{"report_id":"53bf6130-0e6a-45da-8c01-f4a51fe8b1b8","version":0,"status":"done","tags":[],"date":"2026-08-19T22:40:44Z","url":{"schema":"http","addr":"rainbetcasinoromania.com/","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetcasinoromania.com/","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"title":"Rainbet Casino România - Bonusuri Generoase și Jocuri Live","dom":{"size":54183,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1456)","md5":"de225d7fb549a1ed80b527fe373aec05","sha1":"df38094fb8badfd742fe9453ccfd3d2cffec6670","sha256":"42d3c22a74ce9b7bae5d316ef1bcdae71997edfcdc2c66ac592b0a4054dd3e57","sha512":"401ccc9ad4d4387c8f15b7ccec1dde2fbbd50c67f87f4f57dd163c3ab655582f8c32b55d8f246ba6eec8e9133c87310166231b50db4a858aa6d35a3e4bd454e4","ssdeep":"768:hPHdOOQO86/lcNFAS3Wv9dWah7zYyyaQj:hPHdOO586/yIS36vWah7zYQA","tlshash":"3933a922a0f8542702a3a5919a323f1f7d85d01bc51ace51b36c87df6fd2d419da33e9","dom_hash":"domhashb6e79952aef99047346d1c97bc0bf444","first_seen":"2026-08-19T22:29:01.600254Z","last_seen":"2026-08-19T22:40:47.360002Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasinoromania.com/","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T22:40:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasinoromania.com","ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-08-19T22:28:48.526968Z","last_seen":"2026-08-19T22:28:48.526968Z","alert_count":78,"request_count":78,"received_data":1496953,"sent_data":41117,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Twenty Twenty-Four","description":"Twenty Twenty-Four is the default WordPress theme for 2024.","website":"https://wordpress.org/themes/twentytwentyfour","common_platform_enumeration":"","icon":"WordPress.svg","categories":["WordPress themes"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcasinoromania.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-20T01:30:42.447233Z","times_seen":422680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/themes/twentytwentyfour/script.js","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd185f8212c2335dc8c462be1b9a75ff","sha1":"cc7ed5b36f2fb6e02c41a1950140cf4da0471c52","sha256":"7d234b7c8b5451a37d26631958c3a683fb9ab60b248718a3ea38926153e0af92","sha512":"3b4c6c43faab9915aa9e80db6f6adb715e959d07a8fd1f38db052e308002d43bf833b890ca6ccf0a2779e6532b4428ee825d9dceaf88aa0ce1429983dde11036","ssdeep":"","tlshash":"4e115228357a54725137b65b77cf86943220208be445da863d7c8a822f91ca509f0bee","size":1071,"data":"","first_seen":"2026-08-19T22:29:01.637426Z","last_seen":"2026-08-19T22:40:47.377939Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/9ba5f46f85b281a9.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.753Z","timestamp":1787179217753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/9ba5f46f85b281a9.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpqvfjPcFpUUnc6xlUaJwWXnExw9enjQmq57wy2M3aNsTT18M5cza%2FnxN3jz0VPJNvdbc0D9FDAV2sZsTxYPcHwRLWljKgjBAbQso9%2B%2Fiy20MaoZ90DXooHDGh2ScUUxcJE0KaV%2BT7CmqqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8befdf3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/5205ee347128027c.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.754Z","timestamp":1787179217754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/5205ee347128027c.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIdkKj2NkprM%2FSuvC7xjuaa%2FdaAcLbzWS8WVjPvxhgUbSJ0Jy%2BLPsmddGgZ2uM4U0K0HVHABL9qa8UhkcAqsMZgTo2eNovd0L9SRzLVNmm0mExpI8lIsFYFTOVy1OwX5493tuaZqn2v0GKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8befdf4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/08ff319a39900c0e.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.714Z","timestamp":1787179217714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/08ff319a39900c0e.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xGzqawTPu%2BI1Dd2%2FmluhX35Td%2BesBVJQiE%2BfuNsZXTLulsci7IUoaEBArIjVpltpjWOzosOohasAPBu%2Fqgc9471jWyfqtmveVeXlFpdVGwXAzEdVisjTgbwNfsvvQ9NZzf1Mm9QUHdxpVw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bebdd5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/939191d5978247f1.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.751Z","timestamp":1787179217751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/939191d5978247f1.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJ1fuxOs2YZ0MF8c6sBPd1xbUNNKrpnlXDXpefLNbbLIX3mG0KV34UjaHTQhqff1Av%2F6bX8egUADoxQV0l2GZiX6VQTzr3TYwzr8SfJIpguSWFnbLX5DNYZn7b0AVLHnIaP18sQQ1C9gnN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beedf2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6773,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/favicon/favicon-512x512.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.859Z","timestamp":1787179217859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /favicon/favicon-512x512.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MY%2FSba2WY%2FDtpabbkMnNunMhRQ9RdyoepkVJRGNV%2BLJtiJb3ndKHitnBV%2BI%2Fmzunlg2QEagMUH51t%2BQEOpDhHH85749Zny%2F85FE87r2tGtrMdWuPATZvzlLYllw%2BxwRIsRRl2xrrc76H00Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"784d1dc1c53dd133b858e59f40290381\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bf9e06c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 141450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141450,"size_decoded":142285,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"8556014ed91ae1e1769914b9fca142f1","sha1":"596a1baff4c17bd623803d2cdee5d8df90bf722b","sha256":"7126336beea238f1337d2fd97979049dbfd7da3d10d26b86aa16733a7a9f1ea3","sha512":"b52bec00a9cf58a97a50e72cdc0c8abaefa3c32fb12bad9e33faba772889ff2d0f23a03df89de29657f452eeca427ccd272ed49b77aeabff56547b1247452b0f","ssdeep":"3072:/VJ6NuIEiw7Aqzjuhedq73TAcG05GN0DCZag:d+frqzjuhHXEtMg","tlshash":"4bd312b1d381cad947f450f234c2a631976cb7066e8a7434d1f12d71bbbbb2915ca982","first_seen":"2026-08-19T22:29:01.613325Z","last_seen":"2026-08-19T22:40:47.361516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T22:40:16.957Z","timestamp":1787179216957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBuZe2BgEnHe9tTVr8PzV7htNDZze8VqWPnmsxIBa4yu2BhlW7%2FN9PayZ4GmQAVPB8Y%2Bchh6G%2BYCSvYmwiZxmFS0YQPs4BAvRRO9g8PUQ1V%2BQg7y7WLAQaW5VgdRipwHIAX3hA%2BbetfJM0U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8ba2d8bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Twenty Twenty-Four","description":"Twenty Twenty-Four is the default WordPress theme for 2024.","website":"https://wordpress.org/themes/twentytwentyfour","common_platform_enumeration":"","icon":"WordPress.svg","categories":["WordPress themes"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":54314,"size_decoded":10052,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1454)","md5":"96a0c7ab0af8cee6dc518b52266145f1","sha1":"5fb22c74549160553e1ab0dde2d50403a30b5ea8","sha256":"8be25f6b9db2d1e9450f5b2ccb6324147cbbaeb0c47584c811a4cdc4f5fc635a","sha512":"a686bf830cf678cfa244983852967cc65fa975313989e8547de00dec5b6b1cbe31bd485eb9a81aaf53bd61e70327ed7cb598f973e18a91018615dcb9519cf44d","ssdeep":"768:OPYdOOQj86/lcNFAS35v9d07M7ZcSc4Qz:OPYdOOa86/yIS3hv07M7ZcIk","tlshash":"f9338922a0f8502702a3a5d19a327f1fbd85d01bc51ace51b36c87de6fc6d419db32d9","first_seen":"2026-08-19T22:40:47.362168Z","last_seen":"2026-08-19T22:40:47.362168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":5,"connect":24,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/79388421bd760187.webp","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.559Z","timestamp":1787179217559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/79388421bd760187.webp HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VAPIRIWNakx%2FURFgcm2HFti%2Fi5q90mIMv%2Fk67gzEA8ZT3s6Z2t3sk%2F24RBq6mZb2f3XyCT17fB1W2FrK%2F5PLKW2R9CY1gR8971IvYxNzoqKdO5vpCL8ii0I5crC2WYOige0nWyQcjXLYpw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2ec3f45305c3ecc356533716d616266e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdbda8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28656\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28656,"size_decoded":29482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be55db140f148ae5a084894ed8837302","sha1":"60b99d50435fed0f18e4e4e7db48424de912c0ab","sha256":"dae3573b384421ae8b1675e570fd0fa2df20e151c6cae6b32ae5264d22704eb1","sha512":"0473016f8c3f9627d0e64dd1f5a601ada8871b8492b9c431cfdf00045e21efff9d3b80ccf0913ae115462fa151d4f7800c5219e8bbf4b2475510d9e440914124","ssdeep":"384:FLMomIwhLYPvW2WccWJD5FI61rx8+xtR7ty1OLptcWUhIJ+A4K0+K:FLMo20GocWfI61rx/7/vdUhvLK0+K","tlshash":"c9d239a1c32908d5f243203275550258a337edd7bd38eb866702dcad97513aeaf399ec","first_seen":"2026-07-04T10:30:55.332064Z","last_seen":"2026-08-19T22:40:47.363143Z","times_seen":41,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/5edbf505f5dddf10.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.593Z","timestamp":1787179217593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/5edbf505f5dddf10.