{"report_id":"26b862fc-3c90-42a7-8fda-7936459eb0e2","version":0,"status":"done","tags":[],"date":"2026-07-22T10:17:24Z","url":{"schema":"http","addr":"rainbet-portugal.com","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"title":"Rainbet Portugal ® | Site Oficial do Casino","dom":{"size":223475,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"22a90a28e515e83bd00b60a030dd5a3c","sha1":"a619776fec29dda37ecb1e7619c27a40a5237581","sha256":"17f8f4de1c9a0e066d6fdc61315fbd50c21284df34be6dfb20579613769a22e0","sha512":"3ddcf7de198ff8544bf84245fb95f332f5148538b32e5272aa8a0908af3435633cc92308912bb779bde61366000866f2025e3b655f7368ba8682682b2d55b22a","ssdeep":"1536:YdPUiApP4ypWk0cDypE1qJ7QT8jDPHbY2LVQcwEgy8xZvJjCExiFOCKVtH0jSCjE:tPpPZ8k0c8Q3eOPhIjGJG5hmzAGN9","tlshash":"26243aa512d8307a262f935c498db719766de003ea0689fcb2efd2549fc2ed44c76b0d","dom_hash":"domhash879e06b01eba1bc1d044f7c2b305178d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-portugal.com","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:17:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-portugal.com","ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2026-07-22T10:12:16.11026Z","last_seen":"2026-07-22T10:12:16.11026Z","alert_count":62,"request_count":31,"received_data":667222,"sent_data":16944,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contact Form 7:6.1.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":5,"received_data":285109,"sent_data":2832,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":4092,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-portugal.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T13:48:34.423925Z","times_seen":404356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-22T10:52:12.485375Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a94e5d9727d82a16fce94fbe2d0db24","sha1":"c9e16899c141a1172b4af3be527d1ff6e23010de","sha256":"0fd60870e75f385d2a795a264936cb934e9250eea6324586fd4d3113ce5cea03","sha512":"487d725bc824088adb1e1fc4396e1f771535ec0a822e1df0db9a9f5ce72a727050d8f4a3bc10420704b7676d4ea96aaaae327f179f85f166803aaa27ae28ac74","ssdeep":"","tlshash":"6d419f2a49f32a3ac617733b939f52092a3e0047340ecda8be2d55461f4167c47f67ad","size":2141,"data":"","first_seen":"2026-07-22T10:12:19.9658Z","last_seen":"2026-07-22T10:17:26.158196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d3a65ca414f07bb73dc02a692fe407b","sha1":"56488c28046c28d36df6db0dccebb5bc0295180b","sha256":"1b98f12add27930d1d20394e662199d75e687f968135c5bfbfb94dc927a17466","sha512":"50755c816ce18c3c030db8e1acd06b8010d0bb7dae41671b4e36e715afcb343a2c57121f2c9443bc75459e445197a203822647ca24c9cb37124d0a16f73f2bb0","ssdeep":"","tlshash":"a241892565bb21aa01736577076f7285323d408b3180e91539feca153feba9424f3fea","size":2256,"data":"","first_seen":"2026-07-22T10:12:19.967078Z","last_seen":"2026-07-22T10:17:26.158955Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b75ffcdf480589f19cbf78ce373dea","sha1":"316b05245c99c1420895c28a0383802e6c5d74ea","sha256":"3cb8441193a5962c3af7a83eb1a4418970173e7a7f89bb085de078e3ac16fc0f","sha512":"10af5558f1abf25dbb1f03fe16b20efea15aaa4db054488e516bc625ee6fd0b36194fe7241573aa29f91513eab613c3a5cc0f423f1c8851b3aff77a84c56ac78","ssdeep":"","tlshash":"ab410768dbaeb662432ea0b62bfe12de143e147e7a414ebb7c38405048e48093715c7d","size":1934,"data":"","first_seen":"2026-06-07T17:05:58.287593Z","last_seen":"2026-07-22T10:18:57.103749Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c35a67191117e90174938f756c5cd7dc","sha1":"d3fddce91e3b0f150d8c66587ab8130cfdcb438a","sha256":"f867304aa06b5218124f4cb784e97840c4f374c50292265931881b8254e973d7","sha512":"dcea992f859908c7f817992ddc6590b1a76d80e0c2c8fcacb6407aa668064a026741ef63dec19434bf41a64ed15e4ba9b3b7c24bda3f5b7b1f547e43c97eadec","ssdeep":"","tlshash":"15e0221263f0333100bf861422ca8a8e3ba04407be428f76696cc4061f84e94c8f48fe","size":367,"data":"","first_seen":"2026-06-07T17:05:58.289775Z","last_seen":"2026-07-22T10:17:26.17071Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf7b9bc80784cb34a5d580dcc001fac4","sha1":"a8d02a8517339c00f503b58b3b72345380da563b","sha256":"3625d5f817448d2a3734233ca817cbae54c47073df54ff37a4649d16013da5d8","sha512":"e37548a079344954217749daa3b44e18f3d9b2aa143f5294ec5d651b0cf18330ac64bb0cbfcce132d386649cd2a860ffdf16d3abb02967d38a07e6578c0051dd","ssdeep":"","tlshash":"fb41fd25f37d243147bf64a969e622de2a3d80823a478cb7dc9c8d0514c1e5d4a75cfe","size":1963,"data":"","first_seen":"2026-07-22T10:12:19.969738Z","last_seen":"2026-07-22T10:17:26.17258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-23T13:52:55.008925Z","times_seen":32062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9649e8c95b019da619dcd476075bd7d","sha1":"4c24b5cd148b6248384979c1f68bd531e7d80fca","sha256":"940134a4ffa9ebd6178c2d84114e138058ed5368084c5331ce5e19ef190f203b","sha512":"d7ac93f9b566717a4a4e1359a8a296fbf46181e3bcd02bac28f5f9bcfd1ae08cb358e1d496eba233599e2a146b060832899a057575ae18ab61f2c1b2f8297151","ssdeep":"","tlshash":"4b0115841cb89d19448195ca38bf7a857178f510c32b5d06710f044d166069d99f354c","size":691,"data":"","first_seen":"2026-05-01T06:51:15.044447Z","last_seen":"2026-07-23T02:41:39.895374Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b14b888230019fff219eb10b5ee65319","sha1":"29f8f90d0302e0862ed422754ee5b491f122e4c5","sha256":"1b037b89d8039f643567b2c14eaf9b121a85b4d7705bf33cfa08fde06648396d","sha512":"5586c0b1f374e0f6603ac9a10ab70df920f324ab97dd84f8b835639057cc83f830235a7b58396b892a8bb317969c87065f863a13b6e5f4a5f10e6aab3d570493","ssdeep":"","tlshash":"21c0129e99e82c4914e9c158057c1225b514a5178b2f5ea5b24e014c5ff80bda5245ca","size":194,"data":"","first_seen":"2026-07-22T10:12:19.972217Z","last_seen":"2026-07-22T10:17:26.175488Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84f0034019655932842be3c589770b50","sha1":"20c02bb9bf01890b4875e81a955d5211b60bbd15","sha256":"72b31c5aaabc346e5e1a03ebba72738d8f83440aab4dd00d21acb02817bdfcdf","sha512":"ca3314e68f3832a3f09e1e6affa448278ee8583ab9326d9c1182b001242fd4d40f1c316386c8d17c1e23fe8c0c68823d10ef1fa04e99dc12c78836832cb2aa35","ssdeep":"","tlshash":"ae4111c25ece3cef1e2615c574ccde0357e18294fe604c0bd619546a73cac83d21aea8","size":1971,"data":"","first_seen":"2026-07-22T10:12:19.973615Z","last_seen":"2026-07-22T10:17:26.177994Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08d83994e9163add0f18e4114ecb60cb","sha1":"b6e24634fb288e8756b9c768741b62ad0f966997","sha256":"83531ab78f2e6d48d38c4638809ab5c98336fe0dfafa8d2724bed8740bc1960e","sha512":"13f74db6a8c790830094b6d3a19915d48749f