{"report_id":"466328da-9f6e-408a-a3cb-a200c89aa802","version":0,"status":"done","tags":[],"date":"2026-07-15T07:57:05Z","url":{"schema":"http","addr":"mail.rainbetau.net","fqdn":"mail.rainbetau.net","domain":"rainbetau.net","tld":"net"},"ip":{"addr":"172.67.204.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet.co.com/","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"title":"Rainbet Casino - Let It Rain Wins in Australia","dom":{"size":77109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"78a93f5d8c10e5ff6fb47b5185f16192","sha1":"6004e35320968b2c6e07ddeb3285045b1913d38b","sha256":"46cb947dfd712242153e1cc73af5d579c9a39d1f1dd6ca28d96c98be9c50087e","sha512":"86b3b69ddb32b08e6ade53fa6f0ebb8a89522521c0089d014e476d29bec6594ee29ad4ec9fb42ebc3f3b62de69430e3976aaf21e08da3a24b05b471b54bde33c","ssdeep":"1536:8nypbVvEWh9n0fgTE3JnkvobkvoNkvoTkvo6kvoZ3J0wz49afnjgHi:8y9VvHjKQSnafnjgC","tlshash":"db733b32e0e92057a2abc3d9a440bb05b95cb027ce0546a4b2fc66a85fd5dfb45b770c","dom_hash":"domhash728b0d5f9e0de84bd18b97d20a9ebf73","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.rainbetau.net","fqdn":"mail.rainbetau.net","domain":"rainbetau.net","tld":"net"},"ip":{"addr":"172.67.204.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T07:57:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet.co.com","ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-15T07:57:06.081861Z","last_seen":"2026-07-15T07:57:06.081861Z","alert_count":75,"request_count":25,"received_data":683177,"sent_data":12903,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"mail.rainbetau.net","ip":{"addr":"104.21.77.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-17","domain_rank":0,"first_seen":"2026-07-15T07:57:06.092172Z","last_seen":"2026-07-15T07:57:06.092172Z","alert_count":0,"request_count":1,"received_data":582,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet.co.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-18T22:41:19.296787Z","times_seen":977838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-18T22:40:30.455985Z","times_seen":897305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T22:41:53.799861Z","times_seen":400170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/themes/casinonova/js/navigation.js?ver=1.0.0","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cde90140ff101f6c85bd096f89eeae8","sha1":"d890636e08071ac5d532721e26cb683eabe2ff89","sha256":"8ee0654259fda0bbfeab4305b895e740659613080d90352bd36c1452fd426ef6","sha512":"52fdbb75df92195f4a223876ea95ba78af126864a152be62595b335d809cacc431186467178248ccf1740c1f9d3e37699b18c1394fe7a7e2bf6b9010f1d427c3","ssdeep":"","tlshash":"425123e7abcd337706f930e3a79961ea33384076a9446576ac5ac919240086413fffdd","size":2980,"data":"","first_seen":"2023-03-07T12:08:49Z","last_seen":"2026-07-18T22:03:22.558144Z","times_seen":3823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/themes/casinonova/assets/js/common.js","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd19e3af63dc257048243baed3a569f","sha1":"7d96336aeee0ede2c413b45391bb3b30f6485252","sha256":"7b4ffec9ceae987f472f26d287c1c6260a29a598844295404705e55588d15735","sha512":"c6b331e70f294d78112675057fa4b88cb963705ff76a0fa8fa24a2773da73a571ad1b367af1996cbd3c5cb95b9e79d6e244c0c5e9fdcd64d19f59e15be420760","ssdeep":"3072:vHNwcv9VBQpLl88SMBQ47GKDrKPJfpIL41i:vHWK9VC78UBQ47GKfKBxIL41i","tlshash":"2fc308df7295703246bb20ba006f510af236159aa80d4540f17de8d8bfbc95a427bf6e","size":126140,"data":"","first_seen":"2026-01-23T17:53:59.534802Z","last_seen":"2026-07-15T08:00:27.499729Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea08e41b69d35e85cd0fe1df4d1beee9","sha1":"12345ff3d346dda3a57a2b6f6267bc0ed596f404","sha256":"cf28f3da031c95f68225c84cfdb5cce4e9af9b26d1b8d207f291d6a158a74450","sha512":"3b81bf3819fe7634b70b63c71cd712f2bcc39fc5ff813a342cea005d961559ae6992643c0e2d6eb1877bdf5b4462816c8eca456eaed2391d3386c14ccc043c70","ssdeep":"","tlshash":"c0e0203409cc29575fc05acdfc188526b5ed9669d525089ac4d246d84549fe1024ee1f","size":340,"data":"","first_seen":"2026-07-15T07:57:10.015515Z","last_seen":"2026-07-15T08:00:27.525466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52df6a9f11e60d593a3789b962fb53a6","sha1":"161260b00dc320d75cce80addfdd366f4dc0561a","sha256":"91811f887eab3bfac4dcf84cf70d1edb5824e3ae2fd74459e276c780303ba77f","sha512":"f5edd994b8a9e5f2128dc7b86eb691067f9895e77b2736384553aa58de1728703556f7f1d2904b52b2a8dafc1d91ac19f576bb897ea6037951be0a57d2410f54","ssdeep":"","tlshash":"32d0970e6a5b419423eb0a40fa0f733b2593298810ceca02c0fcc78c746630feaba10c","size":269,"data":"","first_seen":"2025-07-26T14:33:26.168599Z","last