e380","ssdeep":"192:jr1zzBDS5eoHbLBI6hPeno8iH/9LY9zGRP8pmBNHLanESTucjE:jr1zp4vPCDnSHVLYN7iuPRE","tlshash":"33029ee051efd8401de0e93ed994a7259292537feb18a0a1079240e9d75d723be902b7","first_seen":"2026-09-17T03:17:16.145279Z","last_seen":"2026-09-17T03:17:34.857333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/c3c5f-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.293Z","timestamp":1789615001293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/c3c5f-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:32 GMT\r\netag: \"6aa31f98-2536\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDlhI71hktdG8mK4bGI3pbOBL%2F6okvfYoxqJGWz8lQiMrwM%2FOz%2FESzHftWK3LT%2F3HLshw9SKUVtr4XrTsDk9rrKRHB2Mn7Ksp1zpcSShQU467ycvVFH0rI%2BwRftMyTAuh9GOgw%3D%3D\"}]}\r\ncf-ray: a3c4f41e1d59b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9526,"size_decoded":10232,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5cfaa773c13230a38a0ea8b7268f3233","sha1":"1a15283f4c759bf393c6bcf67768245931d85904","sha256":"08e7be58438082292ad23c7bc34aba9a9baf2f0e4856b1101daa8ca229d9769a","sha512":"ba08285db333f19544608a9ba1eb99a08dcd1fa01acec94eba4600246fcd2714b094d8bf67839a8011fcec2a6ae915cc26a77a2afb130ffcdcdc3a4d6454cf1f","ssdeep":"192:Rb4dVsrg4fjCc1MvHEUePOFJLbjaV4h2pbnw8ut/JxvOWz:BgVsr/+c1mHPz68OnAtxxvv","tlshash":"4f12a0a95743fec0631bea50f45729a406edc69a4952b0cf325b916c33d0b77d40e26a","first_seen":"2026-09-17T03:17:16.147703Z","last_seen":"2026-09-17T03:17:34.845413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/92582-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.297Z","timestamp":1789615001297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/92582-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:18 GMT\r\netag: \"6aa31f8a-2914\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5JIqTWkR4GLbfthzpG7pknb8He2JW0Ve1FZ0WgilyYcVzRkKzfXlv2zyBfri6LXRMl1QnZpULZny7VtQD8GzaOQUByviWGc9fkAxoKsmAcmiOnyoQFoMLsW9LEfqOHRV8M92Q%3D%3D\"}]}\r\ncf-ray: a3c4f41e1d5bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10516\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10516,"size_decoded":11215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7b290c1b2a25f321bbfcef923d8fc4a","sha1":"60c812abdb84a3d828238ba8640308925da4d4bd","sha256":"e9ccba3d2258cf89922bdafb9a19e57fafb815463f09ba2a57bb13976bdee00c","sha512":"ea3087c019fa98a86f40e38ef0e1a40e6fbac80372f5e09fd849607e1dbc42a638e7a272d1f2b16f9a77e6c855c85a0aef4b7d56cb5ac2e78a8a09f1cd1cd26a","ssdeep":"192:L3IYTJhEEpFjpQEppRlHHAI/c2Yxq/vUqjaAPw92UaY17BZEOCVTtDj:TVAMjRBAI/Yc3Val3V17BebVhn","tlshash":"ba22ae168ed6a4dcec7d3db52c9e5297416d2b6a30c2b4d3712be50c46e9138e933a13","first_seen":"2026-09-17T03:17:16.149948Z","last_seen":"2026-10-07T04:29:16.475415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/445d5-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.298Z","timestamp":1789615001298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/445d5-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:21:50 GMT\r\netag: \"6aa31f6e-32b6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9s5ibKsvwC9nB8fLCdwm%2FU2R86WDm5d4VlRZ19E9XLC%2B17ag7fE5VgS8PcN1nYmMef%2BASflpZ4XUraZWyJvg%2FXVxVP6eB2AdEwd35iFEPAoLdBQTiTTBHhot%2FcMtB2zYU0xUA%3D%3D\"}]}\r\ncf-ray: a3c4f41e1d5cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12982,"size_decoded":13689,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c65e99f2817664aada740d8165a6e245","sha1":"a3c0571808b15296fcb0e2547d28b9199d25909e","sha256":"ea990de2a0c7290dd463e4117530553814af4b1615e356d8d04d9c204a0f1e63","sha512":"c4491491eaac6aecb4febc8651183c87f2ca71dd68cb700b0314d633c8f8b580e4add15641c7bc3f71bf080580477a93a722b5d1a40d4bc591a8fd7e3ccefbf0","ssdeep":"384:qfQUMbhOVwnmJwBc48Tw+irMbdx2lNe2elW:4BM1OVwnSwBZxlNe2j","tlshash":"4342bfd6a8b997d811e08daf8ca590da66ac4d31b36bbe1acf413f5305340939d1f2c6","first_seen":"2026-09-17T03:17:16.151877Z","last_seen":"2026-09-17T03:17:34.860503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:16:40.540Z","timestamp":1789615000540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: rtc=no; expires=Thu, 17 Sep 2026 04:16:40 GMT; Max-Age=3600; path=/\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLKpHr%2BXIjrOK5VOqDepvFfLKMlJWaME1OsIiE%2F%2FfS3emTH6Nm8GpwsjQjLgb%2FYEMcT34B0O0%2FkebaQjsltIsRyQwFOiMRYjtWMPWlcTWNmVjbLPL%2FB9%2BJY%2FlEaFmn0dA7pddQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3c4f419cd3bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"rtc","value":"no","quoted":false,"path":"/","expires":"2026-09-17T04:16:40Z","raw_expires":"Thu, 17 Sep 2026 04:16:40 GMT","max_age":3600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"rtc=no; expires=Thu, 17 Sep 2026 04:16:40 GMT; Max-Age=3600; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":30630,"size_decoded":10343,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1505)","md5":"34890891c1a4bc762f5de3d5ef1d93af","sha1":"a3667b0e8135284e34e12fd40c03c05113e65f07","sha256":"41fa29c62fd9c39bbac60c8c6bc3a5c008f6b2ea850411c2e7950ea988e2c4f2","sha512":"dc460d88e1bd61bb399939ba7317e0164e4b40670ba29b815594611f9beb247d60bdf320f042100c73ef1ea536b27e4f5ec4e4ffa125f592bef6a0bb7edce9ea","ssdeep":"384:O4ie06kxgj9YN4CWN9nHSmhB6pQGbWOsOxnFk4aNJ/q7ARd7SFSIBTD6dk37:O0F9iiEmHGbYqUVFdDIBTD6dk37","tlshash":"e3d2192b814403f307e302e477a83b6ee29e4468aa1625149dfe838e13c5f6999777dd","first_seen":"2026-09-17T03:17:16.154968Z","last_seen":"2026-09-17T03:17:34.862019Z","times_seen":2,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":0,"dns":49,"connect":15,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/assets/css/style.css","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.274Z","timestamp":1789615001274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 10 Sep 2026 21:21:25 GMT\r\netag: \"6aa31f55-510c\"\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upnW6ufHOsF5OG0sfTANHjwC76YgkPJZlRwcrO1JHVO%2BRvaFrHqHC0Ums5ntta%2B%2B%2F27aaeiBxx%2BPEQBpXHW3u2hqw3N2PCV9vuP1uUfCIwYH%2FRmymlhdkRa0lvfGx43h0eU1FQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3c4f41dfd4fb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20748,"size_decoded":6983,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"953f08bae6d70aa83668521a78b49e93","sha1":"fa5e031c8f63c9c3c36181fe2c40f4eb5cebe6de","sha256":"7f18eb1d47985498638db38938b50f4770d955e8a19c3571e694de34a177612c","sha512":"f5fd722fb96942f9e44e89dfa70a24916f5b8582435f46c7e4732ca70d493b4d3ff8ab0d651451d86353e2467621f7c8232b39d1f41394cccb2736365f26a035","ssdeep":"384:qqp0DZ1GIGENOsY+GpyZo2SvMFrd91lEQd:qqp0DZ1DNOsYnkZdSvGdqQd","tlshash":"bc9275132a162a55b62fe1647ee4c78a225ee4c3e91b15f836dd101c83cf2b94537ace","first_seen":"2026-09-17T03:17:16.157607Z","last_seen":"2026-09-17T03:17:34.84961Z","times_seen":2,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/b0876-192.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.285Z","timestamp":1789615001285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/b0876-192.