9d0016dc0c4467c965590dd75e747165b92e409a0f22f0fd6a0f0deed186f46c38763e19c5a8bacac688046556e","ssdeep":"","tlshash":"4d21eeba2d7c84be47c9a3c8158c9d2fa9dc6110e28dc5c8d2879c2c01e835b4f9d747","size":1151,"data":"","first_seen":"2026-07-22T10:12:19.974893Z","last_seen":"2026-07-22T10:17:26.179685Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-23T13:51:14.839634Z","times_seen":8605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.2","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-23T13:51:14.810303Z","times_seen":219451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/site-reviews-js-before","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5280c344326522aebe35fe9d17862f82","sha1":"698cebae0a3f561bacc5dfa43039dbc13f93b1fd","sha256":"5b5f2e9f00b9b162bcaa98188c2864278f7f4834939c308e9337786c100dddfb","sha512":"a7d996eff4991029ad7767bc3238883d746460aca2d30a020bd0fafb9c47ab3fc91d9f77192f99b8065ac91b3cb199c5f979cc10acc968eb8c20f0c6609de943","ssdeep":"48:xV17T5680mTsZw0tJ/VF0qMpm0CR7JJUrQ3XJOTLjN:5796jwL0tpVFEpm0CxZ3QTLjN","tlshash":"b4a1fec2deca3cef1e2615f574ccda0357e18294fe604c0bd619546a73cac83d25aea8","size":5007,"data":"","first_seen":"2026-07-22T10:12:19.963025Z","last_seen":"2026-07-22T10:17:26.180528Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/cmplz-cookiebanner-js-extra","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11b33a0b5f580ce6026f0a9197c5075b","sha1":"ff41e394d10daa4d3a194aad2d015f9ebefc59c4","sha256":"edcbfef046987933598471dc7cdebaadf7850df65348752ad5cd8e213b4ffe5c","sha512":"f084779bc43c51d6ca0ae28b736e790aec9429559bdd7786fb874aba31d3b367deac881bf748c5e64d78b9dbe7782d153d32fbac29009cac421f17be59b1fc7d","ssdeep":"24:nRWNe+f1Cya+6GGaD/JXQsi8qRgMMe0JdA8x6ThgGFxEepyO2:nRW4HeG0Az8qR3UdUFSxO2","tlshash":"a481ce7aed7c84be46c9a3f8154c991fa5dc6110d189c5c8d2869c2c01e835b4b5d647","size":4192,"data":"","first_seen":"2026-07-22T10:12:19.97621Z","last_seen":"2026-07-22T10:17:26.181354Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-23T13:51:14.8093Z","times_seen":8797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.2","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-23T13:51:14.787563Z","times_seen":227068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84b71e1835eb9020c7ca700d1aabbf37","sha1":"dc7dd60e16969e6df9d55ca14522ae8ac23707d0","sha256":"0a218b269cc8ae4a4c3b0367add047275973fbe05b152812268dd46bf9b7b82f","sha512":"e1bb3b4a7c978c8ab81c13fd907a9f59ee38d1959af69384c9f06cb4f94b6b3c24561caaa4283aa14177e63f9d3a2a68d97fb25c53174269ad10b6db66bbade6","ssdeep":"192:aB6Lk0IbL9op5vQo6PeoP0vpRJC7lxBFKJ6TQxTEvmgiE/mqjVdGg9sqU34ZOApw:140WLEIo7w3XtvF/mqRdGsgAzItj","tlshash":"e9423e6562712c3a46b26a224e371b05fb3850636542c26e3e1fb68c1ff08918792ffd","size":12119,"data":"","first_seen":"2026-06-07T17:05:58.096609Z","last_seen":"2026-07-22T10:17:26.125903Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"966eee900d7086888c6bd24e345ef1ac","sha1":"491665f686c464cd80b35807c865dd9ba9586c44","sha256":"bc595c8641415c3d16715855939a7a0edfc323acca2a3c6869effa7548e05156","sha512":"5d7152d312ca977277ad81dc638c392fe60616e426dd3867bce3d001dfb541689374d17ce16d39ea3a126ff84b1e2059ec8c028afde62a69481988846792dfa1","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQa:LDESVre/zP1vV95t9SWgLt27W35LP5zH","tlshash":"7a13d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","size":42592,"data":"","first_seen":"2025-03-01T11:52:27.461641Z","last_seen":"2026-07-23T10:41:27.262465Z","times_seen":1982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-i18n-js-after","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4fe9944b1ce25cf9f43b32ff3e97617","sha1":"ea587182607446788111d5b29a1da1772bc41814","sha256":"dd4ed2b346432f43bf181473d7973c25716ae52e0021ea558b1731b32955ce17","sha512":"1330a455b1a29b4cdf5de0c41e3ace9a0e0374c43505e712199b4ff9ed0bc58834b43deb6c06e639517d4afbc8e5d34b136ee863ae174ae768c43ee17767021f","ssdeep":"","tlshash":"285112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":3108,"data":"","first_seen":"2026-07-05T08:24:51.956214Z","last_seen":"2026-07-22T10:17:26.182154Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/contact-form-7-js-before","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"381a63cfb52d26112b199642fdeb47a8","sha1":"657e1070d2a3bd9542759e49efbbfe67f1be9495","sha256":"e8fdef0f4f1f5977baab603c9a4673da5fc31e778f04278d15429933ec844a80","sha512":"9a277d03492cd8a3dd78d80d4cbcc67b3ca029eb4ea9d873c3a0edd81e733d27f381d011ca5146ee5e085571b931a211486a683ca5fa9785e941725ca7b19a5c","ssdeep":"","tlshash":"f361129ed9e82c4914e9c178057c1225b514a517cb2f9ea5b24e414c5ff80bda5285ca","size":3218,"data":"","first_seen":"2026-07-22T10:12:19.979879Z","last_seen":"2026-07-22T10:17:26.182904Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1769678285","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","size":40647,"data":"","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-23T10:08:20.985574Z","times_seen":8176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/contact-form-7-js-translations","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9b4cf6a9b68e031cfdc4a8d25ad2046","sha1":"2743527e8ee5324f92b6dbd1a1d01ee68bfed07e","sha256":"3c55a6b9f0222b29a240af63d57c4090b084fe493b8740b5a18b060dd3158f7f","sha512":"54c2a9aa66217e2009169edc75c000ef896fadf9d47e5233a3befbb30198440a41ad0529f4432bbfdb228b3dc6d15dc4c6f4bc704dae8393951b5d725c3c2385","ssdeep":"","tlshash":"02711584dcb8dd19448195fa38bf7e857178f510c36b6d06710f044d166169d99f354c","size":3707,"data":"","first_seen":"2026-07-22T10:12:19.978602Z","last_seen":"2026-07-22T10:17:26.183531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"global privacy control or do not track detected: no banner.","filename":"https://rainbet-portugal.