_seen":"2026-07-16T14:24:32.247637Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/ta_main_js-js-extra","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d78ac0cd8afd5cd84a420f708e023612","sha1":"0043b6e8230de6f388f1e6472bad7bffdf27d7e6","sha256":"0c8d77d961dc84cc7092101f5549118034181ae8c37fe077161c7dc85185c3aa","sha512":"41a86b7a3e5dcf115febfd0bea220501d86d18a9f35fd14b83fd25cf0aedb0ccc2d991eff869b6343444222a86209ec89cb1b55350f03810f4ce44c7d4eafab9","ssdeep":"","tlshash":"1d01c034c8cc29175fc09afcfc088526b1ec9228d025089ac4c242d84589fe1020ee0f","size":773,"data":"","first_seen":"2026-07-15T07:57:10.017754Z","last_seen":"2026-07-15T08:00:27.524392Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/plugins/thirstyaffiliates/js/app/ta.min.js?ver=3.12.0","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"957517127db62533618d8f8f8afd4706","sha1":"5a6112bd184191484482010362b0b81047142d8b","sha256":"3c0071fa6df97def7b87a712f08f27accff60d870edc403a06778144baa23e9c","sha512":"7a0aaeecd944794065943612a992c3e3cbad8d6ef41cdbe71bac8217732753cff3c368bd9f631b53534f4babf738adc372d17530f935de3ff47013c37a6f7cdb","ssdeep":"","tlshash":"7c71968975987c9d2c7b33886b4f620cd33361ab801c5a04d96f58ae5b31f4972a3f4e","size":3536,"data":"","first_seen":"2026-01-22T12:29:03.677577Z","last_seen":"2026-07-18T17:01:19.278541Z","times_seen":552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2df0b740141255b7fb84811900be36e0","sha1":"b7f0dd813663f73a368d3396cfbc62031f6945c3","sha256":"0de040d12ed2edcb260a5e4ba2a02dfcb6f45c6b7ad13bfcfd12d932c8c63298","sha512":"e66e0711bc1968e8d15a19b02a5db3c17d7b33c7449de9bc4c8d50ea24884f5dd588cfc60e26a45e95603a602f67bb1f84b1f4fbbfd4c7c9b58e98a1b646e210","ssdeep":"","tlshash":"5761869ae77638dbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb58a3c274a46","size":3408,"data":"","first_seen":"2026-07-15T07:57:10.01882Z","last_seen":"2026-07-15T08:00:27.527187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-includes/js/wp-emoji-release.min.js?ver=59bb6794ebf7ee28aae66e8d29991464","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-18T22:42:26.724938Z","times_seen":9830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://rainbet.co.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/themes/casinonova/js/navigation.js?ver=1.0.0","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.530Z","timestamp":1784102198530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/themes/casinonova/js/navigation.js?ver=1.0.0 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 10 Feb 2025 13:14:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Em8pna07RGKH4rgUVJuU6faj3hu8Nh%2Fihjks5FxeDhLi5DZq1GXfYOB9v6jzFwXYpvWCdPi0VsFx36dVz5bZgKPm%2FJhjD3NtlAOvquHofQcGwRYmbv4d5GUPMU1ZACsuAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634d87e712a-OSL\r\ncontent-length: 923\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2980,"size_decoded":1729,"mime_type":"application/javascript","magic":"ASCII text","md5":"3cde90140ff101f6c85bd096f89eeae8","sha1":"d890636e08071ac5d532721e26cb683eabe2ff89","sha256":"8ee0654259fda0bbfeab4305b895e740659613080d90352bd36c1452fd426ef6","sha512":"52fdbb75df92195f4a223876ea95ba78af126864a152be62595b335d809cacc431186467178248ccf1740c1f9d3e37699b18c1394fe7a7e2bf6b9010f1d427c3","ssdeep":"","tlshash":"425123e7abcd337706f930e3a79961ea33384076a9446576ac5ac919240086413fffdd","first_seen":"2023-03-07T12:08:49Z","last_seen":"2026-07-18T22:03:22.558144Z","times_seen":3823,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/bonus.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.698Z","timestamp":1784102198698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/bonus.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 16:56:50 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnclpTHCHeTZ3G36jdrTvGnsoRG8G0aA7f%2FJWEU8U5gqiuPIiJ4tbrNUpV1yW%2Fbp3tOJiXLZQnJtLdRVKGvF%2BT%2FMwX%2F6qC9jPG3U9stQZ8J2O0rglWIcgk89nJfFopso7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73635d891712a-OSL\r\ncontent-length: 19372\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19372,"size_decoded":20126,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1402x489, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c17049c137ccea05c1e3975ff0cfc771","sha1":"48cdc9e6080ae377f18459a64b33410ba020096d","sha256":"9165ac217d32c795bcf704dd4eaf3393d3af5d288af95827e125223f20cbff2c","sha512":"1364f431e8c38f3e4b4cae511efa20c66904bc0c5b4ae3d50343703aab7eac256b52287a628b84f6ffdfa9b48a26f17534fc97b743deb1709126593452541edb","ssdeep":"384:FcJMSnNCbSBscQ082FIgZaLjZv7qCDYP4h+WjcznRCgubhoK3a9+P/nHT:eVCmBscQvqwLNqpP4o3b0grK3a9W","tlshash":"e692e1bfd08464ca3ac01e141b617475078329a881eb8d8f9a59ef1e73d6fcc585ea09","first_seen":"2026-07-15T07:57:09.976471Z","last_seen":"2026-07-15T08:00:27.518121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/rainbow-princess.