{"report_id":"341112b6-766f-4a54-b2c4-c91fab936981","version":0,"status":"done","tags":[],"date":"2026-07-22T11:21:20Z","url":{"schema":"http","addr":"rainbet.link","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet.link/","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"title":"Rainbet Deutschland - Offizielle Seite","dom":{"size":54088,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9139)","md5":"5fe33af470dcaa48923160c9908fae7b","sha1":"55d89137406114acc23ca399afab42d1c9df9208","sha256":"99c4ea3da4aea407cf401a1833943a84aebac5297ed162925513592bf42ff734","sha512":"2bc4cc48393eb68e8b2ccc196f0992c7246efde5b0fc86ee9133d99c76f18eb73bbc6a96a23ba7f876fea198eff8f156731eef4088d2dde8183c43d168e01ae8","ssdeep":"768:vCKT64opP0Zdyp6CZwawOfaTCuQDgWRUqYmPpQ:vC3bpPUypbwawwaAjUQPpQ","tlshash":"71330872d2e9147a32ab836c8159b208f598a107cf4a5760f1fed4d88f95ef608f760d","dom_hash":"domhasha89f6aa32cec7bf5de335cafa7627d61","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet.link","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T11:21:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet.link","ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-19","domain_rank":0,"first_seen":"2026-07-22T10:50:33.109889Z","last_seen":"2026-07-22T10:50:33.109889Z","alert_count":48,"request_count":16,"received_data":280455,"sent_data":8500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet.link/rocket-browser-checker-js-after","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3855fbd52a84d461b717b8169ddc8c27","sha1":"21528d0c7e03b582eec68b9494bed38217d044de","sha256":"81bdbf00db420397f4a414248ef8494274489d4c588d4d0c6e4b81fb68632e39","sha512":"9261d7704af477a5d69844715d894f1e42bb29edde549780c241feb9b2f312fc1c0eb8986405803aa097ff109d00b81973b71401ac500909c6836d263f557f35","ssdeep":"","tlshash":"d15195a8f83570a8a9f39036543b630371692661e1898090c2b1dad56cba7c2d3d7e09","size":2630,"data":"","first_seen":"2026-01-03T15:36:51.016651Z","last_seen":"2026-07-22T11:21:21.630286Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/rocket-delay-js-js-after","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ee38598f86f6036faa290699efdbaf3","sha1":"9b4980552315b0f05fd9f633db733496dd3c3984","sha256":"7c4f721a5e6611bcf72af077e3835859f5454f2138927ca01d1578d975fbb8c2","sha512":"58e48c62cf53056816383066ddddc9493534fc2fc4489ae343a1d90c53aab1efd4b8aed4c038ad5ad58ca85899a9bde9213c20e8e81c4208a31c32059c496cae","ssdeep":"","tlshash":"5941fe68f795763519d7e37b562f620931b630d9c8c2806cb836ecc24ee9d896253c2c","size":2077,"data":"","first_seen":"2026-07-22T10:50:35.805624Z","last_seen":"2026-07-22T11:21:21.630949Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/rocket-preload-links-js-extra","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"015393cce5fab1db155ad82d4c88ba17","sha1":"5a3d06feab158fe3088a3918ce8d3e609618294e","sha256":"7a2f25ab79e93fe306b4ec7b738092132c7e492301f921dbfb8e6a94f03e5f08","sha512":"ddcede2234c2edbe5bae7168133ad89c7fbba2b2d36c8d5143313a930ff1d56c54fc3d434dc1a4a1baa1828506df75549030f8a4d0ef8bb92e58d7d555d2ea1e","ssdeep":"","tlshash":"c61155fbf28a1c4280361efc1f90963bab8c8c01d83ac926c185d040406afd2d0ef816","size":875,"data":"","first_seen":"2026-07-22T10:50:35.802795Z","last_seen":"2026-07-22T11:21:21.631492Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/rocket-preload-links-js-after","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fea34b76700d68823aed28bb3039b32","sha1":"f1ed7d7127da4279b5a43e6dcd44bd65c1676534","sha256":"8e8bd3f309d73d1aa33faf429051b1e1d31d9ade5ac96665101fb20f2cdc1ab8","sha512":"7f9d19b063122717de15237bd58f38ec59da5b8b8fbd482995f62854da360719d1f6e4ad09f662da3f37caeff9898af0a4eade326f7ace