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1769678285","line_number":1,"column_number":20859}]},"http":[{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.437Z","timestamp":1784715416437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 10 Jul 2026 01:05:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a504573-13ba\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAAJK%2BjIlEvc35NxVDIMfsib38g1GmWHlyLEkznMK5oUFAjS%2FaUqWBtkqqoLZ8AC0xxQ93S%2BJ%2FPGDdicEVqr759emvc7Fz6H7KRLUQu7BrZ81MupWIpMtSqe12dxv9BLsdkYHw0ltA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158bb1756c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5050,"size_decoded":2662,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-23T13:51:14.8093Z","times_seen":8797,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.446Z","timestamp":1784715416446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/js/main.js?ver=1.0.3 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 20 Apr 2026 14:30:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e6388f-2f57\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vWYirFt0GhvlaUkq5U6lU5EebBtJPX8f2KMQTQenf2hnJtax8b%2F%2BLY41wNBVCEumUvuppQvBtPzZzM0CeqSM666y3fbwli%2BEmwvqC5MJovWIeKhbplGJXoGXyw0vuW%2BpKDZzQB0sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158cb1c56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12119,"size_decoded":4109,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4059), with CRLF line terminators","md5":"84b71e1835eb9020c7ca700d1aabbf37","sha1":"dc7dd60e16969e6df9d55ca14522ae8ac23707d0","sha256":"0a218b269cc8ae4a4c3b0367add047275973fbe05b152812268dd46bf9b7b82f","sha512":"e1bb3b4a7c978c8ab81c13fd907a9f59ee38d1959af69384c9f06cb4f94b6b3c24561caaa4283aa14177e63f9d3a2a68d97fb25c53174269ad10b6db66bbade6","ssdeep":"192:aB6Lk0IbL9op5vQo6PeoP0vpRJC7lxBFKJ6TQxTEvmgiE/mqjVdGg9sqU34ZOApw:140WLEIo7w3XtvF/mqRdGsgAzItj","tlshash":"e9423e6562712c3a46b26a224e371b05fb3850636542c26e3e1fb68c1ff08918792ffd","first_seen":"2026-06-07T17:05:58.096609Z","last_seen":"2026-07-22T10:17:26.125903Z","times_seen":4,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.635Z","timestamp":1784715416635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-portugal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 16:49:12 GMT\r\nexpires: Mon, 19 Jul 2027 16:49:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 235664\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-23T12:33:44.312012Z","times_seen":23327,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":30,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.636Z","timestamp":1784715416636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-portugal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 16:49:12 GMT\r\nexpires: Mon, 19 Jul 2027 16:49:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 235664\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-23T12:33:44.312012Z","times_seen":23327,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":36,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/american-footbal.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.806Z","timestamp":1784715416806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/american-footbal.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:01:32 GMT\r\netag: \"6901d7ec-1188\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRQ4HPbs9z0ATtp1O%2BPq%2Bb3gIRauZfyKlMDmGcTfr9yBpZFMzkcZlIkrMASE4Zn%2FQQvN%2FXan4qkwHQK9%2FfhsCfVhi5SQnDyuysFE6ahWP44GbfbFGo%2BbjcaZ0PE1%2F50%2BVDaY9giTbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b15b0b4e56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4488,"size_decoded":5294,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"feb37252725a595e0dd6df76da645f40","sha1":"1609b43535a1dc3d057aedd3d35d2e850f97e9d0","sha256":"46ec7abf77b951d25c10b02c5aa102052ab603d501a30663d7706a8e88210a1e","sha512":"7f8c3e84563f8dcdf4d6c17c220922f9c2090a5b57906fa1b68394dad0c6e7b0a40a5f5e0d8d5c4dd0c255566619bfff4606bfc4d97d1656885afc361a9b48b2","ssdeep":"96:OJu2WBfDqaZK/oC3kDoCWoDyv47gBkvV2FPnLiHWkh90wU+9vVm8F3uiTp:OiGaZKgioYMgBkV2lLZkh9hr3uiN","tlshash":"2e917ca3783046fb8c3d0949492e1d573a2e271df29382da22963c1a47adc28cdc60d6","first_seen":"2026-07-22T10:12:19.939988Z","last_seen":"2026-07-22T10:17:26.127579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.2","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.426Z","timestamp":1784715416426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.2 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 07:52:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901c7c4-b83\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQ4%2FTVNLSOfzbZon1qz9HqQrl8M4LyEfDBWRabkW%2BoD4Xp2iisCnLRbO2oA%2FjRKfkxRKwnfVx3ZVrrQy7TC98Fn743FkecwfONxyu%2B5XCxUKHhOl50FaBazQcrCRHp%2By1h8nRP4zdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158ab1056c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2947,"size_decoded":1836,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-07-23T13:41:58.199239Z","times_seen":137808,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.436Z","timestamp":1784715416436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 24 Jul 2026 10:16:56 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XV8P2A8uvYKqIQ%2B%2Bao3CvGGjZldh97b2k3Qodpgn%2BC5r%2FNr51jSQgDhWrqMvhmuA4AE7dCOAvaS5HbSF%2F%2BkKoDIWyTvYBa8FgteIyLtGuWY4ISdP9Tsnjk91PT8NslllxHaJHr8P8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\nserver: cloudflare\r\ncf-ray: a1f1b158bb1656c1-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1306,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-23T13:48:34.423925Z","times_seen":404356,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/blackjack.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.458Z","timestamp":1784715416458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/blackjack.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:21:10 GMT\r\netag: \"6901dc86-27c0\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KF151Svkwdh9v1aI01jY2E9od5Mrkx0QJ8XuwATLLyS0cQW%2BpcWOOU9UWoL9dFapvAHf1Gaay2aSrR8j31ROUYwEHW04yj%2FQ1DDRRPEEn0sT6iKHkg2WuDXW7QPmhEXTFC%2B8tQuaXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158db2256c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10176,"size_decoded":10973,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a3440a7dd6739ec53b31101ef820fa5","sha1":"855d95e241967cf5ac1f26668f2b8237adc31a40","sha256":"42a0eadbe198186f8b711802b35f42fc3f9e59cc348bf01991f2d7991944f00d","sha512":"d056231da0bb90c60c9db250751ea9c8d29dfaaea6098b6b23b55fe8df1bb5347521b6a198820bd91d851c19d3e877079e334ec47a7b7b857c16b6d83b56589c","ssdeep":"192:/+5ZxZuRic0kRK+zoCyE6MAmLzkPF9NJ/HB3GOHBqTfga1x1OMhA:2nruRiF+E7EFAMY/B2OhWfr1x17hA","tlshash":"e222c0e269857de2b94fee2f23218c5a7347cd78a1f453645c073021e4e6da7580b9a1","first_seen":"2026-07-22T10:11:52.878586Z","last_seen":"2026-07-22T10:36:03.529277Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1769678284","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.428Z","timestamp":1784715416428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1769678284 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 09:18:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b25cc-ade\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5oH8%2Bw4T52MzltmJB4BlAZxoq7jsinrDzo5Cblk2Rl5iKhkdeWEBrO1nlKWK5vPtmLTfRCUTK2JIpffBwCo1Faf9CBJUnRGEA4BbJNXDKjB%2BFCeYyK%2FSOVnRRImT4O1FzzpcylDRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158ab1156c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2782,"size_decoded":1524,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-23T13:47:39.469239Z","times_seen":30883,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.629Z","timestamp":1784715416629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-portugal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 16:49:12 GMT\r\nexpires: Mon, 19 Jul 2027 16:49:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 235664\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-23T12:33:44.312012Z","times_seen":23327,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":19,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/counter-strike.