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjcrxS6hJp%2FR2U3CTCDyvYJ6Z1%2Bh%2BrSfzW9IuZ%2BLIMxfcrf3ZP7oA7uUVU1zZeeT95P%2Ba4p7XquT5yQP1AZg%2FLk8i2DqpvMi8Q4MayMsPWLAoGpQOY0JShpoDA%2Fipl0SV%2F0ZvjPJMbIzjxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7fd4547a3c9d59afaf332063de29e0d0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdfdcac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":2664,"mime_type":"image/png","magic":"PNG image data, 112 x 53, 8-bit/color RGBA, non-interlaced","md5":"b0e3ac9ebab6af5f48091dfaff855a54","sha1":"096de8f22039486621f167862d3cdd2f7d6d6a6a","sha256":"fed91cc5540efbbafc70f90d761c9caf1855a43f9ac0abdf58b43020bf1fca76","sha512":"6383332e70343cc4f6be1510e793ff8416c9a1d2de0b6e255121026683a162cb12075e2e41f0074d0eac618390f884a5365716cd50c2a1842b0b2dfe2c7439dc","ssdeep":"","tlshash":"8731094ebb253d6f55fd6e3d47245434a43f98bf3454293ce87745085ea520f60075a3","first_seen":"2025-10-12T07:48:56.729773Z","last_seen":"2026-08-19T22:40:47.363957Z","times_seen":80,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/03438968098defb7.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.724Z","timestamp":1787179217724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/03438968098defb7.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENtpfpDs2S5QDrdsPeuam3UYbzZLJkAXCIQBlrtZLZukMgwyJ17kzi7XvXB2MizSp7tBCNb2dYOHapCZ1l%2BMU5L5PSNznzxqKgte%2FMKKmdoHa6YERNX6wvWxHJ58Hu8Y06efeA%2Fw54jqkZ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becddac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/e66761485b8cb489.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.743Z","timestamp":1787179217743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/e66761485b8cb489.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOEZaO1eqabCbtJaB2yjX85hQS0W4JTMJYcru8cBcCvM%2FA7WldzGdkAArsbcWJ0jLZtkb4LlkfvS45UV%2Bs%2FMJYFjDXDYoWa99rZpjmytLeNdLFQsIBOtKO14VwtxDgEAvXIAFxeP2teIS5o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beedebc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/54b4a80f56bee277.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.561Z","timestamp":1787179217561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/54b4a80f56bee277.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gw80nrfTN2C9erzFKHCjupxHMsBOP9ek%2F2BM%2B64jLCwNYdlp%2FesfytCpOZ%2FZAiYKve3uQ2CpB3mAYqr0wSAcRKp66xqd7mp%2BqsePRuBVAd6dRXYssdF8wLkCPADm85mnM%2FUC6X2yG%2F8uxXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f5ce075ec6757cbf54ff40ed632262f9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdbda9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26132,"size_decoded":26962,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"a29cac72ae4520e7c98bb3065a72f6c0","sha1":"bf03f671b834db8a8a9e19d5eb1c9220dcf66f58","sha256":"1490d5de6ef366b7d80ba4bcb9799b6efe2b871dc9590e1d51c235ce01663f7c","sha512":"922bbdd55d377fdea031dfe1349f605adc221c78ebfa624fa4c253ca459491e7fedfbba808ceda456942b2ebf037e9f361edc49b03dfee545b0ff368dcdfed8f","ssdeep":"768:kDTIUwozJ095iRTNoEd89D7rqbOLfa4PdSf:kXIUwKLJurAczdk","tlshash":"34c2e112b25030ab3ddc7c9046a208143df2da3dd5914f9ef376d88aa60e6c4dc3935e","first_seen":"2025-10-12T07:48:56.684326Z","last_seen":"2026-08-19T22:40:47.364505Z","times_seen":82,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/7888c47ed3910904.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.582Z","timestamp":1787179217582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/7888c47ed3910904.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5I8KJ2VlA84GWtbVRW%2F%2BTemeTyTczYYeNDCv14scGf%2FGKeMU1nOPaXqQJWP657fT4E6%2FxCIf6mr7OnuJ2YY4YAoi2qZze7adJZ%2FsKLfCv2xlx2vPpeLZckwgxDiuNeewqs6EDb3O7smq3go%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9a14c7240c42d1939687214817584f6c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddc0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19439\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":20265,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"99b163a258ac48343d78700d6ea72dc5","sha1":"07aa77cbd1aea360470fee6fe856e3959cfd5040","sha256":"75bf3f0e7e125648a2b520050637766af0991d45137176a817351410c8a6f2aa","sha512":"05bcbb1216dcb382de98541e11dded74c178571aadf5db7a9401b1303e38ebd45a4f07ba3444173bc7a672696daa1539768a8978e22aa5fe25eb6babae92eadd","ssdeep":"384:3t+0mPOfywn6aUNN4y4mNB5aQMa2RywITq2cXqbinjMJR3/qrRpLmnUvMJ9RbV3:3k05fywn6zp4mH5aQMYw+q2c6bij8RCI","tlshash":"2892d0c6db708b1cb20a4e37a69db41c8f648f106ae50b17137ec42d136a4d56d65f4d","first_seen":"2025-10-12T07:48:56.701589Z","last_seen":"2026-08-19T22:40:47.365055Z","times_seen":82,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/6bc0538fb46572b4.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.563Z","timestamp":1787179217563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/6bc0538fb46572b4.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kk8yYmUXqq62QHVFyIMT6BIiPhVhPi3APYsU4wER5qXdfTjrA%2BLdxODlyxYPAoPQJJXsdmslxEe3jADveSXPE7bsqK3OSh9%2Flf%2BZkA%2FKTjreBtSzHNscxrsWdFdWalhtwbmfxq5z5vxnDGc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5803ce9dd8b5d351d4dc34e3b981a88d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdabc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18867\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18867,"size_decoded":19691,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"a1f257fd5852a3367435d988e537da48","sha1":"f418358044d2c53cbbb99848d3db32b1eb8f62cc","sha256":"a5cbd71502bb8465b631e6316ed8ed331efc325855b98b0cefd0896e3e2e237b","sha512":"b662716c76116fbf73b06879a650a325c7ad5ae167925c6bb40e10c1c8680e7a87bde646a69cc382b5e5d5212b822cdff2738b94e5aebbe8b597730ce0135c68","ssdeep":"384:NqtOxX6jU2O/2ODee0/QIo1Wcn8BpDfV5rHRg84ZA1l3:UOxX63ODeQMc8BpDfrHN4ab3","tlshash":"1682d021939c5855f52e1d3cd28373d8a1c63a8f4e477be8a1b2f2b2792d1cd94ac901","first_seen":"2025-10-12T07:48:56.613703Z","last_seen":"2026-08-19T22:40:47.36556Z","times_seen":82,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/c63808328e82870d.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.737Z","timestamp":1787179217737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/c63808328e82870d.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4E3SN6uZttOb5FIdYDKsgI2EGt8veewyTPfL6syxMCgOVT29beZY4SCvuSAf3%2BJgsIdgzdhJiFfYUjn5CxRnyeC4hu4vKUksod7u2N8sNRlJJFXsyDQEjcyTmmU2Dp%2BSVR3xOWYfWDDbhQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bedde6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6775,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/2152ca2e37adc738.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.739Z","timestamp":1787179217739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/2152ca2e37adc738.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJMZqB0MuuuiekKKhpH2W2OYUgsB4rnKGYYhuzdXo2ESpL1P%2FMi7CYX6D6NAlCwwYq2fD3TLNuI071hbNthxHbLi1J9tG1DuppGv1SeATMGDF6bvHisx%2FFK6c6l7BY9oTk36A%2BIpHMF1eZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bedde8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/1d38762efcfad2dd.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.765Z","timestamp":1787179217765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/1d38762efcfad2dd.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBhMi5H1fAMEo5h047nPPmZym7ujX6QUnJALLEhZEZaleVInkJ%2F4tqxnZjMluKoCTh%2FoOuf30nAE96qgU1MtbADcQuMPTJcHLU%2F03VCDMJyiUmaLuaO36I20JDjPlm9GKj57Oosit61ylkc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bf0df9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/eb34b94a694e50cf.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.581Z","timestamp":1787179217581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/eb34b94a694e50cf.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8Ulvc845JQznMKbCRShj007Pfjg1r9Qg78cxf%2FVNxrjrlx9usFjigB%2BnpLavkIjTH48QliXM0q%2FplrBRrwmNjTgdDFqzzKoJHQ38b3KwwUcbOeQkYhCfI3FZfi94GMQ3Y%2Fy%2FW6aW849rY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0184b3be48f5c12035574e2cf8ec9502\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddbec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19687\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19687,"size_decoded":20513,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"73e56b1de9d50f0450e0c75f4e1e3f51","sha1":"5a55be1b425c66c4ddbceb7ee00052ce0d6f3a68","sha256":"0c5f848c16994d0f9d9e9bfb1d5f4fd65fb0e038e0d23c05c5615e1dbe9f63bc","sha512":"b76402769919bbef918939dea02e1c5ea86755a6913b670253cc35d514fbeb96a4595707e81a7e9c004355bcf43ec61c4cec22e0557757301dc514a005f273ea","ssdeep":"384:LViOJ2cd+l5/asZAHPAbllrGbiCRtVe87b4v4qXhXKFG6c6OA+3xI2jaPXDrWLS:ZiOJ6ZAK8NRtR7EhXKQ61OAOkaLS","tlshash":"2f92c0e6a6d08850eccf4dba6ca82a8e1506c72a5bd94d374773cb7035374e216cb7e0","first_seen":"2025-10-12T07:48:56.645899Z","last_seen":"2026-08-19T22:40:47.366052Z","times_seen":82,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/3027d15b9b55f4a4.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.595Z","timestamp":1787179217595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/3027d15b9b55f4a4.