7b7862e9afce631f22","ssdeep":"","tlshash":"ea8187b5f14e743a09638735402f720aa27b0918e4d9c028b436ece05f74f5c609be2e","size":3898,"data":"","first_seen":"2026-01-03T15:36:50.969438Z","last_seen":"2026-07-22T11:21:21.632312Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/themes/conquestador/assets/js/main.js?ver=1.0.0","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c41439e63a640abf99266c2d641017ef","sha1":"1ba8b8fc85aad3dd1542758ff79b0ba98e086d0f","sha256":"56d822d3ae7d41aae5d7279dd43090680e909d6866c7875711d11d0fa0e94383","sha512":"3f7149389011086044ec5dba7709d5c9b835fe23da469f40721725cdf96e8233eff91569d9d33e523b895134ae8cc1c3c667f7db99ead47e552b531da4e19411","ssdeep":"","tlshash":"f441df59c229067b41bb67a34af34688fb0500db71c1565a7f2d8f461fb50e202e2eee","size":2388,"data":"","first_seen":"2026-07-22T10:50:35.799264Z","last_seen":"2026-07-22T11:21:21.629718Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/cropped-favicon-192x192.jpg","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.550Z","timestamp":1784719254550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-favicon-192x192.jpg HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 21 Dec 2025 13:18:44 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/jpeg\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cv5G2u%2B%2FWkSVQm2eCyg0mefH0YhJQHtLRu71o5UQcyt28vN60uvlWeQHXAX8nMbSdm2Wpn7p0p%2BIbYBfCl3%2F48FzlzCSKMPKHfiQ6V7JeYKfBzKzHKnibfrQq1tpKho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0ced7c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4859\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4859,"size_decoded":5610,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"5b42cfe326b7c80222686777d1383703","sha1":"30885db70558de1d4a82720890e0a4262828393c","sha256":"8863e4312a6e7dfec925ee94db7a04b50d259db3d93bdc17979afb8379f0a49c","sha512":"49c5032f7a63aec754e866ac199af2a981f7eb4e6c32ef666ece197f7ef8e3bf5645943e62b3b1a07a324c9bd1532ad27d8eedf94912ec1dc095c5fa95dd7c49","ssdeep":"96:MmFh+3/qK8aLO55x9+HZRQekRpqDBfRAjDDtwwxctq7V3nUP0gT8:M6h+3/e5b9+5KewpqDBfRAjdyQ79Tgw","tlshash":"61a19e6eb62420c3f4901f7e48f8461875684af593794a06b07dccefa67c8c32e74859","first_seen":"2026-07-22T10:50:35.78815Z","last_seen":"2026-07-22T11:21:21.619879Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T11:20:53.567Z","timestamp":1784719253567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=0\r\nexpires: Wed, 22 Jul 2026 11:20:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQ6XXkTub9Q3vbZHo2bEnHe9u7vLBH0A42oE2MtwcMiiRurNqrqWQcIDvQ2cqd79eA%2B3ZhSOualZfv9KuYfTC80qh4HnYb91wRF2KTZ3NmohULDD6DtGM5AvWwsrzH0%3D\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1f20f072d10569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":55207,"size_decoded":13535,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139), with CRLF, LF line terminators","md5":"77d4f93b974514c4348a5da0c83b4420","sha1":"761fb6f3605c302cc7c056788a883eb7c37b11de","sha256":"7135d8735f4bbde8c1b76d0b83b124defbddf19efb1c23ff76c01acc96b105ce","sha512":"df59ffd2c831c311603e6def39b2e99c28429cd4839774993e885df026e6c60bd59c57e521164b7c23961b4eab641752f238ab1ad98a26c4ea521b40b95ef991","ssdeep":"768:5CTO4opP0Zdyp68Gcxa5aZyTCuQDgWRUqYmPpT:55bpPUypicxa5ayAjUQPpT","tlshash":"27430872e2c9247a32bb836c8159b208f5959107cf065760f1fee5c98fa5eb608f760d","first_seen":"2026-07-22T10:50:35.784198Z","last_seen":"2026-07-22T11:21:21.62093Z","times_seen":8,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":37,"connect":16,"send":0,"wait":647,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/themes/conquestador/style.css","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.487Z","timestamp":1784719254487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/themes/conquestador/style.css HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 21 Dec 2025 08:36:10 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 22 Jul 2027 10:50:06 GMT\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01bxe2zE1sJ9VUEwi2jG%2B7IyY7yF7zdkBXScrwmOXXXly4aVNOWrfyNzELgCxzIKWHugu3wY1bw4lJmRGEHUPXCDIaElofRiZE3Cp7LpAR5qLoEGRyolUM13JF5F2XE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0c8d71569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8445\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59022,"size_decoded":9227,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"216ca65b7cfd333d35e4f31a8e8f5ca8","sha1":"65a78dc6f032da88c050b20c6bc8b7f7f85056b0","sha256":"e18daf63bf972c85ad37fc669f9412e868afb82b68f72f991ffc1599256e3b8a","sha512":"e448117ff28465626a1bd4eec70c711395e6a1a734cc0ac8936be59afab1d672a20273de278e13deabc31248b7beb717de027f6e7a93c5c0adc1c814b139ae83","ssdeep":"1536:1lMuXuvCRqRLtBtrmBjq4TBfZo/FsDESg:tXBjq4dfZo/Fs1g","tlshash":"3f43e2a606531504a417c8085fee5b1522fcd023954fe9fe7ecb5588cfcba98d0e2b9e","first_seen":"2026-07-22T10:50:35.794903Z","last_seen":"2026-07-22T11:21:21.621774Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/logo.svg","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.497Z","timestamp":1784719254497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/logo.svg HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 21 Dec 2025 13:06:52 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 21 Aug 2026 10:50:06 GMT\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncontent-type: image/svg+xml\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1pgwRAFR%2Bp5KJiFiimEeuZDjQTpkGfGZqfLIjzhpNTUk%2B3gEtGUfaoepds3IH7Xq3BQMu0FhJeePVDSODc%2FNVKLiVTMwj3KNp1Jqfd%2F%2FmndDAZ6Bf3SKZDmCSId9TuM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0c9d74569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3311\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9926,"size_decoded":4087,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08ad5cf07ac11e1669482abb7c15e3a1","sha1":"263371f1bed58b1c2b99b5694f96d0aafa10ef0c","sha256":"bb0aef3b17332bc1fac3df5dfacd0f7ef1b4af4bec85491b8afbf54ac4a9c626","sha512":"617bf7bddaa99bc0d7c4d2f6c9fe88901e9f8dbd6eb0b669022c0d69dd83f43766dabf2fa888485ce1d3afc103b6788178f80a93f8f8e723b8b11c7becb96994","ssdeep":"192:zfCCqqpCsEtKB6H5PlVAoQjciQgSOvfCg3XdVvVsVluOCYr62i:VJo9HDra+y7VvVsVi33","tlshash":"c52275ad734962e0e22eb3f6e5f650117d1739ea3f42846bd78a3cd0d82315c5ad98c2","first_seen":"2026-07-22T10:50:35.789493Z","last_seen":"2026-07-22T11:21:21.622706Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/cropped-favicon-32x32.jpg","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.552Z","timestamp":1784719254552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cropped-favicon-32x32.jpg HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 21 Dec 2025 13:18:44 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/jpeg\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcRNBET2T3GwD%2F%2FJoftjf0ZHapok%2Bo96zuCnfkvqBqXudCTyC1dQVuWRS6Ei4UrMGyfuZwzC5c9Cpu2Obv5YdRuW5qhfLtbOpXZYgjTDWPsRRthJP1m2F8Hg8Byng2g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0ced7d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 