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:28 GMT\r\netag: \"6aa31f94-1310\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6%2FqR1ttHkSNAYE12Md7McUMgKJRV8Ie9IUxnqXudkGTh7vgZXiIq5nJcsUrVni%2FNi%2B6pX8GFsMUBD%2FwXCtxjCR44DOUcqSR7pZs2GpDXd6763MSXt1EjIGG8HtxDVJAq0JgfQ%3D%3D\"}]}\r\ncf-ray: a3c4f41e0d52b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4880,"size_decoded":5584,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"870847f1359c08b0d4052d972ed025a4","sha1":"0d83f8febcdac0b0634ece7a4223642264189db7","sha256":"42bbc03b97fe5747bc23dfde54d79c35bf39f0e9b724d7ae44645527d5c83303","sha512":"c0679ade8d128b669afb365c2abe7c9da4d91697993f54e6d32bfc2b093a35d48ea419a2a6f57181844fc783c687124ecc72f021e32cede9a407a07fa38ad08d","ssdeep":"96:70wQGWcasjxM0tQN7Wy9nrIAKw+MX73Zo/8zaV/o5UYtv/loV9:73j27rIAKwjQ8uY3lA9","tlshash":"22a16bb01f01457df23e5ec8274a9b613e5ab3b25c0627b1927e52110fe6894af6e624","first_seen":"2026-09-17T03:17:16.124709Z","last_seen":"2026-09-17T03:17:34.834169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/78182-1170.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.286Z","timestamp":1789615001286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/78182-1170.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:14 GMT\r\netag: \"6aa31f86-12976\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7cA1oRmrAiSvzWEAvrLGkmwNMNrGhUvKZlKjvWAM9Z4a35gvpk1BbDXhDkRzvvGK7F6jldrIUya7ByorKkXanJT%2FV6UZT%2B4vkh6hG5b7fXP0XWGq0jIBd83GbqJ9fW6EgX2UA%3D%3D\"}]}\r\ncf-ray: a3c4f41e0d53b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 76150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76150,"size_decoded":76852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x780, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"665f81c4ae5789a88a53dc5e92787ec4","sha1":"c5fff2fef0fc2c4dddc214653c43c1ab9d701059","sha256":"068163966d39155408f4000fe2a26589685368f463c3376cd997f12c1e86a87c","sha512":"f1c6a4298ff8f1d4a90472a4734531ad5b8e0628dec8ead7ef6a54602ebfeb64a7e75568d10f076a3580f9b5bdd01f6d32b8b1f3bf001eed9c6927481cf11c76","ssdeep":"1536:XgKe4WobZJrblAkI3ljq6QL8lsHSbFh78bxDSiubqeOwjluE:Q+D99RAkmwx8uHSv7Q2q1clp","tlshash":"c27312c7cde1d674a206740192f8d1a736637275c0dba4af0883b9c5e648ef109fb671","first_seen":"2026-09-17T03:17:16.159535Z","last_seen":"2026-09-17T03:17:34.839293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/71756-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.292Z","timestamp":1789615001292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/71756-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:08 GMT\r\netag: \"6aa31f80-2792\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fmb%2Bh2JNQxmk6IodAAi7u8MmAj6umZH%2F87puKL5NevOiCNDtf1yqvcQ8xIcwykbDGJHTyA%2FwX%2FE%2BhI%2Fj0j5aKQ8muzIORo%2F9hr%2Fh3UNIn95NpkSrSUlrKL0nv1Gh0wQkqooO2w%3D%3D\"}]}\r\ncf-ray: a3c4f41e1d58b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10130,"size_decoded":10843,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e1eec8b04e3faf0b7bb09003542c54e","sha1":"6b50664ac7ed684ee615a29569c5ca17028d5983","sha256":"3fe0b78b02014a59008c9321ae5771b847b82cfc35c64d15d291e6a85282e17d","sha512":"cebc8516cff145444408d2b1b71c59158d697e0ef970181ea9fb3e60d9011abe734168b56c1db52bb8f4d6bc9b7e42847f1954e8dd876fa873020c68b1d8956a","ssdeep":"192:6t2XW2wkt2W63ax5gCSHAzZLhb3qKAQ+fKCbN03RFo:6d2wp3YTSgzZZ3qKAQ+jN03c","tlshash":"d122aea46f523166cc1ceb5144c7b329a1d6ed2d793221f90d66b616af1ce238b00ae2","first_seen":"2026-09-17T03:17:16.162203Z","last_seen":"2026-09-17T03:17:34.841773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/b0876-32.