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0qd7m9X8Ssfg5iCX77Nw8WPqAptrUemYf4icce1TdmJYPMgydhEcNvRdBtuPnwM9MtSBHIeKTNU2NQjMKT%2BxyytHy9WX165dHmrWBykVzS4ZQ1DqV4DCaOUY9U5F0cOoakUplR%2BwuYLfeXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b743a4fc3f79d3d9726e8c97796da638\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdfdccc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2070\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2070,"size_decoded":2888,"mime_type":"image/png","magic":"PNG image data, 200 x 29, 8-bit/color RGBA, non-interlaced","md5":"d2ec76eb63497a3be6c84d76342f7c8e","sha1":"22dec907b7dabe554c2cfb824a3fbfb06412e33c","sha256":"8a0a1981ce492013306885e7243bf162d403736313dc55e2df283cd00007be76","sha512":"a69a9a1ca455f541cf6a1085866341c0979a28b4d26cd5c7c5591ad9845ee2c03adcc83aec086a48a7e39d35bdfb86b0ab98fe7856dae9698dd09a0a85597f8f","ssdeep":"","tlshash":"ce41f8da2a10acf53c69c6399d54baf19512562fd58fdceeff1531380b09106cd74822","first_seen":"2025-10-12T07:48:56.63266Z","last_seen":"2026-08-19T22:40:47.366561Z","times_seen":80,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/a561564a87dde034.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.728Z","timestamp":1787179217728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/a561564a87dde034.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDdy%2Bsu7Gtojh5yHCW04yoTlkgnlfg%2BMPKYxyZHKIwjW8YWXJPG9G9A1HAgYYaVJnhvgN8gttbeaIl%2Fz%2FQ%2FYbbIuxJeJ6G0WqdB2oaHQrsT8GmEo2Q8Irx2SI6g4L0flw9R5jlaPlRXLB54%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becdddc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/favicon/favicon-16x16.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.861Z","timestamp":1787179217861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /favicon/favicon-16x16.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MlVNGBeLtrVrz82BnHMW23n1TXsrP%2F87tTpWuR4XSM0FUDRYZvBE%2FSjjo84BCADcTihoOzzgogZSAmuZcN8CVUII1q8KwIZEjy6sXjd6ARfi7P8%2BY4PJ2PeS3BcLvSgxaO9byz4EoqVFKYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a1c2880c76c6383ef94f2b4a3fb70f7c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bf9e07c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 679\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":679,"size_decoded":1501,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"97d18b2232c424ec3abe3c06361e0144","sha1":"d691465d40059e730c1e9c9317728bc6d8ffa1eb","sha256":"dd5bdd6ad196253a0ca9c0735dc42b82153995bc2ff7a97a17c61e1817d709d9","sha512":"dfb6d41dee44344db4eca87b98b6f6bf2aa166a3ff946689ad2719562ab44eba07205001eeaabef3399b34b4a2eeea7e6d396b18e22121ee68cffc16df4f7718","ssdeep":"","tlshash":"2401d82783d98fcac6a1343d0418c116293674e8e0b6a23ff89128001e52f84d8f06ea","first_seen":"2026-08-19T22:29:01.639811Z","last_seen":"2026-08-19T22:40:47.36706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/27bdcdd957de9322.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.564Z","timestamp":1787179217564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/27bdcdd957de9322.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMc9C3ts2aUqEKM%2BAfXVy3SNoIZmhW8m%2FDASo4YNZjBl1Wftb%2FoSwdHHb2zNY2c3VNqJHQ%2Fz1HJrc6EJr2EO10JjXOsrhexUjv48SeCynlsllfisX592V76EfQeUhVu5l5B4SabDyG%2FDXDY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f210de80b19f1952c50a32222ab98305\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdacc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20222,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"05576e9f1e9b78305874c7c6d7c6acf9","sha1":"b64623c3c7686107acf0df42b5553d2e7cfe46c1","sha256":"73c34250a6cb2e9bf17ce42b9b96f801a07dec40c17b2401451b386d52efe815","sha512":"dc2f953706f4f595378e5c9a05d7a35ee95756c9e0e39dbfa389521f0a763d1cba213a8100d8bce2fa2718c28f39379f9c40b4cc36e0b844b2c3a96b9377adce","ssdeep":"384:tMeguTTF8c1l8Ch9S80tgC6yRoiMWYnwlNRg5vE7Q8HMTrT:tMfsW6GCh50t5O0A5v9gMXT","tlshash":"eb92c08fe5124861f61d9de2c667b050231d9eb749d9729ef0bfcc4a013dce21771a45","first_seen":"2025-10-12T07:48:56.667107Z","last_seen":"2026-08-19T22:40:47.367676Z","times_seen":82,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/44aa0e0c5b63b014.webp","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.588Z","timestamp":1787179217588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/44aa0e0c5b63b014.webp HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hffLlS1vM%2F9ZEqpTwEKq8fcVKdgJWYgH2DhYPi4EF2fMepRD7G7XYcjlHpnQPCHoAFhUX9%2FxngJB2iIWE8J8dTwBHiXxj0MgeRM7c%2Fomx9q75fv6jvS%2FUkK2BZ0x8u6qh2aTft7ihGZRbtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"78e4d82b238d72f71a3c1eda2de7d40b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42616,"size_decoded":43440,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x866, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"323b5f866c85249292a6fb8c99cd9c86","sha1":"2c25a75b4c94067a33ab3e38324cab0a97fa5b67","sha256":"b61ec35c56b4fc213190a74b72366975b5a3be0223c03f539b4025cfec8c55d8","sha512":"bae23ecd07db1d0f7eaecd4d18dfb97fcc8e7cec147dc8d3d1802ebe15e40d72f00d737f1ef8f35e25169bf5ab9366e0ce5b1c90ad841b5d4ff5eee4eae16b6c","ssdeep":"768:epmUOf1iCDJOVoeyREgtsMfKwuwiDhoXuyj1cuf9Z+3IrFzutmTOk:bCzoZolhyW89Z+s","tlshash":"d413e121a85f88e70409c4ee8ebd8f5fbe197d9173c9f691020d5055f2ee991f488fa1","first_seen":"2026-07-04T10:30:55.312615Z","last_seen":"2026-08-19T22:40:47.368169Z","times_seen":41,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/9101d5bc81c96a65.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.761Z","timestamp":1787179217761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/9101d5bc81c96a65.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w64DWtJL1mbCgwLFnmqxk4Rd4lTuCnY2IvlKbapYK8PiLZuSIA3ipbu5C9HKxw9f%2B%2FnCM5gYqNUB0paCz%2FNvivyKN%2FDRPwDog1RN1qbJAeICtx9q7gEZqj4dtK8U3SWLGvke4APIPgJXSJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8befdf6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/5fa31d0d117e8cf3.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.764Z","timestamp":1787179217764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/5fa31d0d117e8cf3.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SnD0T5SIhNNXyYHYWXmQ%2FuoDChTyV4Fm%2B5755gpFxqiBcSvu3W1Sif8gI2%2BO7lLkbNFLbzLJ1y5Yrzd4HcD7zFFQ643%2FO%2BywrUgPzgUneY%2B6fL2m6ER5OE9pVtckTXJkll4AgxG8%2BKQoYGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bf0df8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/bb7942f4b752b41c.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.571Z","timestamp":1787179217571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/bb7942f4b752b41c.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2edkTmuEl%2FYZf%2FzyVlLAMPyDay12Ft8kBPto2K62NCHeITKSRxx9D%2BjjM2lFOFK2cbCiQZHTOTAlCwY0M2%2FGy10VhHuh%2BgHDLiGZx6TX2%2Fd2v6SLqgfwyu%2Bh0TkBo0O7OtxeVKf87uv%2BkhE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8c7efbac99604082c396fe904380207a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdb5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20085\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20085,"size_decoded":20917,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"843e7ebe7ae17cc10b217375329e6b6e","sha1":"c9af7f7b6cdae180879300fe0082fa4f0a60cb1e","sha256":"04730aa6b3992201bd4a7bc814c13ce6e2c0284fd9e9b72e2cc26a6bf848c249","sha512":"7bf7aa0f53c071422f0ec81016152dcb0bca6d6e3a9e87aeb07801e2db3975978330b3a0c458cdb9f84d8d0a2d5cc1778348ef3d7c7cb1fe5caa10955c38e66b","ssdeep":"384:u7Jvi24+5ngrahcAICsgp+PLXUCKpbeuRXSAM7X91cZvwYdksfQBF:u7p1XNge7p+gCKEUSj/Od5oT","tlshash":"e092bfee3fe096817c366e7d83916204f4e2b8ddc18e48538b3586138edd9c437252d9","first_seen":"2025-10-12T07:48:56.639825Z","last_seen":"2026-08-19T22:40:47.368671Z","times_seen":82,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/27f6291a00b88bdb.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.589Z","timestamp":1787179217589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/27f6291a00b88bdb.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARTfAnrFP64h5zL5Mcl5zvvAjFZdqygSFNsTHd2kt9MV5mlbBEfamMmAPo%2FMhkn2WN56SDNZrMWQOi09K%2FC7RfM55nDQjGybxVn9uxreoCNghhP5FFHFEqlFQY%2FFpTFF9O1MqfXSyG658Go%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7e8d787195ea19d705523ab62982362c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":2593,"mime_type":"image/png","magic":"PNG image data, 142 x 41, 8-bit/color RGBA, non-interlaced","md5":"38de1c961a07b8775a1f371394823f5d","sha1":"d5641b182fdc34a993832ccb5bbca86f07d84c7c","sha256":"6d2ac0ff0c7768d59ab47eee3383fb917c81279f5f5e6dfe2360e5c3b42e52b3","sha512":"487fec2f394e354b5e9a4860cdc5a7a58dcccb5d3b8cb5ba7b049be8a2ff082b9b1025984a9fc43bc7d9f4c078342b989b4296d2327cbc77db9f84cca1f1f847","ssdeep":"","tlshash":"98312bd297898137891f53c6be8fc396fd4cc42668af4d216e46bc26053281cc7246fd","first_seen":"2025-10-12T07:48:56.616835Z","last_seen":"2026-08-19T22:40:47.3692Z","times_seen":80,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/515eebc335b5b4ff.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.717Z","timestamp":1787179217717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/515eebc335b5b4ff.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9DtmLFcGAJ1GeEJColhQcYraQq4QlocETaV9LlSK83jFttzDn32FHHHUC9t6My8DJSMtmfRKickAIEO%2BFr3xkCPtBjRaKQGV5r6Wq7VzefWJ34TtiRf0%2FF%2BPmppiYYhOz44QSkofhPOU6s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bebdd7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/f957d5ca50309f67.