731\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":731,"size_decoded":1479,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"851550eb016bcc0945667f9b3a63d4be","sha1":"8c0c0755dc6390738545964d76ce8cd98973354d","sha256":"4ce52102af9f11b077742cb5eb64e93bf92fed9386b0eab0f954bf0aa5df5a52","sha512":"f0d12acca87759ef7fa8d5ddefd425bdb82a13e9010c2d19135134ed157e8efec2f47e638e3933bde96ca5af73fa1f8e365bcec95552982fa8ebe25c03db8580","ssdeep":"","tlshash":"e901235f27418f92eb518c7a556a530f9b42be16e4438b596130f215bfa36c5093154c","first_seen":"2026-07-22T10:50:35.793892Z","last_seen":"2026-07-22T11:21:21.623355Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/the-luxe-hv-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.563Z","timestamp":1784719254563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/the-luxe-hv-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:45:56 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYABwWPiiB3X%2F9vfu%2FAbrjrRNtZjj7%2BcT43XMiqqynGBx%2BeE4QIqUsk0iVc9phH9f1%2FiIB3YPMZJoXFhJKDaGVYPITN6w7nkXl9FlTys2M%2FdcFaVyYe9xHaWi%2B19cBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d0d80569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16066\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16066,"size_decoded":16813,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"828f321e4b72dfc88b8ec6db8ca5ff63","sha1":"15d15ad68ce2c299111f7960844be893fffd4814","sha256":"d278da090fea627a3f52af25f6bacb608c2e8ba2e6dd13c7ac85c7bef34535f8","sha512":"195871f2babd88b36f469cb144f31fdaf4d06535aa5281d2ca1ab05b6d6827e2b33642421bb4fd2504d4665de92cab7ccecb92a8724537eda65f598d941c0375","ssdeep":"384:tS1mxSS36jaCchB2PtG28yVIUWSXEf1oxXGqZaXq49E8K:t4iSSFpB2PtG2lpW7oxXGqZaXq4G8K","tlshash":"c672d01e80f9cc64033245ae6a50e220ec849bee795922bef7586c71db1dd44f39094f","first_seen":"2026-07-22T10:50:35.785762Z","last_seen":"2026-07-22T11:21:21.623926Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/outsourced-payday-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.582Z","timestamp":1784719254582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/outsourced-payday-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:45:54 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ytjftrvzxa1TZQZ0hrS7i9t6qc%2FzIS8LSqeCYz5kodHoyM%2FVttAATpkYSY7LTsdJIdsrV7bvl4OyT%2BdELybn8BEBYgwgEVpoSlI3KEJux9hjAFXrL8F8sAhBlDoLI28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d1d8a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13884,"size_decoded":14623,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6b8cf35d372eadc8c17a1b315296c32","sha1":"1135b6a9436f9e358028a18ae09652e2bcd5e14e","sha256":"f6038278e8092b3a052604f83ff64ee7a729fe06dccd3e22517345d864c694fa","sha512":"5c5a628092a93f3d460c8abb2607980dd7a326386a66c7b2afb601ac1d2fe56f46682c9f6c377e805433290f834650d57d8ff57ccd0c1294e1448cfaca50efdb","ssdeep":"384:a6jLuKgxRIC4hghxZoFOrmW1k4WsrI7L+rjF:1yKO94hgTYOaKk","tlshash":"bb52c0f29161a2d2880f53b970e792df58e01c5006390d3f2a545f32b73aa74a66b368","first_seen":"2026-07-22T10:50:35.787016Z","last_seen":"2026-07-22T11:21:21.624476Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/cloud-princess-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.599Z","timestamp":1784719254599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cloud-princess-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:48:01 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqGkZef5ePQdHEMsX139xKEYzV1SqLyEKf%2FQM1PByj5IGYQLMj16ivRORwPF%2Ft9Biz%2F2RUvBI3VERhSdXP5TK9V0uy7Hy5g79gGdK%2BsKwU4KrqT01DpNYbkIIOEd58I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d3d8f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14190,"size_decoded":14931,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5dfb7c44da4e8d3988875c5b946198ff","sha1":"40ae31db946edcb4f1b41dea4e1b3d5e15422367","sha256":"c65d0ba8f8baa2cbe9eb2d2587c84087451eabc6e39ece290b90a6a6a17829ac","sha512":"cb3fd45deb1219592aea840952a410f4f834fe779a9c146026c9a555e2cc613571f6c09a5733152ba9c3876ac904737a9fa1ceaa26fe105cfe680668f03b3be8","ssdeep":"384:/oLJLGZOmQy7HPPwoA+TG5iz6feEEiIqr2McZOrX+i:/ORZ+7HwoA+yAzNEExO4i","tlshash":"b552d08ddfc7a9d2fae0e8d478f80449d6195e14f0520a8c6411d1f6d924b83db417fd","first_seen":"2026-07-22T10:50:35.798273Z","last_seen":"2026-07-22T11:21:21.625105Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/stack-em-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.568Z","timestamp":1784719254568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/stack-em-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:45:55 