{"report_id":"291110da-3c28-4fb5-82e2-4dcb658650cc","version":0,"status":"done","tags":[],"date":"2026-09-17T03:20:24Z","url":{"schema":"http","addr":"eu-rain-bet.com/","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eu-rain-bet.com/","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"title":"Rainbet Casino - Crypto, eSports \u0026 Provably Fair Games","dom":{"size":214313,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5845)","md5":"3b6c9e4b54f68cd6c66ec5a14afddfaa","sha1":"e69fc49c618d5eab696cee0ea8e1bda9669898e9","sha256":"ed107431cd84d0373cfc019225f1a6bd1ec5ed5c39ed97533b8944fb453d67b1","sha512":"b7447b2ab894b2a5f91d1a60c42380381d9e925c401dbc9391b3e747f07ed59e77a605810a3061e7b2eed15b474eadf57c8a13d057d235060ebcb87ded0421e7","ssdeep":"1536:rdwqsTFyp3FEUp802Dozup23Qypgelsw4n3bLTfRMlSmHRdSeSWmvie:ejAL2Doz63ypwUs95","tlshash":"e324c57b4697208d2a07b6bc9bea6318217f8007c515deb4beddd148cfcfa8548a1b4d","dom_hash":"domhash51e95ff1fbc385dc724e46e2edb1010a","first_seen":"2026-09-17T03:16:53.370001Z","last_seen":"2026-09-17T03:20:30.240554Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"eu-rain-bet.com/","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:20:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"eu-rain-bet.com","ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-23","domain_rank":0,"first_seen":"2026-09-17T03:20:25.632013Z","last_seen":"2026-09-17T03:20:25.632013Z","alert_count":116,"request_count":58,"received_data":1262677,"sent_data":36755,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":1,"received_data":60319,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"g10102301085.co","ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":72137,"first_seen":"2021-08-03T12:42:57Z","last_seen":"2026-09-17T03:16:46.099877Z","alert_count":0,"request_count":1,"received_data":779,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b439219cae9fd4cfeb52a0aa5afc480e","sha1":"448495b5a1adc60adfaf693cd3566488edbb47a7","sha256":"52c2a4a93b62b90c551cabbcbe003571e76aab1e8437c901e8142bd904a1bbaf","sha512":"d8b44d193c708fc3bc55912827cc80d7312aab109eb2b95e1e7b2f78b917b150e5db7dad09990313d91dd0e155f7c6b9eb87ef7fdeb5f568778a448a34a552ad","ssdeep":"","tlshash":"d0f0c935b93005328286a9fa717cfbc8ad263010ac20e408d838ccea0fd0e470eb6cb1","size":531,"data":"","first_seen":"2026-05-19T22:55:05.225955Z","last_seen":"2026-09-17T03:20:30.295323Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/5c496158a87fe3c093189cc9b1460512.js?ver=60512","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13453,"data":"","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-09-19T07:44:30.59333Z","times_seen":10691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Feu-rain-bet.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","size":352,"data":"","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-09-17T03:20:30.281024Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7e21797a11af5a43dee9704d7cf1bdf","sha1":"3ca9aa093dc46eee7e77fd185bf3eed51adfa2da","sha256":"bf29cdcaa135ffe8f58db36fd2ff3195f0850f022e5937401ff7b0ebbfa3ae10","sha512":"b59161a14159bf7d6c6e72d4b734a20744c578b330c558485874472d847ff4518744d6af47a1c97767190acee56119144c41f3064fbfcca2c820a7a88da21cc2","ssdeep":"","tlshash":"a531ad3473a175b107af8df820da1b946f3790963905c8b2ed6dcc5a6d82e460871dbf","size":1633,"data":"","first_seen":"2026-09-17T03:16:53.475702Z","last_seen":"2026-09-17T03:20:30.296205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d3AuaTE4bi5zZXRMb2NhbGVEYXRhKHsndGV4dCBkaXJlY3Rpb25cdTAwMDRsdHInOlsnbHRyJ119KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a9b59b7e49f913a3926f6431334155","sha1":"35f2521d3ab3f75895b02da9c6b5419e1a35be59","sha256":"94c4eed60653e14337c021261a52581e9b6f93ae9ba512912ca30ce656b3ac64","sha512":"40068c8ae55d5f7b8bdd0fcf5eabdf443cd6b033788c1686b0a96adf4f645bfd34d50ea7f0017c9514e3029752b213826373450e791760bf8310e0c303aaa750","ssdeep":"","tlshash":"57a0028530a76805c505d1605967fc00446415cb818eaa181ae5ee30e515598748232e","size":58,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-09-19T10:30:16.986026Z","times_seen":19619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/a80e85bff06982f3254b3bbbb259983c.js?ver=9983c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","size":12513,"data":"","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-09-19T07:44:30.59868Z","times_seen":10412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-19T10:30:16.987421Z","times_seen":33308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-19T12:41:53.450861Z","times_seen":436207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"797871f072199fd9bf9a096ea8019919","sha1":"503b9846e46547a01dcd662a0d7f92d0b51edc7b","sha256":"3168a52cd7818c192a12fab568062356581b30e01fadb77fd65674c72c072754","sha512":"637e9eee2f0de67741220086ca5f807da67cc800c6a167bd6585040d8a886bec7b8254d6b4b71a610117c7fd1260628d32a1fd8ef23c1720f3d990e795297b6a","ssdeep":"","tlshash":"d50120c9b5d2b815358f51bd227b511eb233f6093e1c0ee7e46596922d30782923e2ce","size":806,"data":"","first_seen":"2026-05-19T22:55:05.222511Z","last_seen":"2026-09-17T03:20:30.306567Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigiY29udGV4dG1lbnUiLGZ1bmN0aW9uKGUpe2UucHJldmVudERlZmF1bHQoKX0pO2RvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoImtleWRvd24iLGZ1bmN0aW9uKGUpe2lmKGUuY3RybEtleSYmKGUua2V5PT09InUifHxlLmtleT09PSJjInx8ZS5rZXk9PT0icyJ8fGUua2V5PT09InAiKSl7ZS5wcmV2ZW50RGVmYXVsdCgpfX0p","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bf50de73e80be90907f9d063ab4dc13","sha1":"cf9ff1f3b50e0bcb3c579cf3be2bb90fa2c4c841","sha256":"d2282bff21607221d029139d4da81e21974fd6611ef1ae6cacffa2586753dd12","sha512":"6f556cf39dac1806d4cee11ef05aaeec8601d6c62885f80bfd5001cbb727360992f5fc5b0a87e62acb8255436f45fdce7897fa4cda747ce6c0038a6bd4b35039","ssdeep":"","tlshash":"0fd0c9757f24bab001f9612a267fea60097a54c2e041650476354c596e78888338ae3a","size":210,"data":"","first_seen":"2026-01-03T20:40:12.132526Z","last_seen":"2026-09-17T03:20:30.307444Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/3f22c4fb7db43a144c70c998baf5dc7c.js?ver=5dc7c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bac0e224173b2ad101d5a489a3459cb","sha1":"acf0ac079a406b6fb0f03a6e07b6152c2f2ca4bd","sha256":"d19c8480175b0e8fda98b48e531afe4502cc84ccfdf34abaccc4737f3ba70ce2","sha512":"12d66c066f089c3b0d4e01eda375093235309784f94b8d2ee391937ac0b1ac7364019a6b42805dc6df6301b6987babfe9043ce3c5bb743d6e39cffc84a9c34b8","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiF:KZal0BKHWpkrM0KtmuECEA","tlshash":"0f13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc70e9bfa1","size":42053,"data":"","first_seen":"2026-03-18T12:47:37.565627Z","last_seen":"2026-09-17T03:20:30.284821Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignRE9NQ29udGVudExvYWRlZCcsZnVuY3Rpb24oKXtjb25zdCBib29rbWFrZXJzTGlzdD1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgnYm9va21ha2Vycy1saXN0Jyk7aWYoIWJvb2ttYWtlcnNMaXN0KXJldHVybjtsZXQgY3VycmVudEVsZW1lbnRUb1Zpc2libGU9MztsZXQgYWxsQ291bnRFbGVtZW50PWJvb2ttYWtlcnNMaXN0LmNoaWxkRWxlbWVudENvdW50O2NvbnN0IGJvb2ttYWtlcnNCdG49ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2Jvb2ttYWtlcnMtbG9hZC1tb3JlJyk7aWYoIWJvb2ttYWtlcnNCdG4pcmV0dXJuO2Jvb2ttYWtlcnNCdG4uYWRkRXZlbnRMaXN0ZW5lcignY2xpY2snLGZ1bmN0aW9uKCl7aWYoY3VycmVudEVsZW1lbnRUb1Zpc2libGU+PWFsbENvdW50RWxlbWVudCl7Y3VycmVudEVsZW1lbnRUb1Zpc2libGU9Mztmb3IobGV0IGk9Y3VycmVudEVsZW1lbnRUb1Zpc2libGU7aTxhbGxDb3VudEVsZW1lbnQ7aSsrKXtjb25zdCBpdGVtPWRvY3VtZW50LmdldEVsZW1lbnRzQnlDbGFzc05hbWUoJ3JhdGVzX19pdGVtJylbaV07aWYoaXRlbSlpdGVtLmNsYXNzTGlzdC5hZGQoJ3JhdGVzX19pdGVtLS1oaWRlJyk7fQpib29rbWFrZXJzQnRuLmlubmVySFRNTD0iIjtjb25zdCBzY3JvbGxUYXJnZXQ9ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ3JhdGVzLWl0ZW0tMycpO2lmKHNjcm9sbFRhcmdldCl7d2luZG93LnNjcm9sbFRvKHt0b3A6c2Nyb2xsVGFyZ2V0Lm9mZnNldFRvcCxiZWhhdmlvcjoiYXV0byJ9KX19ZWxzZXtjdXJyZW50RWxlbWVudFRvVmlzaWJsZT1hbGxDb3VudEVsZW1lbnQ7aWYoY3VycmVudEVsZW1lbnRUb1Zpc2libGU+PWFsbENvdW50RWxlbWVudCl7Ym9va21ha2Vyc0J0bi5pbm5lckhUTUw9IiJ9CmZvcihsZXQgaT0zO2k8Y3VycmVudEVsZW1lbnRUb1Zpc2libGU7aSsrKXtjb25zdCBpdGVtPWRvY3VtZW50LmdldEVsZW1lbnRzQnlDbGFzc05hbWUoJ3JhdGVzX19pdGVtJylbaV07aWYoaXRlbSlpdGVtLmNsYXNzTGlzdC5yZW1vdmUoJ3JhdGVzX19pdGVtLS1oaWRlJyk7fX19KX0p","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"668c27276f45c1c2b4ca9a2175ab86b4","sha1":"d905e44c93e9be8cb6c54b89331a6f54a05431e5","sha256":"991763e5ea47078ca8aa00951656f5bb13df6f6ab62a0d6635030e046c384ed2","sha512":"df559fc37e1c9aa85a653b441781a3d4210daa243193f3c51a2097921a856c5a0c7ee2823b9d047cf20a91bc10bc146bd05589a69c731c25c95b7fb82dc3daeb","ssdeep":"","tlshash":"b2115953b6401973ccff3abfb456935c3b216010b920546c4a2caa2d1772fc1957abcc","size":1056,"data":"","first_seen":"2026-05-19T22:55:05.230219Z","last_seen":"2026-09-17T03:20:30.308132Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/037f462f182a9c13d59cb3b531487628.js?ver=87628","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","size":861,"data":"","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-09-17T03:20:30.249379Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c58653dfa1ee4977be558a4d32de8bb5","sha1":"07bdc3b89f917c6f2b18d097dc0f1c0b8517b748","sha256":"3f4c17e9e27e31112354fd66944a2f7db1a8edf2a99a3188f96e44f69eeef67b","sha512":"758d1bb6186985462ab2281712f00d34cb26b5c4b7428893ecbc35c2f88ec8b2f81b3dd8ab7930e66fda5537f761a62fd1e7450bbff3681bbbb4bcf1b043b6dd","ssdeep":"","tlshash":"1411ab373b7da0be4bc4a3d801885d5ba5cd5054e09ad6a8d2059c2c0aac3575b4da17","size":1014,"data":"","first_seen":"2026-09-17T03:16:53.482881Z","last_seen":"2026-09-17T03:20:30.309087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f814583f7a6942b8374197e227e52662","sha1":"e72d859bd076bd99d70947c328d43214e8898db5","sha256":"3b0b3553fac48b013f02975f1d9b9c163d1010e47775bcf8158dd7ef5f52fb7f","sha512":"128e7f3c831f30ee186376b768d62cedbbee83e3b48d3e6b0e7562393ccd0055bbb35c4479063c481a0b6a6ffb3089465425de4aa60d1b434e3f5ab98a9dab63","ssdeep":"","tlshash":"b9e0abeb7b500872829f742f116eb3893e724033f9007e05e078c8a26cf4d4000a2d5f","size":413,"data":"","first_seen":"2026-05-19T22:55:05.229344Z","last_seen":"2026-09-17T03:20:30.310009Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/348dd36d942e2346d2c6c31f0e6a404c.js?ver=a404c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d486