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.703Z","timestamp":1784102198703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbow-princess.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 17:41:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MfCzPESANB1cIh3FRJ8Ofl2mRq58Hkyv8PsAX8sTAMrvP3AIWWEN1OpMLfUlSXwz%2F5wcexaS%2Ff1xHCdgup21svJklA4kLlMZnFlqGDPmYPQwJXEaIaf55hg6%2BVZ4uLv2Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73635e894712a-OSL\r\ncontent-length: 22744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22744,"size_decoded":23494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8f7db39d5e82e7958a229b043ae32726","sha1":"9796db5f51f3d0abeb435a08896c18b2e6f4645f","sha256":"8c616d137252e7ee19257128ca48022372ba3a207ee7662f8cb403b22950748b","sha512":"b61bea7ee3929beabe1e80018425592d90c199448004c5e373baca57b9e20672b9da4ffda172d40a4a42ed8cd68aaec169a848bc42271e65244482416c416656","ssdeep":"384:BIueRdFfxCjPt/nchXTyB0E64+f4NHxEfKFLNXMPLX3VmSBuduc9mOQXpJNAgAel:BIueXZcVPATW0qY4NHxEfKFSTXFyjKdj","tlshash":"fca2d030cb6a48a05b11dfd1501fff5517d56b4c9b43862838d6997f2038ba289e1fde","first_seen":"2026-07-15T07:57:09.980406Z","last_seen":"2026-07-15T08:00:27.494396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/fist-of-destruction.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.706Z","timestamp":1784102198706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/fist-of-destruction.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 17:41:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hTWSbQzPJcH3R9NSgQrqDczmP3j7HzzMTO4mfis816W%2FEeTfne0XNNaYe9PL35u2VLBfZEJSrmo6C7XtnHoCUi%2BljAGxirxRw9Fwil1mOMk3MDF6H%2FBUwUhrb9IfQYcTIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73635e897712a-OSL\r\ncontent-length: 17996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17996,"size_decoded":18746,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f1aba18d8c05e2ef88d09cbe87fd4cda","sha1":"f76d0433b7bc1fa275c802e8e7dc1e9aa88436c4","sha256":"10446f6079dbf99eecf655f89a38382f99c0c2b3bbf9a3455461af7952b4fdb4","sha512":"a46a608f0be58e027147aedc75543ccb1bb133afa10d4a34543c53f52d420d3c7a12d63ba504cfc976481a76ea2af458242ef1016dff4181e4e60dd9387c5782","ssdeep":"384:MFlFrw88C1Bp01T6YgJnr1OYJ4xFJn/Gdtpx7FIfZaUMTyH:Mx18G0V8J1OY6n/Etpx36","tlshash":"9282e1d30a2f4949cf3447b03645e904b14a08d9f8442a24bfe43db6d1e95b2b6b2187","first_seen":"2026-07-15T07:57:09.983001Z","last_seen":"2026-07-15T08:00:27.504187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/cropped-favicon-192x192.png","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.780Z","timestamp":1784102198780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-favicon-192x192.png HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Thu, 15 Jul 2027 07:03:56 GMT\r\nlast-modified: Mon, 13 Oct 2025 16:20:48 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkK34FzGNPbbJVRftkqojikwnXYi0ERi8GxvoR1236o7J%2BlTV4r8rpwOhaQFCSASY3%2BKuRJndzhTj89%2BV%2FINplbghCc0Gt9wrwDfs3UT2uUggXxmAyeuBXkVZUVIzpl9eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73636689d712a-OSL\r\ncontent-length: 12300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12300,"size_decoded":13054,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"76ce49035732d32b1a0ab13b81a6a0b1","sha1":"117dc5e425c75b565c3690782f896f530d87694e","sha256":"0d9b284ac74a1de24bb015768abedc4a7efac066e861360e5391b6a487a6640f","sha512":"83cb7ae28025d5bac4a315276a51090ecf598a1e5502bb7a8b3bb8cc7516cae9d4e3d4e228e86a1fa95c278131e387169de81a71ba25adfefe248c607548f394","ssdeep":"384:knY2ffDuwJGj937g+vtID4/INLRP8fTL0Wb:kY07hJGj9fvtcGELRcZ","tlshash":"5c42bf8b8b339d49996e273d98cf1a71f6e72191911a32c5f546b38e71690f8c2153c2","first_seen":"2026-07-15T07:57:09.985314Z","last_seen":"2026-07-15T08:00:27.505692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/cropped-favicon-32x32.png","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.781Z","timestamp":1784102198781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-favicon-32x32.png HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Thu, 15 Jul 2027 01:04:25 GMT\r\nlast-modified: Mon, 13 Oct 2025 16:20:48 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qmpAieWJeGEJpJ0MKINLs4YYOiGrFIg389zx4I0ZM%2FT7bDzAFQ9KNRnXeAMklkMcgIXt93qr2lFR%2Fm2e%2Be7XHGqFr5FSens%2FJ5reuR0pxRAK40wFhLz6VhTnBLiTQXEgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73636689e712a-OSL\r\ncontent-length: 