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.732Z","timestamp":1787179217732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/f957d5ca50309f67.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgnovBccIbW6KTbJld0WzkzOZkWjvSw1W2%2Filbi3tnn1bydpyQOjLAQNAVaFeFGLHBRZjWF86Gu5aHe6LEhTLrUFNK9nO4I42t1M6Asv%2FvtSLcYfC9OQv8HPoKnOkUADA0iqJ5JfP7Ojkw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becde1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6775,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/575f68fcd99e46af.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.562Z","timestamp":1787179217562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/575f68fcd99e46af.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNFVx4uSKf%2B8hjFemvyaI7o0NC2rl7NNUFbK6F3eaF8yWzmC0NtoMBXZeaXSRzOvmoKphmGVBIFpzzvCchGz4hDG62GFW9zXfXIn5shA1%2ByLZbLRg2EtfmOPaBD4qaXOzjbLQuoKhpiDHhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"888147a23345d1f2c62c09c27345d708\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdbdaac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18686,"size_decoded":19506,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"1598d4e1397893afab65099adb8177cd","sha1":"06a9b9ea260d14a3996ac1173093c1041008232f","sha256":"bc95ea72facb19b3a2e791f7d453ad3f6ae26715093af849ea2e997f5568085c","sha512":"862f23761ecf4326be9ffe39a18fb5e1e84be9a44157d822b55b86af2c40adad481428fe2cad766cedfc390c4c57a40ae8898ada36c54fc95f596774264f404e","ssdeep":"384:0H5PdFpoFJYrnNZZbO8yd8cdVAxQ3qsB/cGnPv9FapRFG9f:SsGNTa802mq2cUVFPf","tlshash":"a782d019ca717f87f90acc755118724bd322b912b2d3cb16fbb1bf8914b81d51518c28","first_seen":"2025-10-12T07:48:56.587042Z","last_seen":"2026-08-19T22:40:47.369729Z","times_seen":82,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/545c9e61dbe87147.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.580Z","timestamp":1787179217580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/545c9e61dbe87147.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKW7vDOacE9b3ZWcAYbAJ48xrOpNOwm5M7tdH9OI2KlGtN9OHMLCUl4zPBGLXA5pT1jb3REvyHjitJfoWd%2Bpu75%2Fb68N%2F%2BcLERovSgYe1ss%2BR1ZwaXS4OTGehoZhEWOeRXg4Ejk2N2yvIFk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"21f8a3aa40e43fe563885b84995d54b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddbdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19565\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19565,"size_decoded":20391,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"79ab9a51578a15bae5fcc273367f4df3","sha1":"65d62304507516c239a0f6e77e3c68ac53d79a44","sha256":"b5f51e3882841d3ebdf9a83a0e5ee1590ac4b7a6ee08bc240f1bea03a68d6d10","sha512":"aca431c380aed4fa232cb0eb799ad059d5ae4c240aa4bcc7f17e89faf4e6d13a68a26d90fcd46e9a21ba0def297de3db418ea1eb571d5d635d4848acb4d54017","ssdeep":"384:Jgp/BCqYuEjIxy4bkToQQ7+0xsAK1YyZ/uFCeHKHQaKvDD0zNS8VHfZWJOXhN2N1:KpEq9o/Tof7nnEYyte9HKHQaKvDQzNSj","tlshash":"9792d1e7e1279688b90b4d2b54210f3424f4ec872bcd1598bd3fdda6e1796d85a0e08c","first_seen":"2025-10-12T07:48:56.661326Z","last_seen":"2026-08-19T22:40:47.370233Z","times_seen":82,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/37a22c50a5aeaf95.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.711Z","timestamp":1787179217711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/37a22c50a5aeaf95.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zP7jXBce7Nv4KCS%2BcEK6OxlWfoAT4ijJbsSCaBbCZgNDyLfGQ3waEBhnXRCEBv7ra80YJb%2BtVDLkeETi5UfX0UmZDsSALIbTivT6Xa5C%2BSrMis4nvnjvLoCnT5twIyT%2FmGNIiP0XFIRLNVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beadd3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/9bc35b1e22984a55.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.731Z","timestamp":1787179217731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/9bc35b1e22984a55.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlYPpFd0HpE%2B1Vd7KnlXfSrBhP4e1b5GGLOrfxjV2PSUl322uGdqdMrom4MLzxUpAhnSWGahlbJOJXsFfDMh8D2iFkZv812FTfApeW6wgIgDF6twntFDUBB9J3ZKnxOiQkuK88xHXOXZg%2Fg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becddfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6775,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/df3fc6b114f9d57b.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.746Z","timestamp":1787179217746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/df3fc6b114f9d57b.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbAQDy%2B5UBSacBUvEsWPT9QRasmxev50SRW6epZarygcBzUIaEiKV8Z3w%2Bzr33DWq3%2FTjrqhoRiyZZsvhqvCUjQJMDtQOO9lJslm%2BiEs%2FmltUi0OM%2FeBPXqRC9Ophu%2BW72Um0T6hbGx7lnI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beededc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/2b9bfe2124ce983b.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.755Z","timestamp":1787179217755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/2b9bfe2124ce983b.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3%2FQ%2BLSkL9AUtyOrlka05B9YpWZoJm7cVpO%2BI9mp3VcPncYc%2FpIaVfbCD6kVP8F1kFva%2Fg%2FAODzfAUc2LkMjqvXkuJcxr7k45vClskaddnp8j6%2Fq0lAO6pastHvv7A%2Bb%2BtR65Uh46j%2BI5U4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8befdf5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6791,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/27ef97e3bd45b83d.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.572Z","timestamp":1787179217572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/27ef97e3bd45b83d.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yGwsHI0qaTBMxPMYAmhj5B1XxV3OU8prrJNH8jeJofkmvgtp7xFGr8b14AikgTq1qitG%2By6oTfjdZLiyNt4huvDAvAuF5xobxEh%2FZRiyvzDC7%2BvsMKnG%2FIpcJ6dos4N%2F88%2B3bOGk9Caopc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"efef86a971c8b751701be779d62c73eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdb6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17980,"size_decoded":18808,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"b97d085f5ff96cbe9974c0f0107a897d","sha1":"4e39de0c132dd5c10dde388be9eee4e7c29c63f5","sha256":"12c48c5369f818d2e15dd3ceed42c5424d3ab2ae6b71b22aaf3f8c596a54f4be","sha512":"95870b0cb22240ad1c6606ab33075c9123f7a45d803baee582ac2221150b3f6c0e3d905b7ac65d9ae84dfa9c02a4df8eaa385f40c9d0c5da4e0abc10b6bf9c0a","ssdeep":"384:UDOPgdLkWD5vxQCOi8szsbtzYThKC7zOxEEM0GhgBpFUoP:UDXllPH5UfQycoP","tlshash":"9d82c04336e377487e6c4e754abf0735a10ad23760623e43427ce99a2d854ec7d827ae","first_seen":"2025-10-12T07:48:56.64297Z","last_seen":"2026-08-19T22:40:47.370682Z","times_seen":82,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/67d33d63e178b993.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.579Z","timestamp":1787179217579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/67d33d63e178b993.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPS%2F29GNKfDM%2BRT9PXdJoW8mW1H8xUnQytzM8QuS26gM72c7awL2F5ZUrTp4YHpxWSbUM17yPSHylg3JRoPdEo9U7wipVYMbVlWBt6jC3lxXfRXluYprMjZh3BzYsNSqJWtgM9UDd3xnlrE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f125bd93b869a14c11d148d2a42afee4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddbcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21778,"size_decoded":22598,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"730b2d8168e5666da11f10561fa2727f","sha1":"5bcf4a2b9d87af29865764b13a1e3825851c4388","sha256":"2be30e062ae7482f87c8d50cc6568df7ad3c4cb247b1550b35bf8292837678c6","sha512":"ba5f47ddee27e0f818f21117e9faa61e98422412ab568873c36b0edcdc6ac31775677f83252f2fe40e5f07d647f128b2c1c2ded8a6db9a6dcf6c6a96b9ab3f72","ssdeep":"384:HF2AYV8ULedv1+k4OrxOl6AjmPwqYVxjMP3Zs4gJnukoVKca2lbYgXkaWdQpsvXf:EAQ4J1+KxOMAiPUxIP3oPCKcNboaWcsn","tlshash":"fca2e1d9a7a2d7c2e3a19ce5688d1e2a00506c18265f793c50b1cc2e95743eb92e0f7c","first_seen":"2025-10-12T07:48:56.698277Z","last_seen":"2026-08-19T22:40:47.37128Z","times_seen":82,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/0ced7ac418e5fde5.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.587Z","timestamp":1787179217587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/0ced7ac418e5fde5.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7vVzUHcJ%2BW270OC0scQEPJOH7kg%2BqKYd4qL%2BaK9fCc7itQlL1xulwndO7px%2FVUMnqPAPzH%2BEFG1oBxxQdDEn5JeuwiEdXGjEEe58E5OYcymURldEKbwZZs5VfaOaV2vBCLq2pDGlVukISk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"84333886e92e20ebf264d754aa89c53c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31410,"size_decoded":32236,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 266x354, components 3","md5":"d48fcc099c011ae9b29934b9a8e077c8","sha1":"3829068da0867c59db1ad0edb30a86f6ab153f7a","sha256":"808f411d7747e8f6bc7d0d50d0a75907d4fe273fff7a6caf69056988aaa85905","sha512":"b9d63a5f4a85a1d47b576a073261b5265df14740d2c34fe8cd8b597928b7606d3f65404421d86b9936db3d199394193d4fefd884a6bd9be35e840d5e04399d31","ssdeep":"768:0GPtReVzR24S5/egdNffgl/AvZDEacR9LLeTAC+P+69kg:0oilRJCrdNffI/AhEacbv39n","tlshash":"28e2f1809fdbc60ce5601e3002c2a8ba9d6964d50e74d91c53ffc92506bbbc4bd67adc","first_seen":"2025-10-12T07:48:56.713126Z","last_seen":"2026-08-19T22:40:47.371898Z","times_seen":82,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/dc2b44ed27871c02.