693396667295dbac8def9ad05a91","sha1":"06b384bd770972d0e17e628e36151e8a85225b35","sha256":"b9bbbb9b2abd510cf3167f5405655cf4c639546eda301b56ec6457f8a716d6a4","sha512":"00f71aab782c0ffffc746840f8877d5f19930d12e88db66ad7a8745e27bc90fd6f35feaeb173880625c98ffefca04e0ada16b3cd96a95b7e96476b60f501a923","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaM/:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSe","tlshash":"50c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5792,"data":"","first_seen":"2026-08-20T20:36:42.924411Z","last_seen":"2026-09-19T06:00:05.212442Z","times_seen":436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/78f852ecacd0b0da50134f60e996487a.js?ver=6487a","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94523b12321293ad7031ac3ebb4666eb","sha1":"e64b54e2243a0f535560a0ef18fdbdff7669db20","sha256":"861d8893094b057f6b420fa72d04c663f1b471d32625f08b2a1e0f4d8d17eb87","sha512":"a5965f38de2da69f5ad4f61de343606d0e956de2c8938999f343340204a208a7011ca586c44c6ccbf67ef78350404e61ec48cdacdb151d5ce0031b3149862ea4","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qChN:OFJ+RDAGw9r0hJK","tlshash":"b402535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","size":8487,"data":"","first_seen":"2026-05-22T15:40:37.862589Z","last_seen":"2026-09-17T03:20:30.275208Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2a5e599f1a2bdb1abbf7b801a395146","sha1":"667250aeba788de9cea74c99a5535cd64c46b44f","sha256":"a99cdc1bb183359f75314a25177a6ae0ef9421b2ea9b02942cf337be40f98a98","sha512":"e188d3f6745555270a771615338367a398f3901d7565dd35c5fbde6779997a68085b2e89133c60f9c05c9a9a40924e068fdf3289a567aa6e92fa819df88ed007","ssdeep":"","tlshash":"0c214d2c6535b566021f807632ff45f9653f29ce7f409eb27c2c40909ee8889376657d","size":1364,"data":"","first_seen":"2026-09-17T03:16:53.485091Z","last_seen":"2026-09-17T03:20:30.310816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/81a72a60ddd67c8afd11bc097cbf610c.js?ver=f610c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"586bfcf8b3829616f51a7e2a4aead287","sha1":"fb73b0adb250de47d067b2b2caf78879c68571b6","sha256":"57d5f320624e13606b8e6dc357482e85842aac712a80ddb4bbb0787fb1a3e803","sha512":"0b8e1125be8714dffc0e08ff49fbbbb1304c738e3d020bb2404b66ccc1f954ad6125760a58853aa42b02e1cee7fbec9c0d42623e1d529aee35f47851d267e648","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cio:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2o","tlshash":"abb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5108,"data":"","first_seen":"2026-08-20T20:36:42.900883Z","last_seen":"2026-09-19T06:00:05.211815Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdwY2Y3PXsiYXBpIjp7InJvb3QiOiJodHRwczpcL1wvZXUtcmFpbi1iZXQuY29tXC93cC1qc29uXC8iLCJuYW1lc3BhY2UiOiJjb250YWN0LWZvcm0tN1wvdjEifSwiY2FjaGVkIjoxfQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe583c9c72ac0ac671199963d7d3b5f2","sha1":"c271b82cc8ee86389eaaa5a0b89b33cfe8553022","sha256":"7984e19deeda2588e7a882a5d27813325addf4c54f57719adc0bdfbaa7d33243","sha512":"ce8f4fd95f31a62b9a9f3114c43832b3a721fc6c2f396b30cb64c063f5d8a4627074b6f36f1be261bcea3d7feddfb2c3fa74f258ca458ea8228badbab529868c","ssdeep":"","tlshash":"01b01269a7848a0d19a1d3cd035c3231701555174d37b3e7d18401405fbf069e408063","size":109,"data":"","first_seen":"2026-09-17T03:16:53.472958Z","last_seen":"2026-09-17T03:20:30.312979Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKCl7dmFyIGV4cGlyYXRpb25EYXRlPW5ldyBEYXRlKCk7ZXhwaXJhdGlvbkRhdGUuc2V0VGltZShleHBpcmF0aW9uRGF0ZS5nZXRUaW1lKCkrMzE1MzYwMDAqMTAwMCk7ZG9jdW1lbnQuY29va2llPSJwbGxfbGFuZ3VhZ2U9ZW47IGV4cGlyZXM9IitleHBpcmF0aW9uRGF0ZS50b1VUQ1N0cmluZygpKyI7IHBhdGg9Lzsgc2VjdXJlOyBTYW1lU2l0ZT1MYXgifSgpKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"763fe320ac0f102211d2d65c9ae99ebd","sha1":"cd6e680840963d05d7b6e635734493514abceb1a","sha256":"92a43a4a1d645c227a17d52468a3d77e8f3098351f47839e53a535eb00bb6fba","sha512":"d546692c1bfec455206883421e5e083ecb33816b943fcc4cd2a5dbe04ac4206022ce3c1c8f7ff7dd387d5032cc7ae1573a4fb044093bda19ff5ba11806863df5","ssdeep":"","tlshash":"1dd0c994a1282c64e28212373f7a6a5d183167fc4c838bacd54f9e903965c1547eb199","size":214,"data":"","first_seen":"2023-03-08T09:29:41Z","last_seen":"2026-09-19T02:20:14.975777Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGFqYXg9eyJ1cmwiOiJodHRwczovL2V1LXJhaW4tYmV0LmNvbS93cC1hZG1pbi9hZG1pbi1hamF4LnBocCIsIm5vbmNlIjoiNjQ1OTgxZWM1ZCJ9","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a449931ed33097c9621558c9b0ed882","sha1":"f541960b34a9443a18ceca1904f9973ea5206b8b","sha256":"ce8fcbe21529ca78eb2a2860561fd5f916f438fa518d114e248e0d8e977cb32b","sha512":"77357f234912ff89faaa131630909e09e0320d5a938c2844bb73d27a4a816b4e579de56951372732069d3394c56a57538fb46d3a377088e291c390751fc791ea","ssdeep":"","tlshash":"57b012224e549b0719801be404101277525911315850e8413303e5404628c525d4a043","size":87,"data":"","first_seen":"2026-09-17T03:16:53.49363Z","last_seen":"2026-09-17T03:20:30.316307Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/a924153e498a06429e60bb2baf0186b3.js?ver=186b3","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","size":493,"data":"","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-09-17T03:20:30.260405Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[LiteSpeed] Start Lazy Load","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":7922},{"level":"log","text":"[LiteSpeed] Start Load JS Delayed","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":8589},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj42 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.011612817715959123] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[reload:map[configurable:true enumerable:true value:yes writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":10574},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj45 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.12042786445867015] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj46 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.48547217658319575] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj48 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.1974243296351469] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj50 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.501897537963044] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj52 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.9817537190952352] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:wp-i18n-js-after type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj54 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.1820563089093078] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:contact-form-7-js-before type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj56 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.3470865863532321] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:pll_cookie_script-js-after type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj58 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.20634548453441548] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:scripts-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj60 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.17264477472591222] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:cmplz-cookiebanner-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj62 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.3385030472274082] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj64 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.27883748110399087] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj66 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.07390083445379825] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-optimized:1 data-src:https://eu-rain-bet.com/wp-content/litespeed/js/5edad330e065af9ccbd6915c059343ac.js?ver=ffc70 type:litespeed/javascript] attributesLength:3 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://eu-rain-bet.com/","line_number":5003,"column_number":9473},{"level":"log","text":"opt-in","filename":"https://eu-rain-bet.com/wp-content/litespeed/js/3f22c4fb7db43a144c70c998baf5dc7c.js?ver=5dc7c","line_number":1,"column_number":22242}]},"http":[{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:53.370Z","timestamp":1789615193370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4d38\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVkLoqktJE4c%2FWMon0Ym%2BsCNZfBTB3Sfs0nCj17%2Fn%2FU%2B4Uvds4zYoREdTBZSABD2deqk%2FAXM7UBgz2%2FyxWdl%2BAZRU2xUdU5Sv248lkJktMjbkWeB9u4xqS%2FK803aQsDD3Z8%3D\"}]}\r\ncf-ray: a3c4f8ce985a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20570,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-17T03:20:30.242075Z","times_seen":236,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:53.372Z","timestamp":1789615193372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4c08\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 220\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbwofbZEbc6MIdHPWsxD92kz02NCp0%2BehepGTdq2LkG9EeF076WNf1hJtSpvapY%2BkLTi8k2mrUYRMLEx3Jod7LH7O%2FOsoAQaaURfS2iuxI16NZJ9TkNSUFNsugISKyC36Sk%3D\"}]}\r\ncf-ray: a3c4f8ce985b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20254,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-09-17T03:20:30.243132Z","times_seen":211,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/css/6a04b8fdee58aef94912678e861761b0.css?ver=761b0","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.372Z","timestamp":1789615194372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/css/6a04b8fdee58aef94912678e861761b0.css?ver=761b0 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-e6ae\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gshsEfk8gsiD6sCRWZsMm9FQIE2p4k%2B88vhqJFVCfbm3LU6Mn0guqP6gkthtIoPqFlJg5u5ewdoFilbu9xyQThMVCL42Ogfi7CAWHryNhnpY6Nrc7e96mLlTFS63R5pM6%2FI%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f8d4d89949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59054,"size_decoded":36559,"mime_type":"text/css","magic":"ASCII text, with very long lines (59019)","md5":"8fddcde9f541ea3adb30580034f559b6","sha1":"205c36c97d2b3470c616f3a433a0a8ff725441c8","sha256":"292ce5ca5f06d57da7e5d7343c0eb6f9190b774899e94cb7a669d4da793d73bd","sha512":"5cc20a64a3ab95b2f44a8632c12ea996a566c77714dfdb00a493aee09cbeacef44d2614ce518b717562075659c8b9b60e1c7598423ae656f776facaff9fbddf4","ssdeep":"768:+ey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5OJq:+x/ZvB/qPWMiquqioMUXQSJYIMW+OJq","tlshash":"0443c2b1e64a40d677b0c843af65b27a5582bd7df8409cdaf40b821c1af3635069dfb8","first_seen":"2026-03-04T10:07:57.891243Z","last_seen":"2026-09-18T20:19:39.269503Z","times_seen":854,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1-4.