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.810Z","timestamp":1784715416810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/counter-strike.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:01:33 GMT\r\netag: \"6901d7ed-b1a\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYZstfYJl0Stm3KHqgB5c6Xm4Ck32gv0BMIFuJi%2FBCZ1a%2B%2BguMadkJyAIFWcjA9Q9PX8qq8Rxs788Zpf5UdxjF2XzQkUy%2B6yKoziqmx1YfyY7lL%2BG9j4nriZOwpVTzmBfcP7ZQMElw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b15b0b5256c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2842,"size_decoded":3641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5468c2e44226a982fbdf927001128d6a","sha1":"52d867ccca2f695ca67e40802f7b9f3db609b7c4","sha256":"991f4a9dcf2b884f7fe55faa8a22b7b73331e0ee8b801acba57e837790e50e96","sha512":"91ba26b85551f787956ace7b232e99b4a8dff82f6a411f3f873bd6ae010e2c6fb553ca29a3b350fb032edcf7447d4d8b28bd563a787064956886046aa16117f0","ssdeep":"","tlshash":"53515c07cc1176097a7ca4921c56b617c2c3af5465a3ac3201af0ca544300f73627be6","first_seen":"2026-07-22T10:12:19.930327Z","last_seen":"2026-07-22T10:17:26.131021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/valorant.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.815Z","timestamp":1784715416815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/valorant.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:01:34 GMT\r\netag: \"6901d7ee-c56\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BaxpcjyZu985GdlSFedX%2FA5K1oiHFIge2MpJz%2F9h6AhIe0QQWYlBEGjuObEykKrzfMmqBUwN1gdh%2F64bRJsFsog4Rnfz7MxvL8KsmRYcDsMq1dcHm4RmzDb6WWTeNs111sUICE1FFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b15b1b5556c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3158,"size_decoded":3955,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4becd26e75957400c1e5a65aeea639f3","sha1":"ed42788ccf7705e0d76fee9fa5a19fee6e933dda","sha256":"8a8d133c127a162ad1c92524cedb8bb69353fca94c45febecee4903099bc26d3","sha512":"feed863d8d945c323e11076b1ca7b275d9fc47859d4c2dd840639ef74548a71ad986c3763b67e3d3686b7c785505559fcfd012eb4ab7867cebf5616dad9d76f6","ssdeep":"","tlshash":"da516c4a5e1132d3cc6e4410db16a4db7c8cc0f188ece03916db44e2a049cf5b40eb35","first_seen":"2026-07-22T10:12:19.954689Z","last_seen":"2026-07-22T10:17:26.131692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/site-reviews/assets/styles/default.css?ver=7.2.13","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.431Z","timestamp":1784715416431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/plugins/site-reviews/assets/styles/default.css?ver=7.2.13 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:32:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c543-7691\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XOXWQaIGaqYSYDOJpD5wgXR8rzFWrwN2gAFvcKVXTxwsFoPkyoNYNiz4LVJWo676PvdS0h%2FndU5BEuysrEPl7Fek7bZnmF0TO5c0bcvFK27gY66Ug6Z7lgDSWRdQ9NnD2EG%2B9r9UTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158ab1356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30353,"size_decoded":6646,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30348)","md5":"cadcd88c2b50719913dc9399b152246b","sha1":"36d8e2583525e1ea387ef87559eee2d6e6c70bf2","sha256":"9babacb0d4d96f6a146103ec93214179c5f3a5fedb9fd4abd4f69bf023862977","sha512":"fbcb648b7d62af2a6f9c2a062b9415d76464722598dc1557a1092957493c5cc8a7d2e6733968e31456ca6caf883f58c9d0471d71f4bfa0e301535840d3b2deb1","ssdeep":"768:rGNlIy/Z+hHMs6CywLT38RbzwlGyHBjNjgG0W7LwcxmBN1P:aNxZ+hHMs6CywLT38RbzwlGyHBjNjgGC","tlshash":"9fd24358fd38f07c9a13a33bb7d9a3ac101a5c04e9122766a25ba47c47c7db71632f58","first_seen":"2024-12-04T20:32:16.192995Z","last_seen":"2026-07-23T13:34:44.513917Z","times_seen":1731,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.440Z","timestamp":1784715416440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 10 Jul 2026 01:05:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a504573-1664\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zupn7kUpFLKeKBCUk21qKtlid51WSzaFfSEsxqIP8MVPMPy081ZkgkAMFC%2Fww75zVAeRHkePSZwu1m2TmLDR3w%2F%2FJhc7F5Ot0Ab%2BQAyxe%2FroSX5mckpkfDaNKsRnPT86em9V84MY2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158bb1856c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5732,"size_decoded":3300,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-23T13:51:14.839634Z","times_seen":8605,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/keno.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.462Z","timestamp":1784715416462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/keno.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:21:10 GMT\r\netag: \"6901dc86-1f3c\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Es1K0T0is%2Foc4EJ0c4D8Ky9D0%2BYU13vO4mqFZAAGTMJ1zSurGbVmL5tpK0iXrpXXV0UNHchJDQj2b%2BFvDAIemOirfRvlFLekgn2FZTdwXBOA%2FC137E4mNX3lYA5kXhKMxsq60cXYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158db2456c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7996,"size_decoded":8794,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d7b8cfe460a00a188a7f3aad7779a6","sha1":"eff39f2ac03bd64a842dcd4f9aed080eb078f0fa","sha256":"abe0568d75ad0a31229b4c9fd971d3e87b07424fe3eb554758870427bd1688f9","sha512":"a006f010530092549ae93fb3f28f08a9192311630350e4efa1861d747658971ac9acd1add1e274257b83131b0dc50c94e8572ab1f4cd50706041c56660079b3c","ssdeep":"192:ZLsjNrUtWG/+F8CbTVWBdsCUMdWGQceqwOJcpO:ZLsxrUME+CcIBdsxCeqwcf","tlshash":"b4f1b083c5ae7a1e43d39e20363d551e83a1ac0549eae98e06d60c1e84a7bf30c457bf","first_seen":"2026-07-17T10:04:37.461574Z","last_seen":"2026-07-22T10:36:03.51302Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/mines.