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.597Z","timestamp":1787179217597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/dc2b44ed27871c02.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZdgZeOpbywuHM%2B1uLe7DbHJmzmxlq%2BP8O%2FMFwUe0kxjsf6yqf4wqC7UvFZgZ3qP80jAwzrjI%2B4PGHJkVbXpAl8gHxQh5cjjboaLzJJaGpbz2Fkfs4cVYPArktTIR7s0feTZuqrF%2FKOGL2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"bd96338986af60087b7ffe9a23fdba33\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdfdcec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":1956,"mime_type":"image/png","magic":"PNG image data, 48 x 47, 8-bit/color RGBA, non-interlaced","md5":"04b20105330893345b4d075d6108e127","sha1":"28369b84a763ad746bec2df4ea734deab2e8d72b","sha256":"bc3f763eb8bcea422bd126fa0c84f617f2de86d3f65eaf872d8b36c6b95dd11c","sha512":"df1d896b5e8b4576ed270f78ead380a44f0faa0c2f70cc1b5dbbbb8996d1206fa9d6f3a840dd45f8e85b07b62ef4d39ea2c88843048e5de6315c5b095687483a","ssdeep":"","tlshash":"ce21bdf306ce1b5618bb1424a1ca8c214c5c7baec6d7d15e7170f155317d440864bde7","first_seen":"2025-10-12T07:48:56.672025Z","last_seen":"2026-08-19T22:40:47.372523Z","times_seen":72,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/697397b100413585.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.733Z","timestamp":1787179217733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/697397b100413585.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b1EZhYtS%2FN%2FLXjTK0VPA8VBoZDMmuL1T2ishICmYG53260e4I3qtK3nEJkURBpZbmzif3rUQUR73XbhJxZWNvJk6PUdFfSWMhJJM%2FjwnuVmtu0SnYiOJKiFuhpNByJCgZ5AhRcPl94v5vZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bedde3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/23dbad207fc95a63.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.594Z","timestamp":1787179217594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/23dbad207fc95a63.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0wt%2B6TctsTcty3Tdzl8rBfXxcvkWeKyT7Wuvq4V6A2mQbyn54m%2FvSTMBdOfXCAAiOOTfFUe5FW3N44SHggLAouZxHMpTqIOPYo9dli0fmc0tfIfWSKd%2FeqDAJC5w8dfkcJSLIO9CBlnlWA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"bd96338986af60087b7ffe9a23fdba33\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdfdcbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":1952,"mime_type":"image/png","magic":"PNG image data, 48 x 47, 8-bit/color RGBA, non-interlaced","md5":"04b20105330893345b4d075d6108e127","sha1":"28369b84a763ad746bec2df4ea734deab2e8d72b","sha256":"bc3f763eb8bcea422bd126fa0c84f617f2de86d3f65eaf872d8b36c6b95dd11c","sha512":"df1d896b5e8b4576ed270f78ead380a44f0faa0c2f70cc1b5dbbbb8996d1206fa9d6f3a840dd45f8e85b07b62ef4d39ea2c88843048e5de6315c5b095687483a","ssdeep":"","tlshash":"ce21bdf306ce1b5618bb1424a1ca8c214c5c7baec6d7d15e7170f155317d440864bde7","first_seen":"2025-10-12T07:48:56.672025Z","last_seen":"2026-08-19T22:40:47.372523Z","times_seen":72,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/23dbf34d2e6ce046.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.710Z","timestamp":1787179217710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/23dbf34d2e6ce046.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pw0CpmOyeEuhpGzWV5t0uPaLZyMge3sMHW1NfoaGN%2BWUImkZu41Ggwqruexm21yiZvqLgtVeBwHyGZM%2FcPyVMBNarAqVmg0iUzEDSh%2BHXNWh%2BzOfbkQjd9LbfCV3c1t3MHyAljinaz%2BhEEM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beadd2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/41b942de5419da15.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.715Z","timestamp":1787179217715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/41b942de5419da15.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEoEUwv5Ky2783hI8OA%2Fh9FwWEwKY9Uo8R2kvE9ZZ1H66JTuG29emDiJGbqBeajo1cJc5OvMSrA3ewkwGdjxfEFCdrEDGWS%2BBBW%2BelWphetBDN26g7BSu9Ss0wXNIWC0%2BoE%2FHou7OPubnKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bebdd6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/292955c670f9e378.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.741Z","timestamp":1787179217741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/292955c670f9e378.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyozrQhazguu%2FQLNmuK54X0XrHGtiqnEdII047b0nt5hr%2Bg5PTsVkoH8V%2BwsLdE8nlqfB5b0%2FqGFw5W%2BVNknuPsSqfW64M7v%2B8QcCntnKc6R7N2TN4QShQBUGdu03%2BeQdl34cHBmtr2O%2BJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beddeac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6787,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/acf403a379d51dd8.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.749Z","timestamp":1787179217749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/acf403a379d51dd8.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwXH%2FtVkowesHXq%2B7VoW7PkCoz2YAI7RFXz2domGXsb%2F8fqZ4WpZVp8JfoCwhD1UMk0LK0MH9cfX3sistp0SKNJ51qYCcVTa1LdHRkSB4JeblylbZYYAErMNuR3pQQRP%2FESAbd2FO8TTSEM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beedf0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/5d4786d9d2180553.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.575Z","timestamp":1787179217575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/5d4786d9d2180553.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANLUjV1JIKXdNF0DtFswehIXD83CZFBLenrjhDSssiDcBejjU86efPVn8fuJ%2B05PN9dai%2FmlluRijUtbQGsY%2BdOUXAJ4cul5QmLjH94qPfVWkMnVyPncyz3iCiLwcf3ghEK15biWcvuJ0%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6929a613565eec4fa1f263833e7f9513\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddb9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23881\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23881,"size_decoded":24705,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"393f4894c0e31329594f3d4134390af6","sha1":"4d9d3ccc06018b47bdc16c0ddba6a139aaeaeb3a","sha256":"c6a0f17c941a19e0dc8261d685e1c01bc102b5a56347e4bfa2c1d5cc557f1f33","sha512":"58bb1d0e74a322a2bf91cd7c78b3f6192f47309d1adafdb8af01189d32e778ea8cdf7cefaa000aa69239ec01d25b1f11d9aef754cdddf6b3e738dbb49c510813","ssdeep":"384:Odf2QSlgRl7J7ti0sVSabC9AUVrl3oO3LovrnTEuEUHkJNNUA45ju9tVaN:OJTSKYZSaYbVrl4O78sUX8wN","tlshash":"36b2f2db7f8907e3686a0d324391c855d7d0ae82f63b1e0543f1e87a49750ec1a94226","first_seen":"2025-10-12T07:48:56.740436Z","last_seen":"2026-08-19T22:40:47.373053Z","times_seen":82,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/74a44c4e91ecba15.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.712Z","timestamp":1787179217712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/74a44c4e91ecba15.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FgAwjRAnyaMwO8AvjndV9LHvVf1kYUKb2UVs9hB5VP12JWtNkENqtIKIBI%2Fy7NYZoaurSPNo4PQmB6M0GvDfkbNQ9XEGh7kln16OjtdJd3eMPwNECOrU1yiidxhvagKzn96iS3%2Bp7akdLQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bebdd4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/0ec54f14f059262f.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.722Z","timestamp":1787179217722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/0ec54f14f059262f.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1W5JdEiX%2Fe%2F992mFS6EA8KaI%2Bmf1bg59zthkEC%2FgewX3rV5xe5NYqjdsO%2FFu4wLB0dpmNbeUHtmzD0XfMZumA62wtROgRqzZtffmx9gEr%2BOU5R52VkWmE2bKvBjbATWnmumO2%2FF8NRV6zQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bebdd9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/b00ca53f15c06ed3.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.736Z","timestamp":1787179217736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/b00ca53f15c06ed3.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nX%2FuMyDhtsSutt62uAmxB%2BEFcytcJWe8Cti6cV6ERsokhKNavIxU%2FAuasvHFKHfmrjUiSyW7SBtP5yyKSpK6KWfVg18drfiPFqOKjzs8%2F%2FeAAusTyJyUGEmoq1iVH5yNOx8TeVXbtnHmkgY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bedde5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/8c589c0d183fbb52.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.763Z","timestamp":1787179217763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/8c589c0d183fbb52.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SeOoQTxJ7ivooxwr1WKfSbdh19JOzr1TM10ozVFLXYo%2BovWJ2VsZMZwSnMyPBIV89pwFtv%2FVZX%2BXfW%2B3T4mneuyS5YNW95%2B%2FxCyvpA6HwUOnoqWoTFvcFfoELl8Gaqge9CJerwAf209L%2Blc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bf0df7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6726,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.553Z","timestamp":1787179217553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 21 Aug 2026 22:40:17 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vJW82sTEEAOkfYTS7e16GCDyzxPR24b8sXW0%2ButgBpmBNnvbh60FIAqrcrquV7jVIRv5aKfLX5Kzcg%2B48%2FQW1QNrsKFCoVljP2NnRRE6K%2FCMrsbShZycsBOVBwhsxWuvex3I%2FxJt%2BbpDLVs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\nserver: cloudflare\r\ncf-ray: a2dca8bdbda7c759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1256,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-20T01:30:42.447233Z","times_seen":422680,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/fbc960b20fd8a3f7.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.576Z","timestamp":1787179217576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/fbc960b20fd8a3f7.