1020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1020,"size_decoded":1773,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"1fcd4d73e3b4cc2ab24090f4db4f406f","sha1":"32e47452af3707ddb06e7029175ede050170d5c0","sha256":"3c4b151a987e90aeef751b27d206f7fd1ede1f9c79b540aa7175a547f4c8e7a7","sha512":"3d6aaa32e26805915df2a77efdb3b7bdee7bcbd7d0806a6c5e8489734dab273b09f1e8698676f48d6e8f22347bdb4387d3dc6fe4d7c352422f024a45061220c2","ssdeep":"","tlshash":"201175c752238d41e2e6172a05893240f0f544969f3352edf578e25c3d042855ddcdd9","first_seen":"2026-07-15T07:57:09.988624Z","last_seen":"2026-07-15T08:00:27.51918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.rainbetau.net/","fqdn":"mail.rainbetau.net","domain":"rainbetau.net","tld":"net"},"ip":{"addr":"104.21.77.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T07:56:37.632Z","timestamp":1784102197632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetau.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 08:12:39 GMT","end":"Thu, 24 Sep 2026 08:12:38 GMT"},"fingerprint":{"sha1":"B4:8B:A7:CB:45:07:07:87:CD:C8:86:2A:73:C5:0B:DF:16:00:E3:FC","sha256":"8B:E7:08:12:43:88:62:50:C8:34:D5:9E:9A:27:6C:2A:D3:A9:04:61:90:0A:04:64:DE:B8:5D:17:94:B9:D5:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.rainbetau.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 15 Jul 2026 07:56:37 GMT\r\nlocation: https://rainbet.co.com/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F995IV1Rp5jU0uEq5PFqQzHkEcRBfCTWXhAfTd1DfwnvxZo3dXQJEOwSkC%2Bm8LAbrEpjKjn2lpAE%2FmJk0LBesN%2B7zXScpRYy8YOXJr2%2BW03Bv5nyOukA8oLw6VmTcxhb%2Fnq5Plk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=0,i\r\ncf-ray: a1b7362f7e055685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T22:41:46.98451Z","times_seen":17349907,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":18,"connect":23,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T07:56:37.690Z","timestamp":1784102197690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjqoYH6IvUGkH6wKD2FvPaUX8nJBPQUSZJy0ZgBTB0PE9UtQsRSzA8fzm5RkJjrdNLRWC3cu2hQbt4rONry7lFubjKFRhHBHIJmxzEm%2Fib1cw5QNMP8suFkuCd2zUvAMow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1b736302848712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":77475,"size_decoded":17964,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139), with CRLF, LF line terminators","md5":"938033b4bc88b4064b0600b2179a7157","sha1":"8a91bf834b8bb12be0ec162d9e8e82ac8620f186","sha256":"cf95dffc6a1b66ecb2032e1d3d0e5e6553175a2d47d89af069db40f11e800031","sha512":"f19e33ee0dadf1a710dbad10c1af7ea18d7dea13d215facf45a3728604f275a7875d18ed4d84968f03395bac0bda64990df83bc8a2a3216a7681bf86186d571e","ssdeep":"1536:enypmbvfWh9nMCW3C3J0kvoXkvoZkvoTkvoCkvoa3J4wz49afnjgHK:eyMbv+jnCwnafnjgq","tlshash":"6e732a32a0d92057a2bbc3d99440bb45f86c6127cf0546a4b2fc62a86fe5dfb45b770c","first_seen":"2026-07-15T07:57:09.994399Z","last_seen":"2026-07-15T07:57:09.994399Z","times_seen":1,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":0,"dns":77,"connect":21,"send":0,"wait":520,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/themes/casinonova/style.css?ver=1.0.0","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.516Z","timestamp":1784102198516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/themes/casinonova/style.css?ver=1.0.0 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:18 GMT\r\nlast-modified: Wed, 08 Oct 2025 13:15:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHe60xNEGTfN6%2BAkoTwrtW3eYiwvoF5HsqGUwg7ithBqU40KEKobP1qyssI412yA0Hb%2BnqhSjEp9teXcSJdBin1yEWojKodUYWPdKLatp0HXSAYR1DR0k%2FxRIKrHagTkqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634b876712a-OSL\r\ncontent-length: 754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1855,"size_decoded":1548,"mime_type":"text/css","magic":"ASCII text","md5":"7de9ec1d2b161dfb5818d319962a24d9","sha1":"606a3345d4d7710ea0b483560f35fa1cdb6a7698","sha256":"571bc9c345a5ac22c7db61b72424854351d094c4b05d1212d24434c012a9f02f","sha512":"363326039548f90f10bab237f989b3d7068a1af9c6b10379bd2388bd79aa77dd020801edbbf070d897d68f5c71f850360a5d6800bf74793c9d755ea89a0d4499","ssdeep":"","tlshash":"9f3154885d326223b066cb76239ba2d5db3bc2d313d12068bd7f524d914177d21bef14","first_seen":"2025-12-09T04:02:10.200688Z","last_seen":"2026-07-15T08:00:27.497848Z","times_seen":18,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.526Z","timestamp":1784102198526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:19 