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.463Z","timestamp":1784715416463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/mines.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:21:10 GMT\r\netag: \"6901dc86-224c\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awV6OXR%2FxfO%2FlK3iZa5IrCNn5EH3S5Hi4B%2FUvU5sTxuYWmlFnPDhoXP4NowUfbsSvmqmV5huNJRcOxwrzG9t4OT2ZHck61njHUoZFhpnaW79FbOxEJkj%2B9ew7V%2FJoCJFuFlZiLUq2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158db2656c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8780,"size_decoded":9580,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e194129f820af4eaf728bea18657402","sha1":"08cf24ea20efd0de296bfc3bb0858c9f6c16c710","sha256":"641eeadb29fe669694d2d96e6e706e350f8f07426ed81c3511e8594eae8f2d9a","sha512":"c196d1a286bce9fb9e3c2eebf6b7d2318b18b6e40c214f39a5583c6612bf2ba1dc3b8fc5857d57246bf883a580e637eef54093db3265af4b0add31705dd61c11","ssdeep":"192:JESYkZm3oaojaS67lEymMAJjehXf2ZJxxtk:ySqojupuMOjeo7xxtk","tlshash":"e602bfaf93c34321a782b658fed2d5df862d9b5814c0b2831cdb551044e2be2bb305c8","first_seen":"2026-07-17T10:04:37.468069Z","last_seen":"2026-07-22T10:36:03.450517Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/plinko.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.465Z","timestamp":1784715416465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/plinko.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:21:11 GMT\r\netag: \"6901dc87-7c68\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M1BtaX5Qw3iJfOAftkygnLz1DGp3rZLNzjmYCby3nRR5ZBHGhkhB%2FLkZBjwwLki%2FtjFso6NeSZO8h5I6vBtzvIEheKUIax6qnpJO2FOdEEhjepuO2w4xdN6pkiO4%2FW0fpQLpZoO9dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158eb2756c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31848,"size_decoded":32645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2728b2f5167ebe8e8f84e11ebc6e703","sha1":"d27460bb0086b4e2c9d0a54f3d54664d2c421ab1","sha256":"d240e9a65ef7edbfcb38ff732cfd6ed2c81b1bc13bf6268878a753871dacdb62","sha512":"2cc29bb2f198da3761b9111bdb5a7f83059406a2ca625eec8b821bdd92acf07c7ac0a704add6fcbeb40854b71b2f6ddb87359179aa0d56c565b6ea32318facd6","ssdeep":"768:t7Ya4z5wk0gqn1+T7J5/s/pC61lRs079vBa:5Ypz550gqQL/s/pC63x2","tlshash":"54e2f28115abe1c8764f8f8630ea2d17eec1216ef85c085f3cc51ed911b1abe6f70945","first_seen":"2026-07-22T10:12:19.957788Z","last_seen":"2026-07-22T10:17:26.134823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/rainber-licence.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.469Z","timestamp":1784715416469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainber-licence.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:58:20 GMT\r\netag: \"6901e53c-368c\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDtWxtMmDwl%2FGr1CAkdah9orZDYWo4xaO6mijiBJ7OXeLfSZ0tl90sQql%2BOalNfIcoSRjHdMI%2BmQb9CldhZddrvOoaOhNKq3lyUMkripamJav3rFbhm1TW1DV5MpYBanP3GxVTszqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158eb2a56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13964,"size_decoded":14761,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d955e8c0ff47a513cacc8c0d0a0f5ff","sha1":"b62b42597dfd5e787f14d95f229212d50486e629","sha256":"bf7843b709d17b0da1066a05410403973d5ed7337a1a7de3c031a8f28ebfa135","sha512":"70a7ca37a14a73e2b5146484659f7b02302529a594379a2412c837f7e43729884504c5bd20f9b505485b96f22bfe75df147477828146d8a729fb3b5471ecd06b","ssdeep":"384:cHHCx/iOPKb73NfI23rbnIrLxNOKknjBvZ3hU0B3:/xfR27bALwdh3Ld","tlshash":"6552d04a6c2b10ef18ee9e4a8de82d28855787a7c44764d51cd2ee739c34f053f39181","first_seen":"2026-07-22T10:12:19.953029Z","last_seen":"2026-07-22T10:17:26.135637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/rainbet-casino-logo.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.432Z","timestamp":1784715416432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-casino-logo.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 07:49:15 GMT\r\netag: \"6901c6fb-1e80\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTj31ajcmqwwuHMy8r9HngUue5JlnzDfTNHHDKH4E7v93ikpXyHbgfzNBcl08cyUpTRCCoSUThKGlyLKW01721YayI2LL6G4lZZ4vSqRmdzvCUz6D1w0rxTE2QyrgXVM5eHUuq13vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncf-ray: a1f1b158ab1456c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7808,"size_decoded":8598,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7afebc24589dc75e0c5e32c83e913152","sha1":"2db7fd37bd6b4d667b17e87be4c7a391401aa9d6","sha256":"0e887f6ff8da9218011adfdd5af7276f269202cbff9f3dbc2e2a7f4942bfdc34","sha512":"f86705d13c67728b6b6c31a2a5820eeb770f70e571d640de2e91032992453f19bf7f6224844577d77b2fb62ad68d2b2111a5db045d768f5935e98232366fd7c7","ssdeep":"96:JElbw+iWyIHY422JrMxUHqyqLtjUFPEBnOJQHZm0IINXopIu9ZlpPf3D8BjoEAtU:kwK/H226OHqyJFwm2WIXIZlRgBcdWE6","tlshash":"72f17e5883c7a7a2ec3a8fb9f49247487195a5f3519f182eba01803f176f971fae4448","first_seen":"2026-07-22T10:12:19.925835Z","last_seen":"2026-07-22T10:17:26.136251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.448Z","timestamp":1784715416448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:32:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c543-a660\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OACugKhkD%2FHk%2FYE3ELVTqKGtb%2FpcI9JhY5elWSW8nmwVLY0dMK8uGN98U2aTFvzF48%2FV6WAbX6ldoZV0TJ%2BvpBwZ3M0g9bkW8voARCqFezSdWpG3Ovn%2FEhqdGAFXG4oUj6C0UGhFtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158cb1d56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42592,"size_decoded":13933,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42591)","md5":"966eee900d7086888c6bd24e345ef1ac","sha1":"491665f686c464cd80b35807c865dd9ba9586c44","sha256":"bc595c8641415c3d16715855939a7a0edfc323acca2a3c6869effa7548e05156","sha512":"5d7152d312ca977277ad81dc638c392fe60616e426dd3867bce3d001dfb541689374d17ce16d39ea3a126ff84b1e2059ec8c028afde62a69481988846792dfa1","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQa:LDESVre/zP1vV95t9SWgLt27W35LP5zH","tlshash":"7a13d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","first_seen":"2025-03-01T11:52:27.461641Z","last_seen":"2026-07-23T10:41:27.262465Z","times_seen":1982,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1769678285","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.450Z","timestamp":1784715416450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1769678285 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 29 Jan 2026 09:18:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697b25cd-9ec7\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCSUzu5zQbGSmA3g1S8nYpuun33JF4GhObmTwLZ%2BoXLEJGUwOFHZsupDilJpECXGVd47e%2FcEe21JmVW%2B3Uo7fi0NQ2dh12a3di%2B3Oa2hH%2F2EjpQf5tJa2qzO0%2F2ewa7Bs4mYIffosg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158cb1f56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40647,"size_decoded":11417,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40647), with no line terminators","md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-23T10:08:20.985574Z","times_seen":8176,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/rock-paper-scissors.