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIweonYeQHfjFLoX%2FpumfPTOQ3bKWTM0KlZ1igDTnguUkjglSG7wqMnZceI3NL1h8KZbbFK92OcixuGCPBSCpAkkgbP7D1%2FDg1VQwvy%2FJD8K%2FjxpzFZCadlewOZdweslCYU%2BWcpcFIVrGbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fce13ca6526e6e0dfe541f6e95bc4377\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddbac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20377\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20377,"size_decoded":21203,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"2830de20d1f744bb3a33ad4c2ea9d463","sha1":"50382faa7afcedc7929fd60537906f37ea9a9e4b","sha256":"f08d7168907d149487548a058ce0b0f0ffb5029f3c65c5d470d69e99a56b93ed","sha512":"24be110f02b1cb61bf971b69cf16dd7e8d63b2d55f07c2b97f0d04f8ea1fb38fcf826c1e7578f3bbb01918b5175e65a1c7788b670f7efef510f237ee866b07dd","ssdeep":"384:CwBgx1ZDOsG7dIujRXn58MwUqAytdX2C1uAW8HiphK3Ua9UuDd3ku5OU:C6gDZDOsMt5NwBtliPKpdUSOU","tlshash":"b192d025f7e0e271def19fbeaa41713474a27f4e9f834f852136c46d24008cd156e629","first_seen":"2025-10-12T07:48:56.651906Z","last_seen":"2026-08-19T22:40:47.374536Z","times_seen":82,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/a2e6afdfab5a95ea.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.583Z","timestamp":1787179217583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/a2e6afdfab5a95ea.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KB9tT4VD8i9sfAK166dK0tn7CPqSVoUU3l7JZA1mHXkqWmKgCP7DjKGfYiv9zcV%2F%2B%2B%2BX9sRq1dYH8VMHPZS2qtkkBXM97Lsd9MdlDKxHzfvZkj7Ze%2BEORDYjZmDYWMilmd%2Fy9KeQxkLZp6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3d46b2a153e7fcbc36ea189de3689362\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19273,"size_decoded":20101,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"e83e918323baaa0ec015a07220cfc8bc","sha1":"8598a4c6bc0203407f1075ae55df00ec2a71ab1a","sha256":"e0806f42619f031e872e4c6cb86aa6c0a50dbd5bc8f2eed49ed4e6ca93b430f9","sha512":"4eb83643fa9ba312dd4ade566f049bfa2f59b984a858cbe053b1e0f4036785e8ca28895f829ad73a10728f435e8a9b74817c33a63a1c38c4e7d120ea8a09c331","ssdeep":"384:l4cPgLBij8JGqhSd4qf7lyVWFZOqvATCTzg0NA/JpydL:rUsmXhSLDFZKCTzxNAhsL","tlshash":"ec82c0b0b3618e60d4ba5e768bfa079c3dc24b911f40a20fd918dc9014765e17b989eb","first_seen":"2025-10-12T07:48:56.626518Z","last_seen":"2026-08-19T22:40:47.375633Z","times_seen":82,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/e5f31b9870b71258.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.590Z","timestamp":1787179217590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/e5f31b9870b71258.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ilmb%2BRqKqmqc9XeSTZpNXMjt3a%2Fq1uS7j3Nwy%2BD%2FcYdXUWGZhHrl7d1%2Fow6HV7qty5PLOXwI0X5lVfZ6vBtiRzzLMb8TqpL6E5StiSy4c81psOD2PTHRZqq2ihqEZliMDiAPiiolcM8szEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1eb33195bc50f0eea856c28b67291759\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2428,"size_decoded":3252,"mime_type":"image/png","magic":"PNG image data, 142 x 27, 8-bit/color RGBA, non-interlaced","md5":"543f0f26c7990d1ced7d1703055457ea","sha1":"b84072f09b2ecc9008e36f80b49733d1a7a783bc","sha256":"d9ece0796556b71b5265008cb2e76dbcfe6df67c3ae0f18ed6c9cf8c8a66f8eb","sha512":"85b9aa85924dec653e2ca2580c0b9862a2a897f3077529bb75bfb13c066cf9e1912131ae42292b814b4fd4c13f974b1aea821d87efa5acf4907e05a2a0e391b2","ssdeep":"","tlshash":"a4413d4b359ff1b1ab64973073567420a42397db1306796c65ba4d0710791767ca0b31","first_seen":"2025-10-12T07:48:56.723836Z","last_seen":"2026-08-19T22:40:47.376256Z","times_seen":80,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/62c2fefd6195e400.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.731Z","timestamp":1787179217731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/62c2fefd6195e400.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsgcNE2Zsm6p9kJ1vKoy2vqJfVpQ2X1E52pvxI7eiP4rGkZq0AqJHhfye2MSN7ESmssA2qOgfaew2pDPCqAkFZh2aRiuVO0WE4DZz3%2F7o7xh8tOHmz%2Btfo3n1mT0Q%2F8pUKy6CbRMG9hmbJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becde0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/d91e64cc03233e3a.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.585Z","timestamp":1787179217585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/d91e64cc03233e3a.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JjJQdOl8z%2Bxpve%2B2Un4woZZ47FgbgQXGy1TDh7CdsH6%2B3otcnxBTIpRpMMteHarS%2Bt3v3iNAfc5gEh1r1pf91oegMgWyF8SfVQ1vScVpSfSu9B3%2F7N7ns8p%2FdoI4NDjsI6zaaY0tfs1qWXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0fadb21f0bbd665cb41d069f4c4eca68\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21767\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21767,"size_decoded":22595,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"7772a6bd94a7cb81bfddfaba0e1c9d55","sha1":"d9cafc4f80e1e7ae24cd149e2200aa9ec937f661","sha256":"424f0a2a42f5c954db2dd8e7e550b4f13f134183a5b0edb0442a722c04ddc5c2","sha512":"129fad282e84dab4f88538510bec2bf4817247a8728c2dade6ed35a6fb6c242bf6e555491fa8d056be04d34fca17cbd5b453468019a0471f25939b3907290755","ssdeep":"384:Dgvm6O6Wljl9vksp7yQyrKfPH1RP8nj5hzrq1uC1IU3klYOLYjwSQd:Dgvm6alxkshNG21RmfrWuC1IUskwSu","tlshash":"dca2d094ce5805bd70768c3b2d3982357c3aa96386de9353a471dc0f8265f89e9824bf","first_seen":"2025-10-12T07:48:56.603556Z","last_seen":"2026-08-19T22:40:47.376881Z","times_seen":82,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/themes/twentytwentyfour/style.css","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.524Z","timestamp":1787179217524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/style.css HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3KvgZ1knvYXbeTgS%2FSwRcd%2BTRQymlKQ%2FinG3xJkC3thkwjQoYtPHoFTAjaXkbc7rNNYJ6pu4c9XIRRE9CAXsnkb5F43D1bMwUQKetYQLlBEn%2B7st2XFpEutt9T6R2qffFsp0M2m9u1w%2FOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"07041c62240cbed511ba7c1436e46468\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bd8da5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30796,"size_decoded":7883,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29819)","md5":"76e9d8ea738e1a5ed842a43a13ef5128","sha1":"29c4bd61063a7419dc4a3454a2948acf93d31611","sha256":"40e0a54b8af13a0eee80221a1ec316723c9929a58ee6a7e8a21fbf77d3eddb13","sha512":"8f04076d499257ca7a8e4355f1cce576dd882dd51d3e8402de6aa8164d75c2b1409537e66d0a4f0075b55d82ed7def7c5142d94718b1b2917e501949b295f504","ssdeep":"384:WBHCI2qeMJM5vBL0xdYmJnq2qbnTedaJkJsC56d65s9dI2ZH1x5flgIg:WdJM5pVedIUZ","tlshash":"64d2c57bd518324cf123ce3453c897ad4168e521d4521bfdfa57a92287c7ba20af368e","first_seen":"2026-08-19T22:29:01.647547Z","last_seen":"2026-08-19T22:40:47.377394Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/themes/twentytwentyfour/script.js","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.525Z","timestamp":1787179217525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/script.js HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgwY4jA8n4OwLv9ezgJXPV3eTvLwGEp3iZbzDkbOY5q2Vg1W%2B8YsAnzvvIKI3GAIjKlAeK8ew1eZXziIlYEyGiArIspSASefE84cq6fhRri3w2VK%2Bjpc66Xe7msA7MCbnc1MzAX2Cz0zrKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b0744d10c2558d83cbb99d9f6f926d35\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bd8da6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1071,"size_decoded":1237,"mime_type":"application/javascript","magic":"ASCII text","md5":"cd185f8212c2335dc8c462be1b9a75ff","sha1":"cc7ed5b36f2fb6e02c41a1950140cf4da0471c52","sha256":"7d234b7c8b5451a37d26631958c3a683fb9ab60b248718a3ea38926153e0af92","sha512":"3b4c6c43faab9915aa9e80db6f6adb715e959d07a8fd1f38db052e308002d43bf833b890ca6ccf0a2779e6532b4428ee825d9dceaf88aa0ce1429983dde11036","ssdeep":"","tlshash":"4e115228357a54725137b65b77cf86943220208be445da863d7c8a822f91ca509f0bee","first_seen":"2026-08-19T22:29:01.637426Z","last_seen":"2026-08-19T22:40:47.377939Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/fdd42937f52285c1.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.570Z","timestamp":1787179217570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/fdd42937f52285c1.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tS4ExeUloAxIM%2BQ2%2FJ1Lod4d%2B8yfXYz1xxAnexDmIGtufCdt2ClN%2FAxXQzCxoPHdgY9V0sY2b1OlfxnupbqNlXGDKjkJSEr4nCq1ortrOaahWLPvQKIWuk%2B27oeoUjD3sbAFQCPqKbsL4qA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4251277eebce4731e2b64d9ced9cf1cc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdb2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16558,"size_decoded":17384,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"c1f6ce0e2b2e2e329d64d66d718933fb","sha1":"63c35c8ca4376f7b980b32b140a580752584ea5b","sha256":"d6f8f02c9efa915b3e3bfbba492ae7f9cdfcc34da0638c569fa77f6d59894992","sha512":"738db278d8e84dcbdfe08b87b01dcaa110356c28350a225a59122ed79507c045a0870e047ca838969d30b1233b4cccd4bc910eca73d530b75c788096f4a89018","ssdeep":"384:C5ccj51Kq83NJFZD/oF35jhvThvZQhccExW0bseT9Da8bj4j2l/qQe4:mccT83NJFZk3jl1vZ0VSvtxHl7","tlshash":"1072d1ebbfa5a015d5117c96ef472bc89b00f41f4c7483e538b4d886a867681bc1a4f3","first_seen":"2025-10-12T07:48:56.681199Z","last_seen":"2026-08-19T22:40:47.378747Z","times_seen":82,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/26cf6efe607badab.