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftkE37S2RP%2FF7JZZxW8wcn8g8u%2FFrs249TTF6f4UEpwBEpfYCTgYey9IfTS9VqMz6QqAuUU8CzebFbEeTSbKyvzNKSa3VA03YoOb4mZRK2p7pZnvaLnM4hHnNyOWAE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d0d82569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9870,"size_decoded":10606,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"954df54a39b3ca1d91074de93ca7a90a","sha1":"2ab024fee3a2c2363d8af090d856bdc1b32f41aa","sha256":"f198dcf34e7e0864dab827579cfc3e3be6b30f03015aecc54e3f0a8ebb9c8685","sha512":"57e6af773ef3b121888cb7ad98ce906f8f5994f2f459d9fef3a54c3276aae1ef80f8f707615806e385da2c5a979d25161d62d9329e7034617dfa736653aae60e","ssdeep":"192:P5l7NZoyP31ExYxbHwShOsOU/dAy5JOyi3M9R8/1IwVCeL4B9CmCWaJ3fEc:PfT9PYe0sflAZyJ8NIwV/L4BP8Jv","tlshash":"0a12c00739113243717385a0c689a6c8c949e8becf24dd92ee776529d208bd390ab7f6","first_seen":"2026-07-22T10:50:35.790667Z","last_seen":"2026-07-22T11:21:21.625651Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/shadow-treasure-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.578Z","timestamp":1784719254578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/shadow-treasure-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:45:55 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9OH9Hx0Ax%2BBJEFWwQG%2BjOd1zuKnZxTuqGYtptq6ABf5G4KJqBMtcPLHk6diesKtYL3ifAB1e6prmweWdsjrfkp8YuioKzIsZ9yJVy6tCWfScRcSl7t%2FO557PnRwXyJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d1d89569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9802,"size_decoded":10540,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e6841803ff260d08357daaf40162509","sha1":"2f319fd8c791d267db10d322070ac96f55ba533c","sha256":"aa1942baefbee0fff50a7bf0a5c4309e05db5031cd6699a194c75207b8f61e4a","sha512":"590bec7e1f92fa02716f046cbb8266d88d5422c69b16b257d0edb993b4c43e099c6d801d7b2bc2b65b50fc1e4d37981c31f950f218e40b998197f899c3519e05","ssdeep":"192:htu2ox8EGEeO8gW10cJPeilrSO2h6+lo4DZx7lDGDD2dRB0qnArJr7R2USCBPgAL:h48EtepgWFFUd4co4fSGRBbAf2CXL","tlshash":"7112bfd920d63839d7da3c40c7bb73544ea80ff4d322f5d8866b3701291eea9018d6ac","first_seen":"2026-07-22T10:50:35.79627Z","last_seen":"2026-07-22T11:21:21.626231Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/junkyard-kings-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.585Z","timestamp":1784719254585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/junkyard-kings-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:45:54 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9uMcrCz%2BBG8JzOaxJ0JLcO13aHTyu78ZtGGjV0xtpJkD%2FKO9nK1m6AdGZlB%2FSUnDJsm1WQUz3fV5tK9JVLGbTMg4Ul%2Bmg8JRgXwFpL237CwI4zfJX4CvtJMyMnuFAM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d2d8b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11226,"size_decoded":11967,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7afabeea8fa009408132bbe09207f5b0","sha1":"d585bc41badd3f027739d79c04f7358a117a9ac1","sha256":"05c680a2ea9e670fa4e168cddcbf42abb8ce0d16855fd4767418b6054752cb84","sha512":"7ead22292d1dc4e2784e6ac1729830ed2086054b7ea033c523879773869d3dc628e2fb29e7b455b463533eacb030e93b833d29191c0d647829b9a6fc7b9145af","ssdeep":"192:dRABrdtK0lRzH3FwSXM08Z+U0/w2qdU6kfMgqH7FWgztoX9Uofi9I1Ya:dKBrdtfNFQ0jU0/w2Lmx6iofie17","tlshash":"8232cf474a186984ccf8bdfd1c8be347b5944a26413fb2078ae5f4dd9216372c2e8378","first_seen":"2026-07-22T10:50:35.797355Z","last_seen":"2026-07-22T11:21:21.626827Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/fire-portals-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.601Z","timestamp":1784719254601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/fire-portals-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:48:02 