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.466Z","timestamp":1784715416466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rock-paper-scissors.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:21:11 GMT\r\netag: \"6901dc87-27a6\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGFR07yL8VFMA%2FZa0Y%2BYrnuAqEDFMa4jX1zSlVyPfrTLYZFhkpGJRrsyUBhnmNhCg%2BbFaFx40%2BV71na5962eIstQahJlUgxrk8iiI9Q%2BmvuE7SI0%2F5QNbndn45P95K84LaKGPWZu6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158eb2856c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10150,"size_decoded":10953,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f49d4d12212a85b38ad10bc4114c3ce","sha1":"2063a79a42a8dc16947ffb052ba6aff87ec29cec","sha256":"8ad9fd3dec58f7d0fd22005c682261cabb409037be1f67487c7790fe557ac446","sha512":"5aa159c09d79c215b32c40723114f263fbb5c4df12e3436f54b697e98bff689f17f13f34f88677f5538ce2beb0aee5db7210864dadfc01e30a8fd046e8a4a0ab","ssdeep":"192:UPwFDm7t3GWLNbPN1iE0dH+lDoVfq1NyGS5ZThRKowKvNE:UIE7t3plVspdgofq1NyP5ZThRKowKy","tlshash":"ad22cf2b929dd2dca0093e52b7cd338641e69e6231b8c921e193c3f550752627530fb4","first_seen":"2026-07-17T10:04:37.445578Z","last_seen":"2026-07-22T10:17:26.140965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.632Z","timestamp":1784715416632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-portugal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 16:49:12 GMT\r\nexpires: Mon, 19 Jul 2027 16:49:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 235664\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-23T12:33:44.312012Z","times_seen":23327,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":23,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.2","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.444Z","timestamp":1784715416444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.2 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Oct 2025 07:52:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901c7c4-348c\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWb6IiQa0VXT01tOvllmvHoIEw4fhJsKP4GCZwSwdSyizphoUAUefXGtGRORLiK2G56lrb8IN6XqXgKsaDGSpRqCwhUpMTuPl8rI9yOz12wtmwy0GfXtOv4lnTLf40CzzewZnsJTOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158cb1b56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5090,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-23T13:51:14.787563Z","times_seen":227068,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/boxing.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.809Z","timestamp":1784715416809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/boxing.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:01:33 GMT\r\netag: \"6901d7ed-f0e\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gxl0NEf6Zm6ED4TCVKWTrtrjuYRuV64WPow3IMM72Zo0KOaKzQ%2FzLHes7j6kLRdydzTiWOcZr91MIOJilUFQx271Q5liCoWnqWvlEo3wZDTas4BK7TrzwBl9OC6aGus7piNNbfx8Dg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b15b0b5156c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3854\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3854,"size_decoded":4645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8ac59d804256642ab52bf0327609294","sha1":"86d84faa9f2856a97dbd0af63d845193cf9d8ee1","sha256":"a7853e618b2c8e88912814eeaaec3f264fce6382a716db39ad0b2a751f768131","sha512":"873c3cd4678b157219e365fb9671d190609899a320be85333b3beec3a28ba1c6c87b2cb328d15e0d5742d462b90cba00d1ac2c00494c1212e28da3105e3f0bb0","ssdeep":"","tlshash":"42817e2e18e46968f06c18649ff3899d4d800f24a973c807e53b1edad879aab174239d","first_seen":"2026-07-22T10:12:19.960064Z","last_seen":"2026-07-22T10:17:26.14349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/ice-hockey.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.812Z","timestamp":1784715416812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ice-hockey.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:01:33 GMT\r\netag: \"6901d7ed-124c\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLIXwa0p750ymLB8X8vVCRoO2szwZjN2huDcdC0ShB3u8GXgghYIkCh%2F9FfIzqXTIYu95%2FimBJziHNAa54O2KkZNN0q4%2BBZrSzxGwSJeeUjsXgUrgNcO1v9Lyecj8aG2h2AW83hq4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b15b0b5356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4684\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4684,"size_decoded":5480,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"39cfdbe1fe5af955ac899522535914b3","sha1":"a161b2e2a616dea4e23cf4a5640452b3ad11a422","sha256":"649027664f999f0c4d5a711cae690850633fb35c9e946bc15b47439b7ceb119f","sha512":"17d5c1f60e1d1566ca7fec540d83090e727e1a4c09220f23353ada5ee93c8ecc59bc523f34ea8b7207b545db8a6fe23a779ec2cffc9ded839a10bc0fe2744aa7","ssdeep":"96:sUA7tDmkgFq2PJO3SMi9UYiOq+ljbn4w49BxYpwmkKOzS880HJkySBdrWlC:QDVCqyO3SjwQmxYCmzYBtWzBdIC","tlshash":"4fa17ec006bd1ba40b5b2f2d664bbd84a99e9df23a60340271be29dd9861704135f20b","first_seen":"2026-07-22T10:12:19.941993Z","last_seen":"2026-07-22T10:17:26.144155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.424Z","timestamp":1784715416424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 10:16:56 GMT\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3408,"size_decoded":1120,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ea4ef1b58461cc811a47cc9fdcab61a1","sha1":"155779c0daf2ef7c7f64ec41edad480c09da941b","sha256":"40522150a1e943dad5c88314d6a9c235b312d2d6beb893e8cb6b46a6825ed3b2","sha512":"26cc96e07b4c262d39d35758075140d1becd6980401a612d83b34339f35dab7bb2635c51e914a7d07c7f82971ae109966b569263c029e7a275d1f96a6e4d5e23","ssdeep":"","tlshash":"8b61ac81046bb114db572cc122cd7e32ef1f619164549874aafe2888fcaad6e5361b4d","first_seen":"2025-09-16T12:22:54.356027Z","last_seen":"2026-07-22T10:17:49.148391Z","times_seen":76,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":32,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.2","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.441Z","timestamp":1784715416441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.2 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Oct 2025 07:52:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6901c7c4-30e0\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hGJCAOR6YLRUKyVH5jZJmWRdCAFogZh6jszHGLs9DZSIz%2FcyLJ1Y4cEvYrk8LqBVqhvoIt%2FD2tOwbtX9bqUIOvMgThNeDaJXPR0e6%2BVIYgOH5ukpTaid1UougNt36Jnu%2Filam2BaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158bb1956c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":4336,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-23T13:51:14.810303Z","times_seen":219451,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/rainber-rewiew.