GMT\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16k6JiMk%2Bjxv68xbv4nvTnwBFRqPYVR384Hvr%2F0uTKB%2Fi74MibYiEgezqrGIZHcDRb0f4SLzfkAK66GhXbKfqelez6Qj4oO4iJpClWlRDzBbp4kfAp5du7ShOPEtJxEzpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634c87a712a-OSL\r\ncontent-length: 4678\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":5487,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-18T22:40:30.455985Z","times_seen":897305,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/plugins/thirstyaffiliates/js/app/ta.min.js?ver=3.12.0","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.528Z","timestamp":1784102198528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/plugins/thirstyaffiliates/js/app/ta.min.js?ver=3.12.0 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Thu, 28 May 2026 03:52:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Qgm2zXserqn%2B6fhTkClzj09%2BC8%2FavDY9T7ZNGp6CvbAQC7ekaVF8MLZgTuzbIyjL9thRGMaVmCXmHCVcDfRMXxYFul8%2FBVtrmzLDVPN3VUDcKEdnsGKmoAft%2BTwt%2Bvclw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634d87c712a-OSL\r\ncontent-length: 1230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3536,"size_decoded":2045,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3536), with no line terminators","md5":"957517127db62533618d8f8f8afd4706","sha1":"5a6112bd184191484482010362b0b81047142d8b","sha256":"3c0071fa6df97def7b87a712f08f27accff60d870edc403a06778144baa23e9c","sha512":"7a0aaeecd944794065943612a992c3e3cbad8d6ef41cdbe71bac8217732753cff3c368bd9f631b53534f4babf738adc372d17530f935de3ff47013c37a6f7cdb","ssdeep":"","tlshash":"7c71968975987c9d2c7b33886b4f620cd33361ab801c5a04d96f58ae5b31f4972a3f4e","first_seen":"2026-01-22T12:29:03.677577Z","last_seen":"2026-07-18T17:01:19.278541Z","times_seen":552,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/themes/casinonova/assets/js/common.js","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.532Z","timestamp":1784102198532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/themes/casinonova/assets/js/common.js HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Thu, 25 Sep 2025 10:45:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvZsKgOA4yvLRdphfekXv9fGMOERtQMZYD1lTMBj0bTq8BJJ1yxboS2QqjBuDHWXCU9Wi5ql6%2BmxRHs%2FUc1D2WC92HAxG1s8HXcYttz5xIBnac8lyED%2BawQKEiBaz4FSwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634d883712a-OSL\r\ncontent-length: 42937\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126140,"size_decoded":43747,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"6cd19e3af63dc257048243baed3a569f","sha1":"7d96336aeee0ede2c413b45391bb3b30f6485252","sha256":"7b4ffec9ceae987f472f26d287c1c6260a29a598844295404705e55588d15735","sha512":"c6b331e70f294d78112675057fa4b88cb963705ff76a0fa8fa24a2773da73a571ad1b367af1996cbd3c5cb95b9e79d6e244c0c5e9fdcd64d19f59e15be420760","ssdeep":"3072:vHNwcv9VBQpLl88SMBQ47GKDrKPJfpIL41i:vHWK9VC78UBQ47GKfKBxIL41i","tlshash":"2fc308df7295703246bb20ba006f510af236159aa80d4540f17de8d8bfbc95a427bf6e","first_seen":"2026-01-23T17:53:59.534802Z","last_seen":"2026-07-15T08:00:27.499729Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/rainbet-casino-logo.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.537Z","timestamp":1784102198537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-casino-logo.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:19 GMT\r\nlast-modified: Mon, 13 Oct 2025 16:17:23 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5m1dYHeSOF9BZDx1us%2BlCAO6XEnHyIc75kl9k8ttuYDv%2FvQpl6IDAL3H1x80qNTQDcNu8nD3dLF%2FJ9DBSw5btPxSGJVpG%2BTZXke5xEaUPZj%2FIIRMC3Phxh338Np%2F057ZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634d884712a-OSL\r\ncontent-length: 7266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7266,"size_decoded":8021,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7aac2be17b165c23b8b9e180692d1562","sha1":"1419f4283c91f81ff8bb6efb1623cce1444b4941","sha256":"3c1601fed332fdd793feb23ad8d92a9fb13aa13d03f0d5a866478d3090d94fca","sha512":"28e72e0e926eec87d504ab28601c563b960cee95fb6810e371ac8a002c19a4d6d0ef61e3859ef8e9fd64d8c13a88e279e15e92ba647eaa887ef05332223ab76b","ssdeep":"192:YIJwEJ6I1Q950UXAh4CSK2VuFFScopzFWx5OC4:Yv+6kQ92UXAhGKvFFE1Fm34","tlshash":"16e1b0836edfd3854c8663824765d6ee854622cf01313e7490e264fab7f1774a70da1a","first_seen":"2026-07-15T07:57:10.003167Z","last_seen":"2026-07-15T08:00:27.510767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.524Z","timestamp":1784102198524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:19 GMT\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyfz7AYdM1%2BHUuyJiZoeKlegNVuCLO9HEbyDu1rm9ehuYrvt8ZpnbbyUXIQDoAx13h5kC0KkW4YjtciuTrl14mIEX%2BczpfjFZr0qgL52D50SwNHOk6nD9x46TSidCJJGVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634c879712a-OSL\r\ncontent-length: 