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.573Z","timestamp":1787179217573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/26cf6efe607badab.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYyl5nmDu29nrjNEMcUc5xEB8BW4B0zh86RZFA5gVcO62j2CdiE8htu7FmVZryHBKG9gCa86ZHwwdEjs2kW1m0JD2Iye1G%2Bx3O1oaYv%2BHoefTHzaeR6smhMm76pu%2Ftxl%2BAF9xiNpMavil5Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"711a49496727efc364c969a1d1585a9f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddb7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19509\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19509,"size_decoded":20333,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"4a4a7b11403a57b9a44c6003e08bf9a4","sha1":"7213b138996ff205e92675936c5de0740bce835d","sha256":"937087e34c8fbc643c605a3aa19f4e737544ea0b2214f857c597dd3645d2d816","sha512":"62a541768c16c1f53aba733f6181962cbddf8588dbc490e8a54e74c3615190f48596df1994ca986e74ed9cef4c9add928e4c3029df9c328a5b9c3a2c88859740","ssdeep":"384:eQSkwV+SOSSnTvFygSmBAEu9Hbktb6/HqB+DMcLHTyMH9:BlwVSSSnp1ra7ktb6/1M4TyMd","tlshash":"4a92c0379b49999fe6162fbc5ea347218acf588d18bb4ba344bcf0a823501e9d41d42d","first_seen":"2025-10-12T07:48:56.736156Z","last_seen":"2026-08-19T22:40:47.3793Z","times_seen":82,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/baeeffc473ebffce.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.574Z","timestamp":1787179217574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/baeeffc473ebffce.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3de48GWHr0NxjJrU93AcEo%2BrXtn3KT4IELhA2F6enIsebE%2BkPRrcV7x3jS%2FddHJJl0VK1e8HqnbYq0%2BNGMXSRFEmd9cwoHJiLZUdqRojRAWGB4qUMLgf44rHVYXHotmuFjvGUi2nMLa8uQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4365a85c9e5a9f97cbbeb8eb355bc039\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddb8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18424,"size_decoded":19248,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"5394a596c9b225fd736a72ddc4d952b2","sha1":"bb1df2cbc2496db5355e2c4d47094c63c08d7d48","sha256":"455f65415ce4fbd971e18bb0f823477d7409a289b726ba7c44b2dc196fc1b4b3","sha512":"1b4e1df9174216c8adf8ec4e3a4f7860aca88d7da472f03b3806a6e7bbbc4e99aaa62190d1540d7aff4cd36ead8eb3a2c35d2ad5082268ad922c1cc42d01b115","ssdeep":"384:jYsiuKVm3x/FjNbZjGjQdVPFvwP2VQ2htoBrMJTCsqR520:jYiKVm3FFj7GWF4ihghMJT4n","tlshash":"cf82cfa0da157c56fe396d7802356c0783038454ad261ac121bffaf446252ff95ef2d9","first_seen":"2025-10-12T07:48:56.623297Z","last_seen":"2026-08-19T22:40:47.379837Z","times_seen":82,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/16db42e19b22de6d.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.596Z","timestamp":1787179217596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/16db42e19b22de6d.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwL4jC78eFcSHYe4AN0y8V5Ln345EZGbHE3%2FXSlbdDFDGL5RLMbsOL5kykH03lPZJU5JSjoj3%2BXP3IC1dOZnopng81RCEkDVtf8SDZQngJAmWtdIXtFyKBwMML9UNxiVgZZnKsB6jCY74Ww%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7fd4547a3c9d59afaf332063de29e0d0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdfdcdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":2652,"mime_type":"image/png","magic":"PNG image data, 112 x 53, 8-bit/color RGBA, non-interlaced","md5":"b0e3ac9ebab6af5f48091dfaff855a54","sha1":"096de8f22039486621f167862d3cdd2f7d6d6a6a","sha256":"fed91cc5540efbbafc70f90d761c9caf1855a43f9ac0abdf58b43020bf1fca76","sha512":"6383332e70343cc4f6be1510e793ff8416c9a1d2de0b6e255121026683a162cb12075e2e41f0074d0eac618390f884a5365716cd50c2a1842b0b2dfe2c7439dc","ssdeep":"","tlshash":"8731094ebb253d6f55fd6e3d47245434a43f98bf3454293ce87745085ea520f60075a3","first_seen":"2025-10-12T07:48:56.729773Z","last_seen":"2026-08-19T22:40:47.363957Z","times_seen":80,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/15166ddd43227d09.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.734Z","timestamp":1787179217734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/15166ddd43227d09.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDZaLJC%2Bm17ud926CUf18yxzgZBm6cqyYZ4qR0RsKLpvndab2jqB6lmUHi7JK%2Bm7dDJXNfmSUczOPn67opwinHK77LHQAhj9i0aFnr78bs0Pj0XPp9anWoUSJXTF55c6zD%2Bt%2BZ%2BgCAItUdA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bedde4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/c855134583e456e4.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.566Z","timestamp":1787179217566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/c855134583e456e4.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6MrYDk5QogxnhP3MCVM9U%2BDiAxpJwEfssjjUJem90S0Hl6O%2FKKr3HS6jTrbEvue1me%2FwarLGbgD1ULxY%2B9VXNVuDpaDUL8HI6ZmHjUAJZ2axzUgN8uV4C5Sq0bRD9RmDvFGKqDin6aNPT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"407e74e0f1275b6ebe63544cc6c0f2bb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdaec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20713,"size_decoded":21537,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"e77c18be6bc9c3458fd95679b3256f70","sha1":"96078530acc96136747f79245cf4baa1cedcf15f","sha256":"011f43ed3812a0d4bb74da712ab13f37f5ed4cabfa87017ff352f1e69bf3066d","sha512":"73749bdd6d3a83c453fde8f65b88ebbfaccb3382decb7a8f3525dac44b6a0686cdcf63e0f3feaec9adbbd27732ef2043557f4f97a6bde6e7b8e8181bedb7254a","ssdeep":"384:M/Jjb8Ms7MTWdYCioypWZSJYTso2hZP+lDmaOPACGWlDFn85YMYsX:0xHobs4SJ+DAaDmaOPVs5dYK","tlshash":"c392f1b29bd896abeb876e27e01d41f4ca999146fe31c29914b9e03e100f5f1d81417d","first_seen":"2025-10-12T07:48:56.649133Z","last_seen":"2026-08-19T22:40:47.380352Z","times_seen":82,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/755533ca83177f02.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.569Z","timestamp":1787179217569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/755533ca83177f02.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K9%2Fyn5rZl2hs9AwkzSAZpw2d967mSNsHahxvLBb0xuf8Hs4BWjrX4ftLsdC9gbtV%2BuX1ienE2aX0k2Ah98H0GxLX63YRahF5YYO0N7gNPTvtJQlDOYS%2B9JKqF2x2UfjlqcMxtymz6y%2FC1Mw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"50326008a5df9a4c43a6be8cfb9be2b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdb0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19260,"size_decoded":20084,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"82da36d1ce860447b0c64e1f74db130d","sha1":"a798edb734fd4af73aee64cf8e4d5c24f2347507","sha256":"076e5be93589f4f87987aab6b4b1330779a5ee8eb2d446a34957f4fce33455e6","sha512":"cb0f15b4a741fe5c51a83ebba57853fc65ad67d8eb2a0a55c63899252e7b0d35e2534e59f6c22bda8e0b52d6cfde7adf372d08a3425a7e852ada1d957ccc5433","ssdeep":"384:RY1RLujg6+ioob66qhFravZHTJl3n9MmtXa+E4ioZzcK:uzLgg6jLqHravZTv39MxE9ZAK","tlshash":"c482d0b210c07f27f35c9ebeb7a8c87787e347295786b3876239de9292850c78848345","first_seen":"2025-10-12T07:48:56.620089Z","last_seen":"2026-08-19T22:40:47.380827Z","times_seen":82,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/59237dc5f9f3fcb3.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.577Z","timestamp":1787179217577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/59237dc5f9f3fcb3.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJyioPLZFq35oGW55K%2FhJSsYZxoBZuRVnlA3r1Zm6psKbyg0NUkW1C0dH7pq65IUZ1LIzpF0czuWU9ov5ekw3t%2FmM0yLXmI%2FyIUP60iZMlVg13yZlBE28oOpui5PE8Y82lf2P94BT5p%2FrkI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"079d4e097daf9bb343f614015a3e5347\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddbbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18762,"size_decoded":19588,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"9e1c77727835922ee9e6a536d2101423","sha1":"1f48885be11d26e1e3f7f59ccaa8e3a1eac0a42b","sha256":"23986db5adf93a07e9027ee63619ab0ded8b64778bbc3766ba3426ab25c81ca6","sha512":"1d30eecb07843f20e8eaed38f220d7940e158463c107616a1ad8a0eb64eef5155d53b7eea129bb85c13f701f713bc25fa47f3555edf8ecdbefa0826e1f23e687","ssdeep":"384:GxKOBzBWEY/LYfkWxU0mQvLAq7HHfDK9dh7i3Hd6/9G:8hsX/LLW9vvxTQiHdQG","tlshash":"dc82e00abf49c145cf44af11e85f6c67abd9c2624228b3833274cd568ade5e10d98bca","first_seen":"2025-10-12T07:48:56.717608Z","last_seen":"2026-08-19T22:40:47.381387Z","times_seen":82,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/b4daf8438612a674.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.586Z","timestamp":1787179217586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/b4daf8438612a674.