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.468Z","timestamp":1784715416468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainber-rewiew.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:58:07 GMT\r\netag: \"6901e52f-1fae\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOTdV89Fl%2BrglJxK4JaIejSsCvF00kbb0%2FzV31BYoOGVwG%2BuiwnARLFNk2pnprYyQCJK5T62aq7hBWSBZd2achebPT%2BUqbPtN1rwAsLhjzgifSo2KPLFeL0bXbJYhNu%2F%2BgKfRz%2F7Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158eb2956c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8110,"size_decoded":8914,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd4b3b42526cb7e48bbdbc944900e8b1","sha1":"11562290ff3aa6335c17f07c79899e5bc66fbd5c","sha256":"531c3cc2b2dee7446d2fc8907498c2ef189a33371bb347878c53e46ecba34ae1","sha512":"8f8caec8c5a8126e648dfc3964d132fdce2e1bea2ce89732bd28ceb49cdd0c0c7cbeb38c32e3a14d997b954a7daa6a48944d36dbf03abc684b833705e940f109","ssdeep":"192:7XqCm0uZESKMCdqJWylvW1qiP7QkVtQvvI4:7XqCm0uZHKMGqJflvWgIEkIvvV","tlshash":"6cf17d5abc7b33d63fdfea0169e9faa9d233c0c69c4071598cca5d6b1860305c593683","first_seen":"2026-07-22T10:12:19.951377Z","last_seen":"2026-07-22T10:17:26.147465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.775Z","timestamp":1784715416775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-portugal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 17:30:17 GMT\r\nexpires: Sat, 17 Jul 2027 17:30:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 405999\r\nlast-modified: Wed, 10 Sep 2025 16:30:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31204,"size_decoded":32017,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31204, version 1.0","md5":"644fb0923b00731d39d4d00d701f489b","sha1":"f7366f67d887653243faa2ca4e667fb390577e15","sha256":"53b35dda61b188937bb54ef16f8cbb018fdffad94b3f81c238bdaf764c77686e","sha512":"6569ec4d4a3d2b2f7aac556bcbb8fda83ea1985414979c0909bbc5910bd8f5bd69d1255626269faaacc1a64837501fb6fdb1ba902f84f5d213f49e88c5204fbd","ssdeep":"768:dvyQgaaXB0KgDAyWzjo9xOFqIoQ60ta3w1EOlWooyLDbY+5TMH:8fiDAyEj/FqIIw+ML3Y++H","tlshash":"f7e2f298012f52badff465100b34f7b1c8736ad9e5a243e9883d86f09b5d5e0f44bd94","first_seen":"2025-09-26T18:13:44.653047Z","last_seen":"2026-07-23T01:42:14.153903Z","times_seen":390,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/basketball.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.808Z","timestamp":1784715416808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/basketball.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:01:32 GMT\r\netag: \"6901d7ec-1512\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgYrYT8EX08QLeC1qylNP3KjsYIa6%2BBxTq8t0eXFmYufSvJmCLPThFu1fpkfljiQeBzFzaYjUG%2BVpPXxXNgI5ns7UVpTgyIZrsHtV%2BKSt4gCOxzDbCUbz9K3TMCY2dpQgIpzLDtruQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b15b0b5056c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5394,"size_decoded":6190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3e953a66df7b87499c8d203d1f21634","sha1":"c4d7c498cc126e6dd80847e9e2fa9fafc024af05","sha256":"a9967a8142637423384fdce3f669429eddf9e458eb3c47c40327c981f0a93d8f","sha512":"4fc4a7cd5343e12d5614d618836ac70094dd9e73a72d53fccbe1712ace3be0095bd9330e5deaf88a7dc41efdd0a2d87301320bbc086affc7bbe00e28fd84aec0","ssdeep":"96:bvPC/AbLUzucC2164ALJjBp7SKD8Wz/cBrfvcAzSiCZVdjDzSc:T6/vzHy4cBm0SV3cW7CZVtn","tlshash":"cfb18d03028c85df8f2a40cc323c9cca4f526b28066faab1e74184b3edec85c5b501ed","first_seen":"2026-07-22T10:12:19.945811Z","last_seen":"2026-07-22T10:17:26.149333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/rainbet-logo-300x300.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.836Z","timestamp":1784715416836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-logo-300x300.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 07:45:30 GMT\r\netag: \"6901c61a-908\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPTm8wbq1WbyMM9lQubZJptiazDL8IdDlrxst5URqjo4CX1mlndOuL9OHZiidZgWOdM6%2F1B63cQyTQcqB5p6N1YKKQMAsF3p2SESs2%2Bdc%2FeT6ReAHSYWzK4EPk1i13efCPoNfbRxgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1f1b15b3b5856c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2312\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2312,"size_decoded":3110,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7cb60123d80b144011c2a55d1ef110c2","sha1":"df3a56704525704037f87a362bb1c0e506666555","sha256":"a8951435a889388c1d6608650388349cda22dae6553fd891418d5ded3cf04578","sha512":"0c17d07431c5410676f7a3024a4c9b945af68537c8eb4db105b1177b012db302ddad83d9f6c0427ed2fd46079a33d7de92a2105d46cec3663277530426d0e643","ssdeep":"","tlshash":"d4411a7863204368f018aab59df51381b0c8bc32779d622a43e4de290f3ece505af84f","first_seen":"2026-07-08T11:54:26.620321Z","last_seen":"2026-07-22T10:17:26.150443Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:16:55.538Z","timestamp":1784715415538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbet-portugal.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbet-portugal.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbet-portugal.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubin6EIVDLsWp%2F3alP44TbQmEt4ZyahdtYWwdAQJVPqzbg78hrzPxGkDhBr6%2FzSnJyeBIgJ3%2F4lB6DHCATXguwG94GSlWEqT%2F9eL%2FwP%2FVqF9hM%2F9q58nAzXoUzQsFMGyI6wZw2DaeQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b1533a8b56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Contact Form 7:6.1.