29744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":30552,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-18T22:41:19.296787Z","times_seen":977838,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.527Z","timestamp":1784102198527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 17 Jul 2026 07:56:38 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLE%2BMZh6RM3n6IgyXXsfoZJDYKwaJUHlzv0OVzPpnOQrYA17X3ECw14xYr3GGHMDXghR%2F%2BvhnqZMNNlbsa9DwFivssrT3aYAApb18JsLy8Vp%2BBzOZvXZPLj8pJRHVFOjKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\nserver: cloudflare\r\ncf-ray: a1b73634c87b712a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T22:41:53.799861Z","times_seen":400170,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/themes/casinonova/assets/img/close.svg","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.539Z","timestamp":1784102198539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/themes/casinonova/assets/img/close.svg HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Tue, 29 Jul 2025 14:16:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYYyW4V33FXZm%2FkYcKAqy3whfmFWvtL6V6u0EupccTycQzL5vIsELrboYo66RtA5RpV7qL5rTkG86u4b1wPAWJVKI63bOwQvUpNVS7eyLGpKBd20A0tTt4%2FEKvaPp8Rplg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634e885712a-OSL\r\ncontent-length: 375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794,"size_decoded":1169,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f971e0bc2810c12bada29fab702c5ec5","sha1":"ae42e6ab7645ef72886323adce70e8fdc417f23a","sha256":"5a0deb78036dcffa2034d71e9ac6f30ded24fa2ee38b62f94aadef1385a375bf","sha512":"cdf2cfca1ac8a15220ded29b2d517aa27482085802c0601f300e2e504ee6dbda2963042716af9aeede67d44202b5a6efa32ecefb1aee78a6af6b975a10f5fca9","ssdeep":"","tlshash":"ed019cd152c60115c43ac970efe4b2c5de39f18302c22864b18c25477f3886e8a5b244","first_seen":"2025-12-09T04:02:10.17628Z","last_seen":"2026-07-15T08:00:27.523693Z","times_seen":19,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/cf-fonts/v/montserrat/5.2.8/latin/wght/normal.woff2","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.675Z","timestamp":1784102198675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /cf-fonts/v/montserrat/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bl1rM2WK4WSCmq8iEGS5EvIcTw3gG135a56Svf8m7uC9seL1xBfXemnQwCGAxAb6cUz8vj8Z76MQF7JkX8ScUkBLJPkNlZCGTXlTkWayaVefKYSk%2Fg%2BA%2BVlqNUgC5xnU0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1b73635b88e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37956,"size_decoded":38559,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-07-18T22:00:23.363923Z","times_seen":38118,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/cf-fonts/v/montserrat/5.2.8/latin/wght/normal.woff2","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.677Z","timestamp":1784102198677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /cf-fonts/v/montserrat/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFh8AGxR3ZF6GcPaqSBtG1foiYLtuESBZrGi50WcBJX%2FksKqd6zzgMygykDNZ7NgKKqsJfSuMR2sUEPjWHjDera7o5iC%2B%2Bbmh6%2Ft%2B05tcWcf1O3qNfWPqsqtUJWx0DeMSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1b73635b88f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37956,"size_decoded":38563,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-07-18T22:00:23.363923Z","times_seen":38118,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/rainbet-aviamasters.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.704Z","timestamp":1784102198704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-aviamasters.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 17:41:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rh6r91dqQylp%2BPZvxmFc0ai632IHxillOOuNmM7auS61OUcP7xHRg1QZv0yDI69dQkAGu2JC7ONmPhHnSwRdtbsQ2njUx8oW%2BBdhGtGhjcSYPijmOkuauMke8NarKVdEmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73635e895712a-OSL\r\ncontent-length: 14370\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14370,"size_decoded":15118,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91869975a960e6ee91950a04c52ad883","sha1":"4de1e3a0537a5f9009192bab48418aa340ad16d9","sha256":"99261e3901f8b771cd6d4ec5c5e9a564dc22370a4e48466e4a533d5bad547fc1","sha512":"89e4466903ebf60453f4e828e8359f45195d79f41205eac82d206fffea3c6f62bfb52eb4291628d99c195931715fceeb8468649577d43c2dd5b855928b12d1a9","ssdeep":"384:8HLG267tUFIUGkpF7jfZmwbYdbQf5qcvuW8:6Kr5GjAwRf5huW8","tlshash":"0d52cf895c18cd04fde6b1222d89ca2b3a89a43cdc446cc7eeeec55363d589883e1ddd","first_seen":"2026-07-15T07:57:10.008259Z","last_seen":"2026-07-15T08:00:27.512872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-includes/js/wp-emoji-release.min.js?ver=59bb6794ebf7ee28aae66e8d29991464","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.883Z","timestamp":1784102198883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=59bb6794ebf7ee28aae66e8d29991464 