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.440Z","timestamp":1789615194440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1-4.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 10:03:54 GMT\r\netag: \"6a86d10a-3be0\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIVUOlT%2B%2FUIUl9JMITRcSfMFHolUxbZwrGpOaVdceigbcZ1rSMd%2FXL3NVhdr8RAortb7hzWXcCVinB3X%2B72BlWDlGNmMEt9BCyVrs3vInDB8apt24YYcH5dNY8yNrct1%2FnU%3D\"}]}\r\ncf-ray: a3c4f8d548bb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15328,"size_decoded":16119,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5ae8cf5e2e63abb3f52a24c5333fffc","sha1":"bcc3bf6aa1a9e56ff6a8153bc61a5881cfc3ba87","sha256":"cba85c726f8ced19d7ba41b327f8e8ca2f98a1845f72a83b624f18cab342528e","sha512":"9b5cc9f9c8b8b387f8170fb051a1a6be208b61e348afa8caebdf82102d428cf1bd2ba3e4cd866e7e35f98fd77a0df91033d6c18fa40ca7a479953ceaf30f82a8","ssdeep":"384:iwT2kHu967sUkzxOWMm+2AZEXW96w3xfQcT7:TT2kHuoeo3BKXPwH7","tlshash":"dc629e674279c4fee84169bd4a993b4af649cc3f530b682a03c5d83ad3d23fca625d10","first_seen":"2025-11-24T12:48:18.647466Z","last_seen":"2026-09-17T03:20:30.245577Z","times_seen":21,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/es.png","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.401Z","timestamp":1789615194401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/es.png HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Apr 2026 08:54:41 GMT\r\netag: \"69e88cd1-122\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuqhFedjF7Q3E4yES753iZRimhJeDofzfmYPD5yWgsert5S%2FDZu1mi4SHXgvbC4lKEJT%2B0Y8X8X1%2F16TZmuqViGRM%2Fsablblf5Cj7Y3mPJPMEgowjtf16cYpJss7%2BeZc%2Buk%3D\"}]}\r\ncf-ray: a3c4f8d508a149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290,"size_decoded":1079,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"72e61ec9fea3cf1e70955a02d210723e","sha1":"22fd6f4802f2f78488a5b12918c802cbe77403ae","sha256":"ee43de7f6648dac36980de3bcf1bf0d34f07178fdb8afac80541f5cf1660cc5d","sha512":"a66e647b332f97a79a757b5a022c576433b7e894712b46c19a901ddd5695e8ab8e95af4290627c4743fd4351f5013b0329802f6755b7897a4f7b474fba1cb980","ssdeep":"","tlshash":"c9d0ebb2e33d8f78d02d0233dd88c85ca8204a1a4a580f4f0ed2a03288131e52e20ea2","first_seen":"2023-05-04T14:14:32Z","last_seen":"2026-09-17T03:20:30.246319Z","times_seen":388,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/a80e85bff06982f3254b3bbbb259983c.js?ver=9983c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.413Z","timestamp":1789615194413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/a80e85bff06982f3254b3bbbb259983c.js?ver=9983c HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-30e1\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbVNyOgScB%2BZZLkLgGpoMTz8ERPRyQTSnXOYdeYK9sxuy4%2FIYvbZVfiKZwF4ersaztw41kcU0tsDRZ%2BXlW5ZMmvxcQNjUkC7DEDDhreIOWZa2Z4BpsWDR%2FG3IwRwt8%2BNDFk%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f8d518a749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12513,"size_decoded":4331,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12511)","md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-09-19T07:44:30.59868Z","times_seen":10412,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/037f462f182a9c13d59cb3b531487628.js?ver=87628","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.416Z","timestamp":1789615194416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/037f462f182a9c13d59cb3b531487628.js?ver=87628 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AzLUU%2B9NxRROo%2BTOfrkBiY%2Fn4ND1cYgVFotSd%2F6X4CJ3jb04OB0zgDq9%2B9Sfk9x%2BpHAfic9EhbOBR1X9w8mtqVPx8Pwu469GHr8XjmsN9L2h3sI4L3M%2BT%2BNkKrBI0V4vxI%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\nage: 219\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6aab5b7e-35d\"\r\ncf-ray: a3c4f8d528ac49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":861,"size_decoded":1051,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (306)","md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-09-17T03:20:30.249379Z","times_seen":15,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/e-cogra.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.453Z","timestamp":1789615194453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/e-cogra.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:19:52 GMT\r\netag: \"6a86c6b8-cda\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lesb8voBAyIkiq1oaJKxQdwJNxqu71eXEu08tZigl3Qs2EhuDaUaXVkJVWBDuEusF1qM9h2JAVHJASVbMZFjP5GvFYf4U1IHsiCXCXwUKfWGnxBy99qgpLnXMfgkKcI7kaU%3D\"}]}\r\ncf-ray: a3c4f8d558c449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3290,"size_decoded":4069,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"784df1bc85fceab4db9b889f86aaba8d","sha1":"a885264019d189425f1070ffd650b9b154e03f92","sha256":"5114fbb60fe14892f8b53ad458cb5016625951dcc9d8332979d42c84f0673985","sha512":"9dc98766d7126fbc40ab7f185ec67661d3bae74285866b935118b28fa8d7fc9e21a711b7d480f0b4cc6e889e51920c59475988dbbbdc0c7c075cfa63d7b152c9","ssdeep":"","tlshash":"3e612b72737dab6ae911567260402787d25cf032d66ac74a37d01273a36dddc1e1f0da","first_seen":"2026-07-08T12:11:29.19487Z","last_seen":"2026-09-17T03:20:30.250354Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/mc-afee-secure.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.454Z","timestamp":1789615194454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/mc-afee-secure.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:19:54 GMT\r\netag: \"6a86c6ba-826\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9T%2BIHu11DVSzcNzDrgdV9%2FKvFJ7guu6aA%2FvP9lUPAApVxIIOCtJwOlwQvkPLAQLF10ysC1vdZDq%2F%2Fjxm1t5ZHxJDHhYkfwyChR3BobakRsylIJaZzv6cYihUzGtU7Nh8H4%3D\"}]}\r\ncf-ray: a3c4f8d558c549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2086,"size_decoded":2875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01cc7ffbd9b08546811c16d036cde6a0","sha1":"561c6a6520bc561aa2c436c9ae1152f3bd617a7b","sha256":"3788a634740edcf53414dae9102ea8aafa097cd3549ea21df3a5d297736c757b","sha512":"ec9e1a49dd546a61f97f195f6cb516707e8452d2fcc0256e7d791cdf902f91ed257caf31dbb24047e956ae93cc3315b7875d83eef9c019d91a9dcc8b94bc7da0","ssdeep":"","tlshash":"e441c876e36cd3dcc094b63d76b21bc173ba3834ca56afd2818088694a35dc43454cd3","first_seen":"2026-07-08T12:11:29.149171Z","last_seen":"2026-09-17T03:20:30.251237Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/bez-nazvaniya.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.426Z","timestamp":1789615194426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/bez-nazvaniya.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 10 Sep 2026 14:06:42 GMT\r\netag: \"6aa2b972-b54\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcRcN%2FaqbJ0mybPmMfk%2BZXAjPpem360n3AoT85sltkRVdabti9CcbGSzr9njMiZ5uwQsVVT%2FGgd79kDPlmcQ3jGK8mdoSVx4DrRvE%2B54XSqydNhOOScoxFzZpPaz8tN5K4M%3D\"}]}\r\ncf-ray: a3c4f8d528b249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2900,"size_decoded":3687,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f617f52aae9979de4c834c69307ecd63","sha1":"4b9d51f4a48a5b7347d70eedaeecb461993734ff","sha256":"eb0c65aefb2e480997bbd4b0a7b97941a8af93a7cac98e858af3e17ff75995b9","sha512":"ac447dbce31aba06f6368d50b1cfefcdbbc7b00b2c88626767718a4fe6d7b7702c65327d6917c3fd50fd16f1e9d9dd6af7974c161d8bd6ad51015bff087e6436","ssdeep":"","tlshash":"19514e7a57185d7cd034be3c19990f1b9f71fe17564612a9554121730f728d4042e79b","first_seen":"2026-04-13T07:01:10.904608Z","last_seen":"2026-09-17T03:20:30.25215Z","times_seen":32,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/gamblers-anonymous.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.445Z","timestamp":1789615194445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/gamblers-anonymous.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:20:17 GMT\r\netag: \"6a86c6d1-105c\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4lQzYuDrjn4PLjnb9a54EpLNWVfZqYav7zqRUAD4yVtL73xcUg27Ugpcv7SI9TzqivnReOwDLot5U8wfo7tKk8WiMtByRx%2FXhrZ9yqEf8X7xlmPRxpkpzCr63TRS0jObVEE%3D\"}]}\r\ncf-ray: a3c4f8d548bf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4188,"size_decoded":4970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d679ae3bd48192653c8c8a6e5942ce7","sha1":"c56b71f5996147947ed4a92afa2ad43885f1111b","sha256":"2e580df9323a347044575ef2b4eeac85b12affff720e913d8b91a7252207a994","sha512":"3883caea8078264cfa3cf455f1d5322d221ba5ab748684a1b2b224722ee42f3d480e4f9fed0812ddfbb777d9fbc867312254251be3d4f27e562ccafb30b58bbd","ssdeep":"96:2Elbw+iXQ0o80SkEglTOFU5v1P0gslhX7kQZid4vO8uu:zwTWKgZOK1cHoQZe4Ou","tlshash":"a0816d6df3b62356e8031bb8e42257563e1ebc744b83f06b864513b23d400e6669c353","first_seen":"2026-07-08T12:11:29.148058Z","last_seen":"2026-09-17T03:20:30.253041Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/gordon-moody-white.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.448Z","timestamp":1789615194448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/gordon-moody-white.