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.2","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":225942,"size_decoded":45256,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"ad76ccd5e31c9bfb70021c5b45fb3ffd","sha1":"c652aeed09b0ec2a29f2154cfafbfd1015361abb","sha256":"262b94ca6633d1da7ba00833cbb052da9ab83dd855dc1eb8ae722dfa32ac6838","sha512":"494a86faa3ca9f798977c85f4a6170c030282c1004e4453e170408c5a82da45ee5daf26388f6eafeb6f5fe8b6be9203f60eb359c8ed2cf9020024434d1050dcc","ssdeep":"1536:SdP+iApP4ypbYk0coYpE1GJPQT8jDPHbY2LVQcwEgy8xZvJjCELFGOCW3fqjSBj7:1PpPZqk0cxQpsOTFjGJG5hmzARNZ","tlshash":"9d244ba612d82079262f935c594db719766de003ea0689f8f2efc2549fc2ed44cb6f0d","first_seen":"2026-07-22T10:17:26.151011Z","last_seen":"2026-07-22T10:17:26.151011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":6,"connect":16,"send":0,"wait":394,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/dice.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.460Z","timestamp":1784715416460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/dice.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:21:10 GMT\r\netag: \"6901dc86-2aa6\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dH%2BFIFd7l9KBXANhcbt%2FRwqeCJUG87sgSQHlyTri5ZfjFEVI7NG%2F2nGENNel7dD2Eu%2FbXGRKHRUHZeGX9GxAyhm8zv%2BTY%2FGe67J2YboTarHWX8apCJOzPfV2XZGE%2FnreNAxP6bZTig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b158db2356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10918\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10918,"size_decoded":11723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89d0b140cd643f3a4586a44e2fe0454e","sha1":"4c54336fdad0a7daa196154ad9287ad71e4473cd","sha256":"3ef44353d6db5ae4174fb685f021f615db690d9c25f1b4580057f0de23a3535b","sha512":"2b6bdccf9c278c46eb8c353e5de2d34f6997a274df20a64fb9105cb173825140dab273f8daf96a382c86125e9429dbae86eab2429b416c243eac61330fa843ce","ssdeep":"192:eIfKn9CnQO+IpuhtGUxGCFIRFrRTGaE0C7cGubaWEOv3Xoc:zfUHIpSzBFQrRLG+7v3Xoc","tlshash":"6432af9fab1819a18729740fe26ad09c6ffb9104413d5c52e2eea2a51bbc34c14fd8d1","first_seen":"2026-07-17T10:04:37.501565Z","last_seen":"2026-07-22T10:36:03.51894Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/league-of-legendst.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.813Z","timestamp":1784715416813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/league-of-legendst.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 09:01:33 GMT\r\netag: \"6901d7ed-f66\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UV6pXAdaA%2FX0rTNtZcwBg2RVvpxG23q%2FSd7NxQqEO5lX%2BcRlXdQFqwMufRqDo0RwDrnF5ISGYaUb9jNid39rGOo1a5efuMSsWJPiOD1rUvBXRjBiD703M4QPOJVDDmm21gAQPvREIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b15b0b5456c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3942,"size_decoded":4737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de012eda66acf02e737f07c461ebe064","sha1":"0c32e676c5a10ae00467b4f2c4be35919eb51258","sha256":"1650c0e1b08c24422158165aa77176cca37499652896642f5c21b3195e9a5359","sha512":"2993949b5a855e07a2032e8f27f5fa470a593c07f2b000f278dffa25a610ba782efa55cdc0acbc9e48770ebe1944bab1400a76c80f9ac2f4c6ee0b355da75c5e","ssdeep":"","tlshash":"af814c1479e5358d93d0a4ae565c2807bbeb87c5809158fe8f0503b6775187b3a586c3","first_seen":"2026-07-22T10:12:19.922438Z","last_seen":"2026-07-22T10:17:26.154059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/uploads/2025/10/rainbet-logo-150x150.webp","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.838Z","timestamp":1784715416838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-logo-150x150.webp HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQIBEsMHl4ZBxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 29 Oct 2025 07:45:30 GMT\r\netag: \"6901c61a-60c\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTfdtssKNSjxBN60Uac3RVpjpm8ku%2Fym0I6fAt%2BE4Qm9l%2FHz2OiTAHfOm6%2FuYslWH%2FIfhmUeyud8Nx%2FBbmnwJwuNlIBGQk8iR4jETvrxVvvz5sJuGtQsYBn1Bawp6bjxTRL0wRLzew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1f1b15b3b5956c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1548,"size_decoded":2352,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5532b0133961b59e599a20edce0da98","sha1":"73e090ba647b55a5dac74d67017f1acfc612aef2","sha256":"e620cbf31b8cd7fcb219617c1abf994995db4e671281cd7315a3b27ed2a69e7f","sha512":"e0a69912c112ac66956cb5a29e7bd32b33dbf319f55e24ff99defb9dbdc9ec057c2c5806917c13d3eaf8f1d63c9780e3fa737d06ff63358ab6598238847c138e","ssdeep":"","tlshash":"4731c674676827ece6071b3850826315f7a1e83dc5a4fa2300c38b2b0e47eda1899487","first_seen":"2026-07-22T10:12:19.947869Z","last_seen":"2026-07-22T10:17:26.155133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-portugal.com/wp-content/themes/starter-kit/build/main.css?ver=6.11.0","fqdn":"rainbet-portugal.com","domain":"rainbet-portugal.com","tld":"com"},"ip":{"addr":"172.67.131.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-portugal.com/","date":"2026-07-22T10:16:56.430Z","timestamp":1784715416430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-portugal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 15:55:36 GMT","end":"Tue, 15 Sep 2026 16:54:07 GMT"},"fingerprint":{"sha1":"7C:78:9C:39:F5:B3:84:75:A4:75:15:92:D9:6D:90:A5:BA:EA:E4:A4","sha256":"9F:4B:C7:3A:CB:19:75:DB:A8:63:54:3E:0D:5B:F8:DA:4D:0F:2F:59:02:18:0C:87:52:3B:CB:2B:C0:30:8B:1D"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/build/main.css?ver=6.11.0 HTTP/1.1\r\nHost: rainbet-portugal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-portugal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:16:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 Dec 2025 14:45:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69401f12-199d4\"\r\nexpires: Fri, 21 Aug 2026 10:11:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 311\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbufVtMfNT9iE49oD3VhvuN%2FLNbUja%2FXk5M1gigqZgC47kibD%2FE9DcyCJRbqHTt2jLWapUreMPrJ6ZcRj4uWFmawUf2HhlfHYZYqF%2BMcKYZH0dH2dw2WjqFJWgKilWBZIDPrn2m9kA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b158ab1256c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104916,"size_decoded":18873,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ab4bd79e6afb398ff171b97946e32d38","sha1":"11e4177a619d45364e96033799e8a25b27746926","sha256":"272276540ccf0459ed8436730087e144584f01cbb498ec2bc2af42345ecbdfa0","sha512":"681f37f117c57faccccfddc3cd39e456434ed8613332f0d1adc3b6129b4f9a4af95788ad154bd39db085230f63090889afb94f9cfe0826834b5ed3712d9164ad","ssdeep":"1536:+1WI4eMHa8aqEB+ENWcuYtcJ3SYiLuVENM6HN26KG3Epi5fG:qgCtm3SYiLoENM6HN26KK5+","tlshash":"60a382c7f1a03518d467c61de0d0babe296f4641e3269eebf4276bb487c92c70952e0d","first_seen":"2026-01-04T17:17:18.931393Z","last_seen":"2026-07-22T10:17:26.156598Z","times_seen":11,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet-portugal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}