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rl1tFDmCPKRCNcak530H4zOeghaiGCeZUhpz%2FM6%2Fkxem5PdyMvRTXZF5aT6RQWhYATRDuLe22RRXQJ5YTySLt%2F6WsEJSW2sYGPfKRqEnwSLltw%2Bq6anTkQ4e%2FfP9VAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d3d90569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14120,"size_decoded":14863,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a47af58a396b2939f47340b4aef8f3","sha1":"40c77bac5fbdf6df15bd308af31114b7631a8f09","sha256":"e5be2a9354a1d4574496f144de8fedb13cdf4142ac1873b1164993856209fdfa","sha512":"301fbecaea44238a66650fdaccae89df460d15f7742381581e073874479a69b58acbccfca6311e92cc295ae568ada20e27ef237172cde659730351162eac6c1b","ssdeep":"384:0PLIJbd14N++JBDL0WcofCK5SQ72zmmVl1MJzdgYiZR9Q:0P0Vn4Y0sroKK97AmmHqJzJB","tlshash":"0752c01dd29940db747902c2edcf0f5221851272ecddcc2babfec08fea6990a5ad18d0","first_seen":"2026-07-22T10:50:35.792908Z","last_seen":"2026-07-22T11:21:21.627335Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/ultimate-slot-of-america-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.586Z","timestamp":1784719254586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ultimate-slot-of-america-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:48:02 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5SVC%2FPPExfNUmbOr39iHifmvU44CwW8WsEL4O1z9hZgR9KIrrPCOLcrx3cCLsxeTSEvA49mpQyKvCe8nTpG0gcRj2YXBNSSscjruYhPYfspl68mh66joDw2El8pDSY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d2d8c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18262,"size_decoded":18997,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d2f0ac1f5f8f4ec65140f78ba1c972c9","sha1":"a5dc2bbdac3bc4d7482af63dbf6e30a591a70684","sha256":"2c85011641c2a30eb049da53f69310ade6074f7698fbbe03777b50c401f36df3","sha512":"584eb79e9f81efb33ff514e38c8c6f680a9da5fd67eb167506eb5e018396575d42f8d4469a76788ec22fa0d860c8a0fef09ea91d03f5d608603321c7c8b542b8","ssdeep":"384:cSZsCEjRTQRkyxp6l7iukln6VF82JQhjD4I/FEw32bVj3vbSGhzApME84bi:cQrEjmkOglCVuF82ajD4wGwQOMAp5zi","tlshash":"d082e07b052f0c0a8040fefeea735c12ad422946e174af941dc564882a7f5e7a0b26f9","first_seen":"2026-07-22T10:50:35.800215Z","last_seen":"2026-07-22T11:21:21.627902Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/outsourced-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.596Z","timestamp":1784719254596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/outsourced-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:48:02 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YBaiOglnWfn%2FjildiBg0oVyX0ElbQSA8a4R%2B132AruF%2F92OsIEZB95yswBQYpfLGmlo317I8h2lvIrvvS4J7OQqqc83SOikarwSszoDz31U2eEBJFHm%2BtxfKODGmoU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d3d8d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14438,"size_decoded":15179,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7d7cdae90216e9f07719ecdb36c30b4","sha1":"964877ace33ab2efc4001ec1c79280a16245af52","sha256":"4467ed22d4e2ed17847f5c4d864e4417beedb888ee8fb0720bae961adb9002d6","sha512":"ecc87701103509de981ae6743e8dbb356adfa544ac715abc48df11d03f3f69e5c54502b1a3171d844daa0bd48e1a587c73d196e4a26eaf1ed87276056847d167","ssdeep":"384:FZb0CwD4pJ7wecyh2eXiuMQtKFgLSnN3WB3S:lwDuJ7fvTSctzWnNG5S","tlshash":"8052c013b2756cd3c184f8533c17a02d2289b9719bab791efba22644952f679e05cca2","first_seen":"2026-07-22T10:50:35.801747Z","last_seen":"2026-07-22T11:21:21.628469Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/uploads/2025/12/fire-in-the-hole-3-rainbet.webp","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.597Z","timestamp":1784719254597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/fire-in-the-hole-3-rainbet.webp HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 30 Dec 2025 20:48:01 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Thu, 19 Nov 2026 10:50:06 GMT\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rkDCKy0K9M62vtb0XI7zhfVTiAfnpY8aGEjNMLCphI0MuCO2L3%2Fd64s6fIUEGzNf9kjA6X1ACd3LeGn1mX9MQE4c8vPe%2BGFcumYufXz2d8EExMea4eRKCOegRm%2BvwI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0d3d8e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14544,"size_decoded":15283,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3dadc50adcf7738faeaf4bd4f895b781","sha1":"3f14d78e45c23503690ef7eb9f3556d847ccbdcc","sha256":"55e65b195dabb3cb9d9834ff4224764e02bd36978e0193983f86d4a380c7dc7c","sha512":"9bf6c2969a9b767a579830a7495dc587f22f9255c0e3c6a318bd6bd6aeb12b4666b1fd62437929b0da90818c4190e0b57db130494959e0498b3ef0dba041c46b","ssdeep":"384:KIG5yXhlaVr+Pc034PREIn1Jdhqho2Vq880++g:dXh4t+PZ3yRthhqe2Vv8/H","tlshash":"b262c0ab09b1a24cbe3d7e06a275ff32f43c429864ab417d0d0f89589ed09b8517f649","first_seen":"2026-07-22T10:50:35.791974Z","last_seen":"2026-07-22T11:21:21.629055Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.link/wp-content/themes/conquestador/assets/js/main.js?ver=1.0.0","fqdn":"rainbet.link","domain":"rainbet.link","tld":"link"},"ip":{"addr":"172.67.187.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.link/","date":"2026-07-22T11:20:54.490Z","timestamp":1784719254490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.link","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 12:34:07 GMT","end":"Sun, 13 Sep 2026 13:31:32 GMT"},"fingerprint":{"sha1":"E6:DE:5D:EC:1F:6D:C0:31:B7:32:E5:1A:AD:8E:F0:57:08:9B:53:31","sha256":"14:C2:3A:09:F5:94:0E:57:C4:65:5B:73:63:70:F3:8F:DC:75:AA:F0:23:0D:51:64:AD:12:73:DD:83:DA:28:3B"}}},"request":{"raw":"GET /wp-content/themes/conquestador/assets/js/main.js?ver=1.0.0 HTTP/1.1\r\nHost: rainbet.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:20:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 21 Dec 2025 08:36:15 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 21 Aug 2026 10:50:06 GMT\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\nage: 1847\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvFYMGset%2Fh0MwIVDQMm24iekjl7pIqkLlbS%2BNsdWn6Eg7A30tHk%2BL7xzwMoJdVSt%2B%2B7EBUoAfgl4p0VA0AAuBw2rhpzD8hPSxK0TqihE6t0LUz3HTIjO0SuNALmJBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f20f0c8d72569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 725\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2388,"size_decoded":1520,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c41439e63a640abf99266c2d641017ef","sha1":"1ba8b8fc85aad3dd1542758ff79b0ba98e086d0f","sha256":"56d822d3ae7d41aae5d7279dd43090680e909d6866c7875711d11d0fa0e94383","sha512":"3f7149389011086044ec5dba7709d5c9b835fe23da469f40721725cdf96e8233eff91569d9d33e523b895134ae8cc1c3c667f7db99ead47e552b531da4e19411","ssdeep":"","tlshash":"f441df59c229067b41bb67a34af34688fb0500db71c1565a7f2d8f461fb50e202e2eee","first_seen":"2026-07-22T10:50:35.799264Z","last_seen":"2026-07-22T11:21:21.629718Z","times_seen":8,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbet.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}