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:20:35 GMT\r\netag: \"6a86c6e3-29e6\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggZOxlZWGb6gMgQOp6q8EOIf76O2uaXEsPA41YEJd1NaXdHztcH2X%2BDk28FExPidiNkWCpfGl%2BFTCv1eJxbcxcfqSM0lbZAaDytvjYzUEaZ0PmXWGXOc8Iv2wOmILeNOfl4%3D\"}]}\r\ncf-ray: a3c4f8d548c149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10726,"size_decoded":11511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a29304823c632caa324e70130435c8db","sha1":"968d55beef76e1306673bb932059daadb4787a53","sha256":"4aa4b6eb193f0785947442dc0086bc630da24899842f5e7b00ea49ca78b26a5b","sha512":"b592dac2a0e069760082f4e51b86887b0f32310b7d946a84bcfbdfbed0fb3809f63fa1f3cffe5c01a997beea8fe0820b98e8ad41a2d41f880d96c9631a49a6d7","ssdeep":"192:4wm+LfX7hgce7AUzLZdTzN1rZ/DOfjyTOKSLQB5suCqYaj42i7IQP3INNLMxmU:4w/X7C067nXrZ/DoGTaLQjCR7KEV","tlshash":"e622bf1fbf293199f30376b51a907934931c8a3481ddeb3994060d3cfa1c5c2b9da08b","first_seen":"2026-07-08T12:11:29.131367Z","last_seen":"2026-09-17T03:20:30.25379Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/css/b30fb444c374c831200a02ea88095c47.css?ver=95c47","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.370Z","timestamp":1789615194370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/css/b30fb444c374c831200a02ea88095c47.css?ver=95c47 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-b1e\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMFnPL0o1V61kM5p8t5zF0%2F463N9x0BarchefHfzk2dOQ6JNJQJVVFWR%2BQyIfiFPJUMRj5gz7k9JmGL7paQd0oTDwnujiqeU18oGooEWkyed4UyLsBq%2Fi7TLnhXxzg5OxMk%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f8d4d89849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2846,"size_decoded":1514,"mime_type":"text/css","magic":"ASCII text, with very long lines (2846), with no line terminators","md5":"f6196bb1d65063d048b732c1c2216b94","sha1":"1c895153246bf45663fd0d684711a3df83abab01","sha256":"0f96f56f605acf21ab53c0c7aae9c87ec3f75caf424cb08950ebeb9d91bb422a","sha512":"c173be6a64bbc7e5b7477cfda12e425dc5a9522545523cc04bff19ec61faa3a97a0f184667e105152c6c1fd5a47119f5c097dd69f91ec4dcdced02dbbfa59c51","ssdeep":"","tlshash":"3e51a8ca965f1137561293a874cfe2f52b760c33dfd2d78467728a28c20a5a193f3236","first_seen":"2024-10-15T14:15:03.276455Z","last_seen":"2026-09-17T03:20:30.254717Z","times_seen":192,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/polylang/de_DE.png","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.422Z","timestamp":1789615194422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/de_DE.png HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-165\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54Fs%2FagYJgMWhyO482MOB1IelhxJKQZs5kJS02chKvMXNk87TE05AXSzeJgn9MWk10LvI1QhquNRCgG5JjnqSdTGRqgGgYEVAj0g3qNfjp%2FxXCSS5hqTy0GIxzYqGWqhXCQ%3D\"}]}\r\ncf-ray: a3c4f8d528b049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":1138,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"c8366d209d63b7cda8314d4258c36807","sha1":"6adb58ed9c1803599601de3f3645b0181c23709c","sha256":"6434052af0ddf6b0203fc314c95448d2148edc35dab8973128a46430fd6152c2","sha512":"9a78f5c6c4d95d2e73ee6a8b3e623660592a00713ba8461d5f772f689d6f0e6baf1aa0ce2b651e401dfb75ec3fa73e3784e0a0c0caf03f8e17657e1ef9843a30","ssdeep":"","tlshash":"7be0c0d01560ed29e2815af9449e4181d07b24be40ca16871c16cda90a4ad7b82523ad","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-09-17T03:20:30.255624Z","times_seen":532,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:53.368Z","timestamp":1789615193368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4bc4\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjwmP8VBf0C2xBtpkH155JF1%2BScqSJOYKtTK0iNcebC3jzIUGxUAPZigd1%2BAlBMYXWkf27dePKrFRdQW85jxHFDc45ptGxBno9dADYAk8JWOFRgIULT2cqjvE%2Bj%2BB1pzzEY%3D\"}]}\r\ncf-ray: a3c4f8ce985849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20188,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-09-17T03:20:30.256481Z","times_seen":195,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/gdpr.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.451Z","timestamp":1789615194451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/gdpr.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:19:53 GMT\r\netag: \"6a86c6b9-f38\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aAULQp%2FlOm3T0WAAn4PxkOgDkgGkEBo0v4aenD6%2BkCJmUP49xI4VbqQ5kIQwn7DVngr01fswamepCXLBnWenMHJyIphVTK%2FY%2FA%2BwImhdM%2BU%2BuBPmdnuVqBOu2h8XGWYzz0%3D\"}]}\r\ncf-ray: a3c4f8d558c349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3896,"size_decoded":4689,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73777701450ff69eb612314bddfc0072","sha1":"dd45111a1ec196680d3b23ede6851b43336b5099","sha256":"ea79ff83a27d353d9478ef3c21d2cfe6b81b2933f49f70142e1190a706d58b41","sha512":"7dabbdc42a23b67acf44157c4e46ee8f86fd9c5024c7826d195df3bf389822472f19c85f1248ed75ebf273a39477699d370cc4591885223bfe9b264116727f73","ssdeep":"","tlshash":"44813b7e6fa88359e13e9f7027121fa7ab3af4310dd82634711951536f27288798e4ac","first_seen":"2026-09-17T03:16:53.421157Z","last_seen":"2026-09-17T03:20:30.257255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.525Z","timestamp":1789615194525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4bc4\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 221\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCpsMA3d8bn3uSZjGPb5FsT5calE3p733QtFfl4O%2B0vUL2VnlZweYQeGL7lFZn0OIhshmqcPQlXIIyvFDqDNgxqJaQPMIAtlBkKXTqb4j%2F90xQzrN2JzcurruvD7ryMyEaY%3D\"}]}\r\ncf-ray: a3c4f8d5c8d349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":20184,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-09-17T03:20:30.256481Z","times_seen":195,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/Favicon-1-300x300.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.638Z","timestamp":1789615194638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Favicon-1-300x300.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 08:40:00 GMT\r\netag: \"6a86bd60-e0a\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgE8fn6ejKmoxzhdQk00z8mR4TVqacL4NuPCnliCTcdQt5cWFBmpJLhDuCl6Hb1R5mydsnHwnOiOf7GqAADU37h3e6yHol6nLVk3%2FAC6idTtpG%2FGkdPb4HV%2FSU46aY4YV7c%3D\"}]}\r\ncf-ray: a3c4f8d6790249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3594,"size_decoded":4382,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d84852e44d30aa499dd86a116d1874aa","sha1":"90fd0923fecc0adaf8598d70f14d7a02eb7d964e","sha256":"b114612a366522d4f8e32e6c1121cbd0f8834f22b5f12172eb42dcbc3228226a","sha512":"889c44c9224e86c0846a1e763ca4218ab99a23ba181bf87717041c1d35f7620cb9df735d1e8622f1696686df0dee393500d530a8b77e65aaf07dce664f7583d6","ssdeep":"","tlshash":"05714a30b359ecdfe3005e712987dfa2103a2f2952888f97855ee24069350cacbcc6c7","first_seen":"2026-09-17T03:16:53.373611Z","last_seen":"2026-09-17T03:20:30.258077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/spinformula_281x52.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.434Z","timestamp":1789615194434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/spinformula_281x52.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 10:03:54 GMT\r\netag: \"6a86d10a-970\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTeWX7h2tRpcPrgsmanGhfQszAe2JWupESCxuHGN6Hu9qEi7iA9ovuFOyRhXFSuHU9t43fdxYTEkNLGlc%2BmUd4ulAQQXN1UHJBlU05HZkBGfPmsKuQBxuT9GhOd0gZNyoJo%3D\"}]}\r\ncf-ray: a3c4f8d538b749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2416,"size_decoded":3197,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0eb1fa3940fcf5cb28361448f9c2286b","sha1":"6a05fbe0b9182272c5b8c4b17a8a48b07ca50abe","sha256":"66154d3a3192865d90297d9be3911109245dff14b434cc1f861c5e019c73efc1","sha512":"2b6b0f0a697da7ceab7de2ca118ceba4f36957eb095426478ce523c9a1f05df1c25f00630770a5d1bb41e504a116777efd9a921ff82e77d5d70fffaa7f3d0fcb","ssdeep":"","tlshash":"4241d97aab919a64f1192d3130b60783e7e86b164607363391844aba192a2d469cdacb","first_seen":"2026-08-27T02:23:48.775524Z","last_seen":"2026-09-17T03:20:30.25913Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/css/868064396e93a53b4a650d7355d29858.css?ver=ffc70","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:53.034Z","timestamp":1789615193034,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /wp-content/litespeed/css/868064396e93a53b4a650d7355d29858.css?ver=ffc70 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/a924153e498a06429e60bb2baf0186b3.js?ver=186b3","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.419Z","timestamp":1789615194419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/a924153e498a06429e60bb2baf0186b3.js?ver=186b3 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1E7cTcr2ZNSY7VGI9Nnu6OYbYTDPx%2B1RZzgdWKMcds23bU7HaGLXDG4hzuPJSf8DUtOl%2BxoJV5WHbVMKsz3YTZ3Dm1BeLi2uLYShPV%2FpZ80rkxOObyebxgif1ta9PvNY9g8%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\nage: 219\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6aab5b7e-1ed\"\r\ncf-ray: a3c4f8d528ad49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":1097,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (491)","md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-09-17T03:20:30.260405Z","times_seen":13,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.432Z","timestamp":1789615194432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a717d4c-5fe\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UGp%2Fw6Ao0uJ78tq6uHRA4e2UTUUpAbyaMg1fJ%2Bpeh7r8MX1cxIyUVN0hW8P7Qo5wnJ%2BeBShdjyjRrcPekDBJIGrTtENFi%2B9fZnK2v%2BuPx4Bp%2BLSgnvIv7RU06bJZgHHuV8%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3c4f8d538b649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1547,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-09-17T03:20:30.261142Z","times_seen":85,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/polylang/it_IT.png","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.403Z","timestamp":1789615194403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/it_IT.png HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4a5\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utfNMvn3xiy2Oj1PCscwJUBVDWgB5WJszAzj8GeDLWsMUNq59BxSVmJbm2yUT5d3qhrvC5pXU7D37ohn49Yr8NhaDjYNiIqlOSRybi%2BwucjDynnREu9qFcrWXTAf%2Bn9Lrjw%3D\"}]}\r\ncf-ray: a3c4f8d508a249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1189,"size_decoded":1971,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"df891e228f93d4bf850386971dbe38f8","sha1":"ca7a98f4f88db0871cdfc6f7311137e71491479a","sha256":"6dfa36808c40ce49318230061806936c68a7626797102bbfd182d024d2b26c3a","sha512":"fe3c181822d521286bc5bd9f53f3fb28dde917f7911980105d2bfb145e3e8a6b4be0a7cf45d5c5ea0826744c39dd82b2c4f98ed2da183a2345bf4fbd61d30f60","ssdeep":"","tlshash":"cf21744fbb943c809289d48222d79437c9334840d2d4f17d75cfc02709750b6485daf6","first_seen":"2023-06-01T03:35:45Z","last_seen":"2026-09-17T03:20:30.262455Z","times_seen":83,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:19:51.099Z","timestamp":1789615191099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-dns-prefetch-control: on\r\nlink: \u003chttps://eu-rain-bet.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://eu-rain-bet.