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Thu, 15 Jul 2027 07:01:23 GMT\r\nlast-modified: Fri, 10 Jul 2026 04:01:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55C6aa%2BtLPkvOGTcEvvILukckQ09UvBs5xXZQzZW0aBE4hRqSX%2F9TIB0uadg8NejhQOs4gMtgIyf2%2F23x0TyQVdG67gPcnjuM8cZOskuC86ra0qCgE%2FHHHvhwYIo7%2B4TnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b7363708a2712a-OSL\r\ncontent-length: 4974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":5787,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-18T22:42:26.724938Z","times_seen":9830,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/cf-fonts/v/montserrat/5.2.8/latin/wght/normal.woff2","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.625Z","timestamp":1784102198625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /cf-fonts/v/montserrat/5.2.8/latin/wght/normal.woff2 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEEguKXnpKAeyfEyl8PC3kktru%2BauHJ%2FG1IQP5PZ7SBFsiU01R3%2FzXRhuv0xay0M8aIBW%2B4NkXd5EnU02bYHQrNyEWYnHL1TtaGsv6ydZ1dTdEf4meSOvCmynoLVXAI7wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1b736356889712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37956,"size_decoded":38561,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-07-18T22:00:23.363923Z","times_seen":38118,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/themes/casinonova/assets/css/main-style/main-style.css?ver=59bb6794ebf7ee28aae66e8d29991464","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.517Z","timestamp":1784102198517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/themes/casinonova/assets/css/main-style/main-style.css?ver=59bb6794ebf7ee28aae66e8d29991464 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:19 GMT\r\nlast-modified: Mon, 13 Oct 2025 13:56:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDEvbL0S0WTfNFtGmq9Li0hXiOrc8kdqNTaBzvM4JODTSKoNI7dAi4%2B88n9vQ3oQ0jRTS3SA5y8%2Bk4jV1P2xX6KZrs7%2B3PXOvgdJL6fcwVCvyXwEicnvtjyY5yrjEwd2sA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634b877712a-OSL\r\ncontent-length: 6326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48600,"size_decoded":7121,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9152f3f5e3fc520e1d20ca841da581a6","sha1":"05bd8793046299238884d41f560be4638f942fba","sha256":"c021a1a8292a782b4abcfcb3b82a62146384532a8508574a37194ada7a95a5ce","sha512":"1d32ba233bcac0f4054d9bc6c76f8502214867e910e13c2eb3609328cfda33f3f5f3de317a9138e0fe8e438db5a0b13503824cc54946595e0664577cb9ca30e2","ssdeep":"768:lbanvVFf2FMCW3/1ItFTzBjtYFZFVza7RDzFsFbjUELFxFwjFeFlFMFXEP0FjrkV:ly9Um/1It9zBjtYrqlDzuNjnfejEnWHQ","tlshash":"41230fab16b02518ba17e4947da63f05b39dc013d30ee9f5a6c1214cdec93ea44b3b8d","first_seen":"2026-07-15T07:57:10.010007Z","last_seen":"2026-07-15T08:00:27.516123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/sweet-bonanza-super-scatter.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.699Z","timestamp":1784102198699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/sweet-bonanza-super-scatter.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 17:39:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2ryA5bZbPwUC0%2FXTd7neunwxvWDrmxP9Xvezk6ZTHPWA0UEzW8b6BlBWkUKZMOWQd46x2nFEVxLim6crKLYjqt972%2FhnLrxcmgBtr8i5q92bzabxvOhDNKlejQv%2BkwCKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73635d892712a-OSL\r\ncontent-length: 20140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20140,"size_decoded":20890,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"271ae549e39c0699bd2940647709a1dc","sha1":"7c0f5e4256d9b4a2e7cbd8af0c437014ce45b104","sha256":"d429f8fc7b96c147003d018d5d5823fd2897eac92f9396114b07e5ef534434a6","sha512":"236fa7f8ceb650a9e4a80af234285e3c1a5addbbf09b6010fba17442ccfdde28f5aa9711853972050b50d5d3114a8864498a16dc1269c309f7337df02efa1b3d","ssdeep":"384:pjAJLJcmaMzF/lVlXTleOJNZjgg6AK/qdPBct3aafckv9lFBME1GrbrJUPKbF:utJUMp9VFBeOJTj4f/qdPBcpaa3vVdm7","tlshash":"d592d11913c6c3fe319a64328fe30b19f319ab8653e5b521ea52700a917c21fb495b6c","first_seen":"2026-07-15T07:57:10.011237Z","last_seen":"2026-07-15T08:00:27.50239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/eye-of-spartacus.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.701Z","timestamp":1784102198701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/eye-of-spartacus.