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.743Z","timestamp":1789615001743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/b0876-32.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:30 GMT\r\netag: \"6aa31f96-18a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCJfWtvtkZQ3rTIQHeYp97LIKWwtpAWw5Yb%2FZmi2EqROPm9ARA%2BNPsTJ5Q8zumw4b8xqqykwADpAs49PUcJn3s%2BXt6pfIO3Nw3ebfMdrb3PjhuS4dkmbz4UJ17I7KF5sXVQDbg%3D%3D\"}]}\r\ncf-ray: a3c4f420ed72b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":1097,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"32b72f15c8c940eac2ea209b6ee3fdf9","sha1":"5be2286c2d19de6be4caeb1b1a443c8efe3f659b","sha256":"1c9e14a306a10e98912b805dd095b2e535a8401eef11a6aacf494c940d3083d7","sha512":"984d217cf3406beb8a2e284b3350b49f958bb92178bb0fe7e5c10deb0d2af604b293beee523be5e36e3aa33ce140a8a480909e283af79ed5a0f2170ae963b7d9","ssdeep":"","tlshash":"ede0f130c2bd8e180c818af840900bad55cf1541a908610712bf14ccd54609a76442c5","first_seen":"2026-09-17T03:17:16.164765Z","last_seen":"2026-09-17T03:17:34.84353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/matomo.php?action_name=Rainbet%20Casino%20Australia%20%7C%20Use%20Bonus%20To%20Double%20Your%20Deposit%20Now\u0026idsite=23403\u0026rec=1\u0026r=337601\u0026h=3\u0026m=16\u0026s=42\u0026url=https%3A%2F%2Frainbet-au.casino%2F\u0026_id=9fc21f4b6784a9d1\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=dTLyY1\u0026pf_net=75\u0026pf_srv=484\u0026pf_tfr=0\u0026pf_dm1=413\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:42.405Z","timestamp":1789615002405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"POST /matomo.php?action_name=Rainbet%20Casino%20Australia%20%7C%20Use%20Bonus%20To%20Double%20Your%20Deposit%20Now\u0026idsite=23403\u0026rec=1\u0026r=337601\u0026h=3\u0026m=16\u0026s=42\u0026url=https%3A%2F%2Frainbet-au.casino%2F\u0026_id=9fc21f4b6784a9d1\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=dTLyY1\u0026pf_net=75\u0026pf_srv=484\u0026pf_tfr=0\u0026pf_dm1=413\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://rainbet-au.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no; _pk_id.23403.e92b=9fc21f4b6784a9d1.1789615002.; _pk_ses.23403.e92b=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:43 GMT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R10R7O4BsqKI%2F7mXQrwSHfpySixX89Jl13pFUjj9XF1TmdC8RNn%2FCRuOWhoHoPDnZyvxeosBh9pjzw8n7vo1RoYbOThwNxOe3A3%2FoEYjRbevpEj%2Bju77I7M5acOVlPgGM%2B9dvg%3D%3D\"}]}\r\ncf-ray: a3c4f4250d88b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":536,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/plugins/slot_pop-up-acf/script.js","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.277Z","timestamp":1789615001277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/plugins/slot_pop-up-acf/script.js HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 10 Sep 2026 21:21:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TuILDgG3X4eZwgqV1NrWOvzI6eL53Yg6gX1GOrRfl4SQp5PWZ277Q578LYRXS2zrSfMhJDT2u4CpvrZdcT7aDGhlbk%2BRj4MurYLMwjK4wLXAfQ3TFEzqNzmQOgyRvhIgekCcgw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa31f67-181\"\r\ncf-ray: a3c4f41dfd50b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":934,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"8166626c4595df4b03eb6f1ef1ac842e","sha1":"3441268276b5c44b82cc861288b96ece19076204","sha256":"b0accf28f35fac633e974fb0a8e247e637a9bdaedb520af14da07819274bfa2b","sha512":"7a458c23910dcee6a96d9a995fa4d718e5959d62ac5fb533512c0c04491e7ed5f4ca8f73217ce4f5eee904deac984d4e0181ac7840cfc466560e68364c926442","ssdeep":"","tlshash":"cde0ab28a3f044ba8477c0b602a59bc92d7840969bc99655422c7c480fc97e563f00ce","first_seen":"2026-09-17T03:17:16.168005Z","last_seen":"2026-09-17T03:17:34.863712Z","times_seen":2,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/503ec-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.296Z","timestamp":1789615001296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/503ec-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:21:55 GMT\r\netag: \"6aa31f73-bba\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2F1zqnsShb5s0RAkI0DJlynB4G3KWFM327aUdSgEz6j3sxJaDxVPCFmCnRi%2Bs%2FYEMfnLf%2FkNTHU%2BZwlkEw7C52940g1PNOsrQKKAzHtcEYm1%2FpZ2Ude1SoFfKLbPegIB28P4nQ%3D%3D\"}]}\r\ncf-ray: a3c4f41e1d5ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3002,"size_decoded":3709,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e0d06af1e1ef7369cbd50fd480f8cf84","sha1":"bc1beeb7ce0a7975255bd99cdd014d6b90d23ea0","sha256":"f9bba07ed2e3bea4aed86a06325ab1d0b88867b473136a33952dbf0dfc640214","sha512":"112ee9336024d9ae4aa6945d92f9a89f469a61d429863997c4fbd6adb355680958144153c77bd28a4ae43d3208986e7df6008015dfae8ecfcb56af4f1893c94b","ssdeep":"","tlshash":"17513d45bc5be3b5c0351505e26b31d0da84e5b49089735486b9ab64a8dbcfd41937c4","first_seen":"2026-09-17T03:17:16.170141Z","last_seen":"2026-09-17T03:17:34.826176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-au.casino/wp-content/uploads/2026/09/67c1e-220.webp","fqdn":"rainbet-au.casino","domain":"rainbet-au.casino","tld":"casino"},"ip":{"addr":"104.21.66.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-au.casino/","date":"2026-09-17T03:16:41.299Z","timestamp":1789615001299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-au.casino","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 11:28:46 GMT","end":"Sun, 06 Dec 2026 12:26:22 GMT"},"fingerprint":{"sha1":"B2:3E:87:3A:2B:94:32:96:5A:06:9D:14:E3:C1:3A:23:51:7D:1B:62","sha256":"76:8B:07:56:93:BE:DC:3E:EE:3F:20:00:63:97:D1:45:7E:2F:77:7C:E7:C6:F2:52:42:45:A3:C3:AA:98:7D:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/67c1e-220.webp HTTP/1.1\r\nHost: rainbet-au.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-au.casino/\r\nCookie: rtc=no\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:16:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 21:22:03 GMT\r\netag: \"6aa31f7b-1908\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xF8cJ1Qau6hjNu4X3noX8T7GM5oXcS%2FiLKgSsEYS0FAPFwq%2Fod%2BtB9ryFR1A%2BPuXzKyS8t%2Fp1TEygIEGGd4rFA9k%2BxD3MZA7YPIwBk%2F8FgbZQkGh1KS%2Frt5Ax3toZx0tcbNAHg%3D%3D\"}]}\r\ncf-ray: a3c4f41e2d5db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6408,"size_decoded":7120,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x164, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a3d8852890fe34ae6fea8e8d6cbb13e","sha1":"445347e9f93a7d024f656567895d8315604be76d","sha256":"483c92f057f3d2e18eae33ac8cbd330672e2af7bb77a4f6c7950831a7a2d0121","sha512":"a2491d177f2ea3d7208e30c3db70569398c63eab6e9ebcc659be1edf9769cd90e1c2acc58d72260e24e912ef3941d0c0d0af4e807dc62b65f40f9870ff55e35c","ssdeep":"192:O9xTGf55ZYs47DRDcW7wAOyTPI0varnLwBij9HZt2P:+255ZBKtwAOePGkiw","tlshash":"2dd1b059472970e1735a0e7ad5809f54b514bb86e6f5771ae5ef8810f0c0c477b5c488","first_seen":"2026-09-17T03:17:16.172769Z","last_seen":"2026-09-17T03:17:34.828617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbet-au.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}