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://eu-rain-bet.com/\u003e; rel=shortlink\r\nx-litespeed-tag: 9c8_front,9c8_URL.6666cd76f96956469e7be39d750cc7d9,9c8_F,9c8_Po.2,9c8_PGS,9c8_guest,9c8_,9c8_UCSS.cf6d527a1883635cd6c0e44fa66f0c85,9c8_MIN.868064396e93a53b4a650d7355d29858.css,9c8_MIN.5edad330e065af9ccbd6915c059343ac.js\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZvuTbcmikrU%2FH9TSJSaP1ONrNRPH9VmNRdDjc7KbkvPrwz8rFNMjqPDBqTeC6cSoXbAQZjZbzypMJdxTWqScQeCKhz9tqRDYpmSX8rqHNV%2FZ%2BQGb8yOeKv%2FR3Qr9F0Nv%2Bk%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3c4f8c08e6a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":231299,"size_decoded":44097,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5599)","md5":"e50ba1e9f43f1649a1069994f7a1d4e6","sha1":"e89e39db24cbb666e52c1f5f7c885e94fa70b462","sha256":"750743ad1894921c0a51847e11e1b2d0dda1b51649cb85c34c668b6ffd2139bd","sha512":"30b907e7a47de47f4ee45b7e08ba2a91f2867de42b313659f22917fb1899726ef430f010bc07dd5d87ed4bde25d00eef68d4f0cb54eb3874f0b7ec359ae0ac20","ssdeep":"1536:JdwqCRVwqypdj2DozP23QypgelsQ0/E1f5oZ2yM262otrvc:gtEv2DozP3ypWEj2r","tlshash":"6f34d56b6663204d2d07b2bcabea6315213ed007c506ddb4beddd148cfcee8949a1b4d","first_seen":"2026-09-17T03:20:30.263281Z","last_seen":"2026-09-17T03:20:30.263281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1544,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":1495,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.377Z","timestamp":1789615194377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1655\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95DSlI%2F%2FIqLphu7sIqiojPgkNY2pdlLHcpkwTqsnBjpU9%2BEk%2Fzf%2F37aHjO0%2FFJSdc2m%2BwKAcuLo3OALp%2FY6kMCREERM2okYhZJqCsMobXK2nlIftXtkamp2RZvhm%2FL9rjCJPUxeA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c4f8d4ed63b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10462\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59305,"size_decoded":11476,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-09-19T10:14:11.783663Z","times_seen":49029,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/polylang/es_ES.png","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.423Z","timestamp":1789615194423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/es_ES.png HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-585\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaDeuY7Q0CsYjLvJbY9JIIOwEO%2Ftehzm9L1tllC1FH7H0uHA2SQuVQuwBI%2FUFSvEQwqFYmUhbczm5BxjyzW13ZFcuM4HyCxeMgVt47qu%2FH7N0%2ByLXzojSgybyPmoaiXGSgI%3D\"}]}\r\ncf-ray: a3c4f8d528ae49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1413\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1413,"size_decoded":2199,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"1b4684a24835b94ae1550ab478916e78","sha1":"c84b6e0ce342ecdd2f789b4f092e2139e859091b","sha256":"536e878615b908a0a15838096aaaffdadf7c079c73cdee4457bc964001b12428","sha512":"2e0baf9354bc3abf78526cd6b2b7ea9fc1a9763a63b53376a83afd3203c669579803a09263bc8183d3358db1c8f4ef971428d802d7cdc14badc5d38e4bfea179","ssdeep":"","tlshash":"cb21714af7c17e405389e68324e6403bf9434085cdd6f5fa38cfe85e1a28271089c1e7","first_seen":"2023-06-26T20:40:20Z","last_seen":"2026-09-17T03:20:30.267173Z","times_seen":88,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/d30fae07cdadcd4712ac0fd8c14d765d.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.437Z","timestamp":1789615194437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/d30fae07cdadcd4712ac0fd8c14d765d.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 10:03:54 GMT\r\netag: \"6a86d10a-2470\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MmqwWkBPXtzGt8Go3zhyMMNyha6HBOY0rmtImUjE5%2BnUVBjtqJ1Vo7r1cPuOJYBqu3btbss7cVqXA3tNxhVbauGQJqS%2FcZgn5UU5K8LmId%2Fk49vnxtU3KU8L24mIUWBJJw%3D\"}]}\r\ncf-ray: a3c4f8d538b949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9328,"size_decoded":10114,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae275866883e5b15cbb5c79a65e97338","sha1":"d3cbff9a71c82ce3891050f9cbb77c90a0377a5c","sha256":"4d7e2904fcd00c0b9cada8efba452ec3c43e3891bcbb1318bc43517e9d2b4e81","sha512":"3a12ef2456d1d5b4b6cccddfd239ff1266de13aa2f087ae2542647b2f6c44f12a94297bf88eaede7ea5d26f957bef1e9085432d69a41ecc1b337b3de2f17ac5d","ssdeep":"192:MwTG6LAxt0f6fkxmsEyprhTv43WghenvyWG8UOherICqhKgl7m2k4YX3HHu:MwTG6LAqQemsEqpvsWg0aWG8UOherIj5","tlshash":"b012af07f7655bf4e16f27f0607807e0e5d3a305781376aa11854bf14fae1a0819dea2","first_seen":"2025-11-24T12:48:18.66358Z","last_seen":"2026-09-17T03:20:30.268351Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/spindog-12.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.443Z","timestamp":1789615194443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/spindog-12.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 10:03:54 GMT\r\netag: \"6a86d10a-878\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLK76mKvAd92V%2FY5%2BzsouiFDeu6bvpXDFyP1piRJdvD1FoMYhDe3yZTHjXNreb9mL%2BM7douqmXun%2BiAVLzc7wb3byaN%2BvnTDScvsCdci5V3TMw5HW57ewiHqNTBJfpPU3ZI%3D\"}]}\r\ncf-ray: a3c4f8d548bd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2168,"size_decoded":2957,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"694642e5aacaf18fdae3124e5cd64c67","sha1":"893182109c5d7186f48a97efa46974e5e895fc74","sha256":"019796300f15645c05ed5bc9d6784eec56efecced2a46eb21e6dc23bf730f677","sha512":"0b27b188b24f55063183bac7d926518ddc74413931de3704bc2250127cf7f84172afd2bb43ecb4222869b946abc661ae704a9ef65f18768e4b8fe4c5c3ae6f98","ssdeep":"","tlshash":"b741ea58837417add51a5234b8280b92e37e554be587c74592cb83b1bf20de5b75c01f","first_seen":"2025-11-24T12:48:18.678243Z","last_seen":"2026-09-17T03:20:30.269377Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/polylang/fr_FR.png","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.404Z","timestamp":1789615194404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/fr_FR.png HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4a5\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evLVZGVCySXy4TcHO6pD70ohvj4vzA1qd8v36z2fEPX0HaAUeUJ5N6ie35fZYkgg%2FdlUddcT73UtDWqsXZuyiY08NWpmf6m%2BPtXlEXOg5M1Nkq6f6Ivrfx9mhoQwkRPrTfI%3D\"}]}\r\ncf-ray: a3c4f8d508a349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1189,"size_decoded":1971,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"90e6a1e097f7bb27eaab27e694e40300","sha1":"dfcbf7c9fc66b0784c5e499e228dcb75a7e85ab0","sha256":"80a3e0c11f821bb378678b670f2b768405bed98d1abc73ba152251abee49f634","sha512":"cb2531d37ad353bc1819d7e84befbe559bcd09fa2fe51c1338d375330bb360f5a1588010b0b9b21d6f7454cd23b180d7a38e52522413d23b1908f1a4e3702e31","ssdeep":"","tlshash":"422144cabb417cc15248d98239e3402b8a578484dad4f4beb4cbd597183557a446cae7","first_seen":"2023-06-26T20:40:20Z","last_seen":"2026-09-17T03:20:30.270602Z","times_seen":97,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:19:53.241Z","timestamp":1789615193241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-dns-prefetch-control: on\r\nlink: \u003chttps://eu-rain-bet.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://eu-rain-bet.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://eu-rain-bet.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmL51RR6oIZyePwfq35kR5uaTJpay6lCGnaekwq%2FzDMO81UJHVDV3J4ZrV8rfCX5d07%2BrtGXtbNtxuMG3wTcvtycAYUJMuDATuK7cT%2B5XTobbXs95HN272ab8RrQ2jJj760%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3c4f8ce38ab23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":214641,"size_decoded":41696,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5882)","md5":"0270708bfc0f6e8dcbe54c7eb2e7afe2","sha1":"ee738cf43a678b35f1c75e2140a80b5777926c0e","sha256":"3bddc8ed532984e13e4afe703c7aaef2df73675114f28c6409ea1bc2b5de6a16","sha512":"f2f44cf6bca2b3cd29ce7941f91f97adf4b9efc72e2cf4b0d1923bea3d609347c7688e4c3dd9a1c877bb0c698f99865d30d9ea923ff994025f5818387946cd17","ssdeep":"1536:JdwqsEFypCYfdYfL8B2DozhK23QypgelsY0XFaLTURMlSwHR8wrSWdviW:gUA/2Dozg3ypaY3u6","tlshash":"9c24c57b5697208d2e07b6bc5bea6318213e8007c515deb8beddd148cfcfa8548a1b4d","first_seen":"2026-09-17T03:20:30.271176Z","last_seen":"2026-09-17T03:20:30.271176Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1103,"timings":{"blocked":64,"dns":3,"connect":1,"send":0,"wait":1023,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.424Z","timestamp":1789615194424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a717d4c-5fe\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Flut7B72SYqmXadPKq06av%2FAB3zhFDj2QP5lHmo11LzOC66Pkz4ajjySwxbUfmHhFU6QdxK1gN6HxgGTdZsEF6EDwMwxJBCY%2BuQwxzT7CM%2F8IgobmGvMTRZnYTzayVl155c%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3c4f8d528b149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1542,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-09-17T03:20:30.273335Z","times_seen":94,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/hedesbet.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.436Z","timestamp":1789615194436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/hedesbet.