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 17:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=geSvCSFiMQEXQU%2FaYmIqVaRFoNMKgwUUA062bpmNU%2Fen6a5XXkIrJ%2FcelRR0CRE2WC28j3CFpYqurygG2tLQ7WyJKrpiB0kOGpV5RwdrJCbxxuKW3irDAk1CfiRAaABf8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73635e893712a-OSL\r\ncontent-length: 19618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19618,"size_decoded":20368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"79ef1a43dcf085a3711234f2a75f5b38","sha1":"381bfdbb695a651a23a3db8f57a4399e2b8a1798","sha256":"356fa94afc28cb7e431f423625472ad571814f2a88ef536e49d31ac2e79b47a1","sha512":"30182c9d4303065560c5420d73b562fcff96525a33b9226065caf8df4b7b880f94f145a776edd813020560537f1212a4c28094dee2c3b5c892bf421bcbbc5227","ssdeep":"384:sIQ5VuTnn4ZbkP1UeXaFp6R9oQdpQ3LHYk5MBoA4LUoqk1+cbU:/oAT4FkbKFp6RiQd+38BeAGVY","tlshash":"f392d1349883cd64cae5ab02fe929210ed23bb46f950806fc377e9672296dd37203e44","first_seen":"2026-07-15T07:57:10.01245Z","last_seen":"2026-07-15T08:00:27.491996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/uploads/2025/10/fire-portals.webp","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.705Z","timestamp":1784102198705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/fire-portals.webp HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:20 GMT\r\nlast-modified: Mon, 13 Oct 2025 17:41:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPHGhqbWQsvbtjeQJgvhyzsZNuMjcig9Sj96VyAbDJcFMzVx8axg2JdpHZQAZFXoRuzH%2F5OwOyLt8s1Zy8EqHxsnUJ2DRmzuiAGxssEsuYIC8EeWgVvt2kv5hJulDbm3SQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73635e896712a-OSL\r\ncontent-length: 21286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21286,"size_decoded":22032,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7862d4ffc7dabe14658491d7e96e3ae1","sha1":"7e404831a318c4879498665adda6aa651386cfb9","sha256":"8e5be44a8723b5972c526cb69598862d91afc5e6ca38c37d23fdf44a46c603de","sha512":"a0f444e370435b59b5d3c527a6ba8f231883d8dfef7c2e0e352d21b6ac25b80ca211c36b9742248d382103ddd4b7881a8def8454500c3946a7417faadf2be246","ssdeep":"384:f+U0Hw1yxdqXdf8xaeHtdkW6tCa+w/IyDX3O16ZVZQVLhAWOHBPn944kGhHj:P0Q1EqXdf83HtogaHAyDX+1BLaWOHBPh","tlshash":"6ba2d19c61f2ef0eac01a51b61a507e4c4c1729b976423278dfaa1ba45ca490ee4f493","first_seen":"2026-07-15T07:57:10.013703Z","last_seen":"2026-07-15T08:00:27.514552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.co.com/wp-content/plugins/tablepress/css/build/default.css?ver=3.3.3","fqdn":"rainbet.co.com","domain":"rainbet.co.com","tld":"co.com"},"ip":{"addr":"172.67.130.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.co.com/","date":"2026-07-15T07:56:38.522Z","timestamp":1784102198522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.co.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 12:37:48 GMT","end":"Thu, 10 Sep 2026 13:36:25 GMT"},"fingerprint":{"sha1":"4A:82:71:EC:D2:B0:07:63:F8:50:34:BF:30:93:97:55:0D:FB:37:C6","sha256":"D0:18:7A:75:F5:F8:34:5B:DE:12:98:6B:C1:E3:AB:2C:90:6C:2E:4B:BC:EF:D8:2E:E3:14:E3:39:D1:3E:87:8C"}}},"request":{"raw":"GET /wp-content/plugins/tablepress/css/build/default.css?ver=3.3.3 HTTP/1.1\r\nHost: rainbet.co.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.co.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 15 Jul 2026 07:56:38 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Wed, 14 Jul 2027 21:20:19 GMT\r\nlast-modified: Thu, 09 Jul 2026 16:00:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ulp22ZLNraDhxYBr4EXf4EKLIVbVwb5wQXabT6CbdBN9y2EtHNqZp8CYIZCVPnJ%2F9WoAlV01vbNY2NDi1G1rE9p1aQuE1ODZacP5SxjHwOB05CdFDfE0ZfJMklIlURm9XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b73634c878712a-OSL\r\ncontent-length: 1560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8064,"size_decoded":2351,"mime_type":"text/css","magic":"ASCII text, with very long lines (8063)","md5":"606c174d8ef9f56c42139a27c0e7cdc5","sha1":"25883f9e9cf6ecd202251a745afa43cf1b019667","sha256":"3a1fb13a37375360a4e8b7725fb3a2fc085cb5fd3abe9750d5549c89abd08264","sha512":"1ce8d23de2504c24c1b943a07603b9c62bff132f888bc9ca3e204b66f4fb57ffe8d90c5f31aa610d8a7f8495373eb4424acee2c369d60e3c01c524d8c61349ef","ssdeep":"192:iCc3qg4q2PcDnj2wThGI5vMRV+B0aw0u0b0d0l0b6a0P:i/Z0B0u0b0d0l0b6a0P","tlshash":"92f1eea2e7a437f9b2b3c11ab9f4be5db9206ce1f5811afbf05181700689d535fa1c05","first_seen":"2026-05-20T06:58:43.680192Z","last_seen":"2026-07-18T22:19:42.950905Z","times_seen":1162,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"rainbet.co.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}