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 10:03:54 GMT\r\netag: \"6a86d10a-1e3c\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMhNXqmC1WPvEe7TdKcERbWy499styRBDpa3zYjYdyMtFuRaHkzHw73dfAMV%2FIHBRbNHnt27Ki6W%2FmkiOasK3VSvvjX7AZNf1FK9Q3LmzJdikunqK4mrDjP8GhnGwGz7iUE%3D\"}]}\r\ncf-ray: a3c4f8d538b849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7740\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7740,"size_decoded":8524,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75180b1eaa2a62548c31fb1e199a6134","sha1":"f120776b178176b77a93b3a4f47a2722714a7409","sha256":"278162082fa697426b036f8f11bb78012f404759928223ca73fb1c6c04b347c2","sha512":"04bb317d9c6c38a2a639c3cc7a0c188cce780e1e1e9bfd4fc12daa2d327bde54f57b0a9f37ae98790b277cb1570a1bcd8bf31e63de5c10acee0e58de4b0e8e59","ssdeep":"192:W3wYIy6JGTVon3OOminipGWdmByzRStXrILnMd:MwPy5Ro33mingGsYbtb","tlshash":"4af1adf906beef69ea17c931f01e974a13e8bb00de83ab0a721051061e15483bd2d173","first_seen":"2026-06-01T17:33:44.789728Z","last_seen":"2026-09-17T03:20:30.274019Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.409Z","timestamp":1789615194409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 19 Sep 2026 03:19:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIlWoQhWbwaM%2BoEpWrgXEIJVnnIkASnQPvB3InQk6%2FCec%2FtzfLT2AgDPpicFmpNPW2gFyQcx08h3eH%2FzWwGyzoyXKYxkbx6Ztm90k%2F47CxhVHtGfRjxTNGGMrdCaahOA8SE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\nserver: cloudflare\r\ncf-ray: a3c4f8d518a449c5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-19T12:41:53.450861Z","times_seen":436207,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/78f852ecacd0b0da50134f60e996487a.js?ver=6487a","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.415Z","timestamp":1789615194415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/78f852ecacd0b0da50134f60e996487a.js?ver=6487a HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-2127\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPlGWBVbmkM2mMF0qLiYwoC3XB6jkxoXrM7gaEyAvUkT4GtBi0Qh7yjPj%2F6TyqzBKAV8ADPtD%2Bp0D8o%2BHr1wv%2FzxNys747ZFMRTOsxFrA2EtBHgEls5pxeTfpgFybrFziZk%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f8d518a949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8487,"size_decoded":3482,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3531)","md5":"94523b12321293ad7031ac3ebb4666eb","sha1":"e64b54e2243a0f535560a0ef18fdbdff7669db20","sha256":"861d8893094b057f6b420fa72d04c663f1b471d32625f08b2a1e0f4d8d17eb87","sha512":"a5965f38de2da69f5ad4f61de343606d0e956de2c8938999f343340204a208a7011ca586c44c6ccbf67ef78350404e61ec48cdacdb151d5ce0031b3149862ea4","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qChN:OFJ+RDAGw9r0hJK","tlshash":"b402535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","first_seen":"2026-05-22T15:40:37.862589Z","last_seen":"2026-09-17T03:20:30.275208Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.427Z","timestamp":1789615194427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a717d4c-5fe\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daF79I3FBVOr8tducUaa0PlK8E%2FcVxdyaxkz4X5o8GrxrJ1ZVqGCGfiqv2nuXk%2FCpz5BF%2Btdwpk5R%2Bh%2BCUduLULW2r5d%2FglmAeiV0G6opTyT5giAhN0Q3IypgCI7eRZ4Xvs%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3c4f8d528b349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1546,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-09-17T03:20:30.275809Z","times_seen":94,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.527Z","timestamp":1789615194527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4d38\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 221\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3bdWm%2BDjTmM1BRBRmDHyqbgvd%2BA1ILN3fP7moT%2Bj4F3yXR9rcL53cq2jTz%2Ff7s7yy2yBY9N9Ql4tfUJbtmjlxtLrq8YWDH7Du5DS9vRUd5rFDKXxMHhOQHeppnRWE1zN3Y%3D\"}]}\r\ncf-ray: a3c4f8d5c8d749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-17T03:20:30.242075Z","times_seen":236,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:53.369Z","timestamp":1789615193369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:53 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4c7c\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 220\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehmUzW8X6K8AvlKtVjyByMM1VRRwy0L%2Brw7szkTRfUam3bQC3HDdT%2BNpi38aSf4adA8%2FPIsNW6OwBO%2Fr1vVXxzM3ImKCgu%2FrcqEf%2Bzh21Sxx6XS7kV5uWcb81cCY4Fu5Ze4%3D\"}]}\r\ncf-ray: a3c4f8ce985949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20376,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-09-17T03:20:30.277154Z","times_seen":220,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/photo_2026-08-17_15-02-41.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.428Z","timestamp":1789615194428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/photo_2026-08-17_15-02-41.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 10:03:53 GMT\r\netag: \"6a86d109-86ac\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13P4HujkNLIBi8GoLjHIVgr617%2Fm%2BaHh6JsR%2BFId5eQ%2BUTUwNx16KRRSwcBCULQ8TUEbvZFK0vq%2BdrVcJ%2FTaNPHa6G7fnt55%2BvYpEDM%2BkV2DtY519C2Ysaob8XGv85%2B4ZJw%3D\"}]}\r\ncf-ray: a3c4f8d528b449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34476,"size_decoded":35275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ee1467fd11950c4fbb20f6784766c52","sha1":"3cef47b333bfd2260f22a6188803130b30ec58af","sha256":"d6882a18802f95e5d4430ab320ee735aa9b6e861d58ce6de331f54ca113b3297","sha512":"6205b9a4efaa631e3eab9373403aa324a29db29222b3f2b7432486e3e59aa3dfabb13f87cf0689c800a1b5c136eb66d60c94ad15308a86b018350432cac7a77a","ssdeep":"768:XSec5+UDK6BaE8BlSa6K9IAdGdEcrTTRxsDmAC4mEQMhf2lJ:iR5DDK6B0TB9DY3TRxMmATCMhf2lJ","tlshash":"a6f2ad0af3b9f156d1529d7f037a1a6d82d322943d93760b97f860f819b0a2b371c18d","first_seen":"2026-08-27T02:23:48.786322Z","last_seen":"2026-09-17T03:20:30.277807Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/ssl-secured.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.455Z","timestamp":1789615194455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/ssl-secured.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:19:55 GMT\r\netag: \"6a86c6bb-12b8\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAlE%2BJmLZrjroc6WTMoXlCLNqsDMHleabPkdV0wwW%2FpKgMM9%2BrVJVtuCpE1LMud6NePB2SGUtzTq%2FZDtQzSROTeJ6QFG%2BG3cjPWVwcT85lbOgzL4n0XnVec77K%2BX6HC5W4Q%3D\"}]}\r\ncf-ray: a3c4f8d558c649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4792,"size_decoded":5584,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2852abb5d2784a21f7af235e332f6d32","sha1":"cd836f41e0e47bab1729096e8ad29e8085e2be65","sha256":"f19c6225cdc5789bef81e53a10e28265a5185bbcbb33bde7181be362ce8c83fa","sha512":"1e02c32c8635c6f6db2d673b0a185de7bcbeccf6751e77999bb9463d7eb5e84da8d940cec19c0dfe40547ed410f63b2255b3ad81b380182a71acfbf14cedfa4e","ssdeep":"96:wElbw+iXtcFUwALK6FBhvWn4z0lqjyQHlyJx+UZ5isOYgetltGau3yYAkmbpFBe:VwTiyVK65ug0gjyQFyJpZ5dzbtijafe","tlshash":"c0a1ae7dd69172c0dff72e38a0906d505f5e1d294fc2c28392ed1201ffd4982a45a00f","first_seen":"2026-07-08T12:11:29.150265Z","last_seen":"2026-09-17T03:20:30.278823Z","times_seen":21,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/css/ec66bba19c0aa0d8c15ab03622941fdc.css?ver=41fdc","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.373Z","timestamp":1789615194373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/css/ec66bba19c0aa0d8c15ab03622941fdc.css?ver=41fdc HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-ade\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3V4SwYd2jDqNTi76sZqMAXBejlDSFqhqhjrD8vEbpN9pu6mNPl54bPqho383jUY2SWtW%2FAUYGtqQUV7Re6OwP6tbIQT8sk5J64X16mYibZtlIUbmouc8E9pBKrapdpZd3ms%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f8d4d89a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2782,"size_decoded":1510,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-09-19T12:32:53.955438Z","times_seen":34911,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/css/6c0324f564eb0a3500f9f50da859179e.css?ver=9179e","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.380Z","timestamp":1789615194380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/css/6c0324f564eb0a3500f9f50da859179e.css?ver=9179e HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-929d\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUsOcWG5kxXirKuVCcw7eyQOVMuibc%2FDNcS0m06EP0bRLfGVya4qG2KR3cgXFQcXXjp067D7vmodQ%2FF0DcjwzWY%2FtW054l6ij3zWZTafGGrVFiKjUulDa6m%2Fv9aNYZg3T20%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f8d4e89c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37533,"size_decoded":6006,"mime_type":"text/css","magic":"ASCII text","md5":"71e8b7be361539fa310fa7de623ca1df","sha1":"8d8ce654a29c53ec2e00d70c7059f7c39fe80417","sha256":"dc528215a993220e64dfa5e8548b0502d245b4a5c6a046395e80b0dbe8a50398","sha512":"8b485fa8135ea6f90ecc4edcbc15e8d15402bda5288998d5c0d8aa8345f7ba72eb71c53a0c6cf1200d2c3843bf2f5a3b29c0c58ab8421c38ad8076084ec4a092","ssdeep":"192:/NqClYjXbi6ZzBOllrQnewojZ815/t4ssaWZZ+y876kCaZQF7hdCkiufoSfufTGR:FZs5IoQFGNKZvOeb7","tlshash":"08f221216ab73899651ff014ef992a0661485007f10addf8fedde28c6fce29485b1b4f","first_seen":"2026-05-22T15:40:37.867104Z","last_seen":"2026-09-17T03:20:30.28035Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Feu-rain-bet.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.531Z","timestamp":1789615194531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9508048080.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 01:09:01 GMT","end":"Sun, 29 Nov 2026 02:03:14 GMT"},"fingerprint":{"sha1":"66:EB:62:A8:32:F7:C6:6F:3A:D6:94:08:57:BC:01:F6:3F:9F:17:AF","sha256":"BD:5D:A6:7E:ED:3B:3E:03:04:D4:A3:83:6A:B5:1B:AC:39:30:BB:F3:33:6D:B6:74:18:F3:89:56:8F:95:A1:32"}}},"request":{"raw":"GET /gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Feu-rain-bet.com%2F HTTP/1.1\r\nHost: g10102301085.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate\r\netag: W/\"160-9XoKTHJPhkwR+uq3SOUaam5YNgk\"\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: 9be889b439c685c5477b1c828e811456\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\nserver: Google Frontend\r\ncontent-length: 352\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud Load Balancing","description":"Google Cloud Load Balancing is a scalable, fully managed global load balancing service using Google Frontend.","website":"https://cloud.google.com/load-balancing","common_platform_enumeration":"","icon":"Google Cloud.svg","categories":["Load balancers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":352,"size_decoded":779,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (352), with no line terminators","md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-09-17T03:20:30.281024Z","times_seen":37,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":56,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/Background.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.535Z","timestamp":1789615194535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Background.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:44:56 GMT\r\netag: \"6a86cc98-2416\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 221\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANY6sFFm2uXPn4Ws%2Fov6o1LHt1Wdexhq%2BkfwZzCpUM8aoeiuUToIpwi9CzH193zCiUdzJoidMtAMAfyEW%2BSLOu6Zu6GpJAwNh1Nl5%2FOFRDSS60Laa6T%2BZAi%2Frbl1RCPJvYA%3D\"}]}\r\ncf-ray: a3c4f8d5d8df49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9238,"size_decoded":10030,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0078bf77b37f61f886e57e38e43b4ee6","sha1":"273484cf89d757d4f4f4d2c33e5e1e29f1bf5d6c","sha256":"20f282bdd6ab15eb6f38da3af4bd7f53b5ad5fd1e065ea5f51a530763f67fc65","sha512":"71376e9b356d3e87fe65266210bc9d1521edceb756c8b47d8fd1955665d117ba669f07d071e742a73c83d0de6fa28a0437600c9bb0b743968da1fdb9b94796d4","ssdeep":"192:owE3Bg7WhIYpsCubDyERH1svG03xFOuxyKKTo7xKEpy:owapvKCmyE8BFO0KM7xBy","tlshash":"a612cfecc7606344d4d539b821cb5d536d6a61917c3e15de9b8d70713888bb1cecc691","first_seen":"2026-09-17T03:16:53.379136Z","last_seen":"2026-09-17T03:20:30.282731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.536Z","timestamp":1789615194536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KHQUu3yx90dZEqnHlTF0%2BX88Brn5sX%2B%2FCCgB849%2FVp6BQ7zOCKn%2BxEqObIU%2FEn3VPpbOOLyKejDnO%2F2QpZp6c1mlfgNb%2F0GnLKwmBD3gKjvGCwu5XdbscVzlkfVEDBL%2BsD8%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=4,i\r\nage: 221\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a717d4c-df\"\r\ncf-ray: a3c4f8d5d8e049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":950,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-09-17T03:20:30.283376Z","times_seen":89,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/Favicon-1-36x36.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.639Z","timestamp":1789615194639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Favicon-1-36x36.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 08:40:00 GMT\r\netag: \"6a86bd60-36e\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwT513a12J6j%2FEPK3YyC8WlPwLWdtGdeFMn9P6rDEn42u%2F24UxxsMySZl1p28QyDd3Ya4xJj7VVoin3%2FbY5bC3eMd69qYBcUAcZeqtSvsnRcxQORG4F%2FjYdeCjH6w7PgbEA%3D\"}]}\r\ncf-ray: a3c4f8d6790349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":878,"size_decoded":1667,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"401006137d83001af502d3229c9c6be0","sha1":"6e678bdcd3d06f714b0e5db9601671c60c9368cd","sha256":"5966018139c26b3adae29082a8e89c4f9549aae9cc00cceb7ac6eb7e022c8156","sha512":"da40de2de834f778a4947df6275ff8bee5320334e0e79ff8489d5000db03472c739b83d4ff10b48163b7f23acf08a1e3e214cf6303d3fc0b701f75324ef87fe5","ssdeep":"","tlshash":"6911603f53650f7ce1216e7800805f83abacbc31522b6a1282c503ba0b68ec09bdf487","first_seen":"2026-09-17T03:16:53.385397Z","last_seen":"2026-09-17T03:20:30.284049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/3f22c4fb7db43a144c70c998baf5dc7c.js?ver=5dc7c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.418Z","timestamp":1789615194418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/3f22c4fb7db43a144c70c998baf5dc7c.js?ver=5dc7c HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-a445\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WB3kwKdvWVKysucILncr1xfU6tXp0IHMLK9nvvVnHLz98OwfjugxEwn4jWWcV4v6jx2IunCtn%2F0CjfD%2FhXTu9o8XHXy7hageJHXHfuCt0yvcookN4v9M0cC8pv73u9xQAzU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f8d528af49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42053,"size_decoded":11769,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42051)","md5":"0bac0e224173b2ad101d5a489a3459cb","sha1":"acf0ac079a406b6fb0f03a6e07b6152c2f2ca4bd","sha256":"d19c8480175b0e8fda98b48e531afe4502cc84ccfdf34abaccc4737f3ba70ce2","sha512":"12d66c066f089c3b0d4e01eda375093235309784f94b8d2ee391937ac0b1ac7364019a6b42805dc6df6301b6987babfe9043ce3c5bb743d6e39cffc84a9c34b8","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiF:KZal0BKHWpkrM0KtmuECEA","tlshash":"0f13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc70e9bfa1","first_seen":"2026-03-18T12:47:37.565627Z","last_seen":"2026-09-17T03:20:30.284821Z","times_seen":75,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/crypto.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.444Z","timestamp":1789615194444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/crypto.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:19:51 GMT\r\netag: \"6a86c6b7-7c4\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edqBeqHVWZfdMzP2kQZcONIjvkgOthEOIN4NZLMWuQtyNWgCpROAj2oEAO%2BZwgWVdiYh%2FsqTgq0eFPjAWfZ5cpoVbCmIahwLFq0liSaUzwx6XpXfgRd%2Fet8dD1BL8ALygsI%3D\"}]}\r\ncf-ray: a3c4f8d548be49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1988\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1988,"size_decoded":2773,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"803f10f7eeb73d3ffea94f2352839523","sha1":"5483fcf6a5299256a2f5bd0763d8ff6bd13c9052","sha256":"5c44f603c876d4edb0843da503a33d2a898fcf63e62733422b5e476a80078817","sha512":"882e8002e058ffcf0b5fe7461463f71658a9682918ee9216015f56a66287eefd0ade443d36af7884fc6126c76b02d3e218c1ec773a8b3a8b5cba7d6b68502833","ssdeep":"","tlshash":"ea41193473d5af08f3126bfc20812b01f940e465cacd2a6cc0a5d7e64f1c7ca2d2e08a","first_seen":"2026-07-22T10:04:33.1151Z","last_seen":"2026-09-17T03:20:30.285895Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/348dd36d942e2346d2c6c31f0e6a404c.js?ver=a404c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.412Z","timestamp":1789615194412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/348dd36d942e2346d2c6c31f0e6a404c.js?ver=a404c HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-16a0\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ho4hkhjk3bmw8kk%2BT2qLcngkiH32gzgK27sK0GOrbyijSjmnatZolFiu83WalBsRqZZAWEjAYC9zInc1ikhB5uMUtvY%2BED5HkCasekgwHwnnwKTpVHjhKndsli0IgIYpixY%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f8d518a649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5792,"size_decoded":3312,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d486693396667295dbac8def9ad05a91","sha1":"06b384bd770972d0e17e628e36151e8a85225b35","sha256":"b9bbbb9b2abd510cf3167f5405655cf4c639546eda301b56ec6457f8a716d6a4","sha512":"00f71aab782c0ffffc746840f8877d5f19930d12e88db66ad7a8745e27bc90fd6f35feaeb173880625c98ffefca04e0ada16b3cd96a95b7e96476b60f501a923","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaM/:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSe","tlshash":"50c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-20T20:36:42.924411Z","last_seen":"2026-09-19T06:00:05.212442Z","times_seen":436,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/casino-joy-2-2.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.442Z","timestamp":1789615194442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/casino-joy-2-2.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 10:03:54 GMT\r\netag: \"6a86d10a-2344\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbFBKXaOqWfHgQ90mHs7KaWtn%2B6EuDEypPL4jv0P%2Bva%2BSghr%2BlAIrM3%2BMmDNNK7mt%2BtcbYLJmx96qjvl%2FmOjeOykOJQi%2FHBW1Hz%2BeHWE%2B0WeM9jUeSCLUsu3FUp2pxyrirs%3D\"}]}\r\ncf-ray: a3c4f8d548bc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9028,"size_decoded":9828,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"336171b8d3519f80acad591a755ad8de","sha1":"580c468e737992a67ccfc1cb6466657605046deb","sha256":"43947651f90e93535b99aa40c5506eb5ce8249cfbe2b34afb98ad1abbb60764a","sha512":"32c52e08451f80a21b727ad52eda309ee440fd74c8480e399e4d5f06155a20ec0aeb09a972e8fd9c14146f5132a3e61d20e9be063b431c2c86bd3827b7f80d8f","ssdeep":"192:MwTWWYNGWEgEk5irzuInNXDDa2pwLgvqsnLZavRf/:MwTjYmk5IuiDDyoBnFavB/","tlshash":"1312b18003d4e34efe312f3599983b9f41b4f48d4b5bc7a299c7e885ec5695912cc876","first_seen":"2026-01-03T20:40:12.096536Z","last_seen":"2026-09-17T03:20:30.287233Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/gam-stop.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.447Z","timestamp":1789615194447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/gam-stop.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:20:18 GMT\r\netag: \"6a86c6d2-103e\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJYa3B00R5YoFGdKPsr1DTegr%2BXMhg7klDiQrfFyVKgEuUxW%2FNlBTI3f%2F8Ifv7ItK3QwPIc10uN%2FnQ6x9WpY57eoet3T6zdrbo9A0Q1eoGccwu17Iqr%2BsqaziTHhYayFCBI%3D\"}]}\r\ncf-ray: a3c4f8d548c049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":4948,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d4c624fd742ad3e70ba1d1443d95529","sha1":"983f08f7aaf6a24e482b74baa9bc50fa2994047a","sha256":"38a72e8fde99abe32d90a1d569c7e81fc6fd28cf1018b51098d7338bae72ab65","sha512":"250d0b02da8bc75440da0964b829689046db37f44d93e77e37bf9775d7b8d9424e48e0929e3372448fe50749c168e45b98e1e0ebda7e3c5f41da6d2cd4eae92e","ssdeep":"96:RElbw+iXj4gpJQO0fRgM8JKzhsvesr4dxnw0VFmXIy:8wTj4gbQVfRpivudeYy","tlshash":"61814cbe739fc685d8706d76b5902b5276d63e1b0bc67a22025407139c9ca8c05ed8bf","first_seen":"2026-07-08T12:11:29.181677Z","last_seen":"2026-09-17T03:20:30.287742Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/trusted-site.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.450Z","timestamp":1789615194450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/trusted-site.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:20:19 GMT\r\netag: \"6a86c6d3-c5e\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gh0PFQgTYlPojPb3oL6MVJuGer1OGR6L%2FNq4GCps%2BF49OuQJhP8g%2BNownFyf5fxDZCu%2F4ZT1JNzrH%2FpO62fjamw02pAhPtP72EtAdhK%2BRj%2FBXk7TuqQqD1ZMaXvMXQyrhG8%3D\"}]}\r\ncf-ray: a3c4f8d558c249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3166,"size_decoded":3959,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9b94fd8368c9babce00f1df345b5a15","sha1":"d1ebc0be975f1146e614c9fb375224713fa5183f","sha256":"5063dcbfeb95bcb1531baa39ea35969df18963f720832ef8ca06bcebd45c4cc9","sha512":"1d8fd0762728c8b875b82f4391391add9857adf2266763c33b5383ba07c4da2c21decac33ff52c9aecb0b08075d7e15f9676960c71c87c1d33b9c2c37c0e940e","ssdeep":"","tlshash":"32512cfd43c84729c12f5b3dd1e22bd397641ac2d8c7aa5946565b120b48ce716929c3","first_seen":"2026-09-17T03:16:53.448996Z","last_seen":"2026-09-17T03:20:30.288258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.526Z","timestamp":1789615194526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4c7c\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 221\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDPp7BG4bu%2BxIMgW0YHuKYJVuw%2BTt%2B0vLmlQ7o6Z5W699TADV0Il19JV76d1JX0dv2KlxiK0%2B0a96Ny3NfoHwdoFdLspEB6SSuv8JPiarPJUwUivVFXSC4ohkcNJp9w4SZY%3D\"}]}\r\ncf-ray: a3c4f8d5c8d449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19580,"size_decoded":20372,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-09-17T03:20:30.277154Z","times_seen":220,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/css/d5d7c164c64a22a4fba4f0728bb6089d.css?ver=6089d","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.384Z","timestamp":1789615194384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/css/d5d7c164c64a22a4fba4f0728bb6089d.css?ver=6089d HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUOEKr9P7aUsV0L5ai%2Fx3gmkUji4wpGR97Y8QUzg7IrHCwaMSC9F8FppkPo7SwbHeycmZIPwQM%2FJgzWkQUMs9ZM7evZFwNxBnJ2NTvdi410wIE2qIHtQBFHxbKn272%2BjOeo%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=2,i=?0\r\nage: 219\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6aab5b7e-2dd\"\r\ncf-ray: a3c4f8d4e89d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":733,"size_decoded":1132,"mime_type":"text/css","magic":"ASCII text, with very long lines (733), with no line terminators","md5":"c7129c93c822649d49577c7203080f9f","sha1":"5c919215db7f4d6e0bc532335e00af59df5c2549","sha256":"1aec2b29f7d0b94b212e56041e79c1b8c8096767b4a43cab300788bf8e8beac7","sha512":"97905924d6b46ac6a26f390ead0cea1213d81767fbf838c590c071f800adae035f5a0f5a432019c51eddd395681bb964bb93f304127cffe7e7a8600ab1e21a1c","ssdeep":"","tlshash":"10017b11e7113029773ec24e5483e6e5d80e6253d3a146abb3d3f060ba801dc1b73bad","first_seen":"2025-07-13T16:05:55.085455Z","last_seen":"2026-09-17T03:20:30.289012Z","times_seen":24,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/rainbet.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.399Z","timestamp":1789615194399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/rainbet.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 08:45:37 GMT\r\netag: \"6a86beb1-29538\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdN9khukYeuAToynwZ4G06YMH1sq4zqXhjBHKTVyM4ZYbcR0FPLD6zDbBbPPb2gejUC5QaVQvXMaM8xOKfPEx62DnYYMZ2HbU95Ro664gmtRb4xwvEtGrczTBQ1Tk2kG17E%3D\"}]}\r\ncf-ray: a3c4f8d508a049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 169272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169272,"size_decoded":170055,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b070a6f52625b338e41a14e7655022d6","sha1":"dbc9dec0ac94459b18d561380061180d2f9b9c86","sha256":"c86c4b3f00c413c7a291d858b9d8f9c23c03ae16668263a6fd02e4b3e286a6d7","sha512":"de1259f706fa5bf60623aa2d9570865e9f49ba68c2365386066b4d10b4e60d2dfe90b4a665c416eb68c6b06cd84b882d5a8bf50ef7e184f00f8dd23b9897550a","ssdeep":"3072:54TVmiuAXhjmqjLH3PNf4I1/i/D/lqQKnXFSAUYVDLKZYNdGtyRdkt9FHV:54dua8qjLHfNf4yM/lq5VrV3KftmdeF1","tlshash":"0bf31269f77202aef01344f7ee8876a920f7b56bf03c0352014ab5d68f741adad4a15e","first_seen":"2026-09-17T03:16:53.438387Z","last_seen":"2026-09-17T03:20:30.289566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/81a72a60ddd67c8afd11bc097cbf610c.js?ver=f610c","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.410Z","timestamp":1789615194410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/81a72a60ddd67c8afd11bc097cbf610c.js?ver=f610c HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-13f4\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0IIpHj5iXT5kjQLioOpUo0qmc23TJixjPgVdlsyQd2xcx8NppC6BCl7f%2BqYoDw1MJWHkQt8%2FOzLUj7mEXtmT6w%2F0E1HNNz3zCRgfSN1ZMsT%2BLmSq%2FaEW%2BnM1oXjl98hQoBo%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f8d518a549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5108,"size_decoded":2687,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"586bfcf8b3829616f51a7e2a4aead287","sha1":"fb73b0adb250de47d067b2b2caf78879c68571b6","sha256":"57d5f320624e13606b8e6dc357482e85842aac712a80ddb4bbb0787fb1a3e803","sha512":"0b8e1125be8714dffc0e08ff49fbbbb1304c738e3d020bb2404b66ccc1f954ad6125760a58853aa42b02e1cee7fbec9c0d42623e1d529aee35f47851d267e648","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cio:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2o","tlshash":"abb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-20T20:36:42.900883Z","last_seen":"2026-09-19T06:00:05.211815Z","times_seen":443,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/5c496158a87fe3c093189cc9b1460512.js?ver=60512","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.414Z","timestamp":1789615194414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/5c496158a87fe3c093189cc9b1460512.js?ver=60512 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 17 Sep 2026 03:16:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aab5b7e-348d\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5kTgCzZNaHEuUFdpmxKgU1TaE7OFtN7oFsWIy6XPqi2QOj721zovUzl0%2BoVZx5r0jCviV7L2mRC0L1RTUFBnsNxQGjUFHctkahJf%2BOt6A9WLu6iqdHlUxC5St1ef8HhnFw%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f8d518a849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13453,"size_decoded":5088,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13451)","md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-09-19T07:44:30.59333Z","times_seen":10691,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/2026/08/18.webp","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.458Z","timestamp":1789615194458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/18.webp HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Aug 2026 09:19:49 GMT\r\netag: \"6a86c6b5-c50\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juQWDD%2B4P%2BOnXOeCVuJFfdsiEp9%2F0RDLP46%2FjZ2KAvm0vxWj%2F1prZZ0lbSa0Xwu87%2FSA8PcFu84mG0i8hMO8VwNLNfudDaJEcL7sfBNr9PfpdreJ%2FZ7XMPJUO3WMwyAIhSQ%3D\"}]}\r\ncf-ray: a3c4f8d558c849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3152,"size_decoded":3945,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4dc2d5bd883e48f99a0242bfb4bbcc12","sha1":"d19b711546152c357d43804a390f3899b30b0634","sha256":"bb21ba62c611e2c13951f599a2c9b52b6a9734d4e763d02dcd0b48abd48ef548","sha512":"11b4379b80f5dd8f1e3d5bd27d0e083633d683de248892e82d946556009de9deb42ea9f1b46c384820a36715c7f8e1315091dfd3c99780ff280ca704dc4535b2","ssdeep":"","tlshash":"ed510c3536ab4b21f518b67578b3434099a5d601aa2372a7474b1f7303640e86d9139f","first_seen":"2026-07-08T12:11:29.175132Z","last_seen":"2026-09-17T03:20:30.291998Z","times_seen":17,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.528Z","timestamp":1789615194528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:49:00 GMT\r\netag: \"6a717d4c-4c08\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 221\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsU229ERuaJT71GiBqyqxaW5lBW9kbtBY32cpaVdshtVB%2BIv1LfaVQvYKQ7VfQ4WSmdqdtSp1Vo5yIQGOTBskhLh%2F7g7PkVVd0EJA5VGH2syQj2sI1kySLObdK0kNgrVOi8%3D\"}]}\r\ncf-ray: a3c4f8d5c8d849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":20252,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-09-17T03:20:30.243132Z","times_seen":211,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/uploads/complianz/css/banner-1-optin.css?v=876","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:54.538Z","timestamp":1789615194538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=876 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en; c2_popup_unique_name=DkxVGVgRBRQaDk1WCFYV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 11 Sep 2026 12:58:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3fb0f-3e86\"\r\nexpires: Sat, 17 Oct 2026 03:16:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4PmDZPV5II2fKsmuyyqL1beKDkHR77B%2B0I9%2Bs9qYSUzDgR2CBhj6PC8TyHLFNDbwrofLSR4JJp%2B7%2BdoZ6WLH2hAwH%2FRBYqNGouHaHcODaehCiOWz5Z3B6AynXQCGEg7AtM%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f8d5d8e149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16006,"size_decoded":3763,"mime_type":"text/css","magic":"ASCII text, with very long lines (16006), with no line terminators","md5":"c810373c246109a719cc3c7bbe405388","sha1":"2bd944bf7af94ccc033a3ae543eb7f82f68f52f9","sha256":"bb4f063db16e4414b6b309863167834166fa3b7f03cd83725cefbc26c7d0b70e","sha512":"ae486aa77f0e8ad1aed2edcae8b40ce181d072b618f12cb36384068b7cd51b68eeeccd07fc4cf0a916d66ecc5278e43e4f05cedbe5ed1bf1c5037346081d4aee","ssdeep":"96:s69pnJ9iqNZ1csUi5p8Z1cAvqlIWurrkTobudlYLhf8Iqb56qlym6OoLBa/Mi1Rv:7SaWDi5cWi2IWRzZbZ3sMBd","tlshash":"8b7232a99e0c1164d6cfdf1d37aa960e9114f731b2ad1af824a1b850f3fe5d11d2e382","first_seen":"2026-09-17T03:16:53.410807Z","last_seen":"2026-09-17T03:20:30.292902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-rain-bet.com/wp-content/litespeed/js/5edad330e065af9ccbd6915c059343ac.js?ver=ffc70","fqdn":"eu-rain-bet.com","domain":"eu-rain-bet.com","tld":"com"},"ip":{"addr":"172.67.219.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eu-rain-bet.com/","date":"2026-09-17T03:19:53.291Z","timestamp":1789615193291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu-rain-bet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 15:06:03 GMT","end":"Sun, 01 Nov 2026 16:03:11 GMT"},"fingerprint":{"sha1":"5D:90:99:CC:DA:63:A0:68:40:76:1D:9B:36:14:C6:FE:C6:63:0E:38","sha256":"15:06:16:AC:57:66:7F:32:F7:93:DE:E3:FE:05:F6:02:B0:5F:A4:C4:C7:1B:D5:25:9C:C8:23:F6:D0:5F:03:ED"}}},"request":{"raw":"GET /wp-content/litespeed/js/5edad330e065af9ccbd6915c059343ac.js?ver=ffc70 HTTP/1.1\r\nHost: eu-rain-bet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://eu-rain-bet.com/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:19:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 02 Sep 2026 03:36:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9799cd-15aca\"\r\nexpires: Sat, 17 Oct 2026 03:16:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 219\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7mDEhjaYt77e6zHzmVo8m9xFmjtonc5LdL4SifPdCNhkbRtGUolLmCaSjkCFkSRPg2eD%2FfPWrckYsEJRQqevg8eir%2BU6eFFh1yZ31gg4gM2wFI5xl3tCnsLPc84V1Okd6A%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f8ce585149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88778,"size_decoded":25516,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"5edad330e065af9ccbd6915c059343ac","sha1":"52aee4615fc2822567a085ad7296f0fa97d0c9c2","sha256":"b0ed241d584c4fbdda5cf6059b241dffc2b9764b79968179047ff7856b03f3a3","sha512":"79a4715de82d97fe7cbc4d62aed5a2c2ea15de3cebd93bfff3de9c0354ab86e0dcc174c5d4ebc2e4321e12d8be16c0fb487dd4bc4295f57cd6d4ca9f2b80ffb7","ssdeep":"1536:lhNBcADyAZKWL0siDeLe02VauoZHOgjezEGZal0BKHWpkrM0KtmuECEG:lhNBcAtKWL0sijzEGa0BKtrKtmuECEG","tlshash":"9a832af53698a07002fb13a979bba744f0303569e80fc450b56ddc942b68cc71ea7bb6","first_seen":"2026-09-17T03:16:53.434621Z","last_seen":"2026-09-17T03:20:30.293809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":39,"dns":0,"connect":5,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"eu-rain-bet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}