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8amydBP9yoIMw4JOCekbVqsf8OhEstX8DCAARa9mQm2nZoqSo6vSd3gLc760c5bSbx3KDCdsZF0NN61gTBVAf%2BwnRYcc08ys%2BqWoqVRtuG3nOBKaHbBSe0Ry%2Fh4z%2FPk77EIwENyZTnnPD9A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"aa1f79e7536d4c3171d2426d91bc951c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc4c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24141\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24141,"size_decoded":24965,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"342238a10199f5584fe84850dd98b10a","sha1":"09a3641d178817003cc352974e4247683278ab0b","sha256":"e9e3e2b78902b7d98e95276a7a13ffad1cb72fd7f029b71a03a202c78651af42","sha512":"daedabab0980afcbdebf5a6639f8433dc5587a4814b7f15e2cd84562b08cd9162af1d85cf81e9e75461954920c78f934c81e326b0517b594a41642395e09e1ed","ssdeep":"384:lM9HVO2aqhb3cocBGa7VgNSxZKADqcoAvVaS6ujWR+LNyVaB7OZiblkmk+8VHMJU:l+Zt7a7VgkxBMWacjWYZFSiFk+R11NNe","tlshash":"29b2f172401811f9a29a7dea64ef9b541f335c83241f0869bab7e879103c2ca67cd1d2","first_seen":"2025-10-12T07:48:56.759175Z","last_seen":"2026-08-19T22:40:47.381888Z","times_seen":82,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/6a0a147fb19723d1.png","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.592Z","timestamp":1787179217592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/6a0a147fb19723d1.png HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShvpWkRcSbYkC7CtSEeNjGZa8t3OH9sZRaRGbYuC4eDxf%2BoJ1O6QooHhRKJRsGneqSttvzBid9EOgTqBkqT%2FRUyiwZLcRvdQkSOFFlPxAIQ5yvp9gQl%2BtQ%2FEkuMrBiEeg5knoFvoBteev68%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b743a4fc3f79d3d9726e8c97796da638\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdedc9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2070\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2070,"size_decoded":2892,"mime_type":"image/png","magic":"PNG image data, 200 x 29, 8-bit/color RGBA, non-interlaced","md5":"d2ec76eb63497a3be6c84d76342f7c8e","sha1":"22dec907b7dabe554c2cfb824a3fbfb06412e33c","sha256":"8a0a1981ce492013306885e7243bf162d403736313dc55e2df283cd00007be76","sha512":"a69a9a1ca455f541cf6a1085866341c0979a28b4d26cd5c7c5591ad9845ee2c03adcc83aec086a48a7e39d35bdfb86b0ab98fe7856dae9698dd09a0a85597f8f","ssdeep":"","tlshash":"ce41f8da2a10acf53c69c6399d54baf19512562fd58fdceeff1531380b09106cd74822","first_seen":"2025-10-12T07:48:56.63266Z","last_seen":"2026-08-19T22:40:47.366561Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/c177de0e268b2a11.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.721Z","timestamp":1787179217721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/c177de0e268b2a11.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2B30SiIWVmNmReiVv3lZViAX57MXNzQCKUsPDiWBbmsiVTJhW2ROCP7fZDmQ2K3gZvd6fJP9%2FEkdegDLaTD4vZVwYHLFsWXQloTMMCLLkc7fHatzea9dkGCmdMT3H42lNgHu%2FyV0lHM4oDM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bebdd8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/8d647835c047f23f.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.740Z","timestamp":1787179217740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/8d647835c047f23f.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIbWMqPMK1mqY%2B3OuiO%2FH2h7eP2n3HMIC2E28fzOddTZNHsYuGRy9%2BDl74sfh00WVubC7t7G%2B7xQohJGWXLB90WUP7b4l9%2B39ovemZ0tiBJ2%2BsOrVHJvQxAS6yIoSodgE3X7pwNeT08NHYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bedde9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/4a66e82623d9ad5b.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.744Z","timestamp":1787179217744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/4a66e82623d9ad5b.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJ7re2Y1XIlU9bELqgV4WQFvfGdcbZr%2FaJqQ%2Bp5v3MzhT81SqLKE7M%2BeFzsTP8ZvafGtNVOhW%2B8DoZC0ylFX8Gq194NAlOkTDJg%2FKeapr7szHA1OPwQyZNVBNLA0ifG%2Bkf8MfGXgEbtaoKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beedecc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6783,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/79838c5ab183bb2b.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.565Z","timestamp":1787179217565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/79838c5ab183bb2b.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXEcBf771k63%2FIhsU9WiUK6hvCM63wXFJxYoS5NTUNEN54R3M2xtAnLEavhbVIWiVhcqGfY1MkiRf1GEJNO%2BLQa35%2FLPJtswFYg%2BLbNeNzj8ehod1o%2FPAxmBCfcadOWSF3paHrygQ1uEIRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f983595d6c3ad55cc64f7747ecd21f0c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdcdadc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20677\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20677,"size_decoded":21503,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"b7ca976f7005f75e99b8864e76de6a99","sha1":"086103a1798abf487b80ea569d08126b610fe80a","sha256":"6ff52ff1573f92eca5873d04f10dda45a32c90d2fc38a1416eaba66711a16ce1","sha512":"236a47025de8ca904a6b70e1f5294f7322a25e0298e798cc7c58e293e83e774bf43b7427780edf4dd80d5d40aa3d5eb22be6513f683312a4199c145d220924b3","ssdeep":"384:H5svauSJL9pb8feVzwU2NSXFfQe3FZixXlyTneEufxzQz8QZFsJ:H5TpwW5h20FIeVwTweXJUIKFo","tlshash":"9892c0648d7f8111e59e0c3366b287ac2e197d478235abf7d038c9acf7d25cb166028a","first_seen":"2025-10-12T07:48:56.688486Z","last_seen":"2026-08-19T22:40:47.383553Z","times_seen":82,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/306f7b01961bd44b.jpg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.581Z","timestamp":1787179217581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/306f7b01961bd44b.jpg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6hNMtO%2FkMOyLtgyLnCKgFOz3nSyhKw%2Bm1jjoUnr3Qo%2BhhNLT%2BlO9mra2OKkzUjYxMe1jqU4HyshnTebtLYv95mbjGcT5AJ%2FJznu8tpJb7OCKh8rCV8NUtzxKbuV83behhcHdheNkNF%2Fm4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"34396c4a7f454141a11a7019e3cacf6c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2dca8bdddbfc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23065\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23065,"size_decoded":23893,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 266x354, components 3","md5":"e807f953f4d2f99b691d0432df9083b8","sha1":"d81228ed1a0954f84a077cb3e15c8927d0739ee5","sha256":"f2e40e082aa57cf53602d9ab943c4194e0dc7771f55cc89a3e74d21bb372c16a","sha512":"0faf8d4580dbe08422e0aaad3b4058e10b28e283e9ed954cb1163162cfce42985ee47fbf9be597850a4d96b5304dffc210bdf21a8ba78ca809044b1e302059a9","ssdeep":"384:mPUjURMwdcs7w1aFG6IYUK6oF6YmQZ8zFjmEopWZuxakmcwLLuunyKbpi3VSMs:mP4UuA7YaZUKJFXXERkWZuILuun3D","tlshash":"85a2e193f3595d49f0bc5e3d777a86b2d58616ea896c89f3117fc724433a3d2008611e","first_seen":"2025-10-12T07:48:56.595435Z","last_seen":"2026-08-19T22:40:47.385408Z","times_seen":82,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/897b993d1c9e28ce.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.727Z","timestamp":1787179217727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/897b993d1c9e28ce.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SXxFcD1m3WH7fvwd8kKdnOl%2BH3zpVA5ULvTEzDae4SL%2FM7pfuqPln%2FCtQ%2BTicWHflr6EcocJol2BV7%2BPKrgFs%2BgbKnKGLByRA069Xr6sRq462LCif2MRSPJJXjpSKoH1DEuwy7VrtJHwnY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becddcc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6783,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/f472d7d4a238b685.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.730Z","timestamp":1787179217730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/f472d7d4a238b685.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJi2cIiUQj%2BJKnt0VQOI5MZ%2B2N58eRdpGAmOyBeDRFPOvvSD6IrLRXvmqAstXzloMATFeKAfDfrbdWGFl%2BBqO1tHY19th8cI7yjFiBXNeTDDzg1rGGfppkIuksdsxYW411oZo3CV%2BJV5%2BsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becddec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6781,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/6d98171ca5609fa8.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.738Z","timestamp":1787179217738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/6d98171ca5609fa8.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWuJkD6zWRtQfDQmhIaPMibFwjWRag3q1J1MltiRevrWuV8wsoDqnIDVIT2cq60rzptr%2BF1FO%2BWx5yr7%2FBQ1bEN0%2BDBoycQ0daigjZwQd1k9nfCIz7YlXvY04UYwoZzbmbqE2EZLfXyT3EI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8bedde7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6779,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/23915e51c011358a.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.747Z","timestamp":1787179217747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/23915e51c011358a.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5i2tvoERVR6qW39TXjPcTVMdwYPAb1MYNpp2irRELqi5Cu3TykKkGBU3iA2Fcd1QsGSrfbT3o5ffqTJsWQK5e6rjA50Z6JEARAcqVzL70r4rocNkMK8xl2Qiuf8wtisKhPLb36Q2TztsGgI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beedefc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6771,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/01db396178090670.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.725Z","timestamp":1787179217725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/01db396178090670.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLYpGBHQMFPewQzO5YtCJQzF%2B09lO8Adniy2hYUgZZj21uF8XIU6TCxJouK8ysh1LWCFQaCoCjikT%2B%2BxWms8Rl%2BDokV6%2BmkbNizwWCM5cq3ud8gOcRK%2FhzcyQa9ErlTrLmc%2FQlYXyLo7ohI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8becddbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoromania.com/wp-content/uploads/2026/03/eba19ae920563fb2.svg","fqdn":"rainbetcasinoromania.com","domain":"rainbetcasinoromania.com","tld":"com"},"ip":{"addr":"172.67.199.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rainbetcasinoromania.com/","date":"2026-08-19T22:40:17.750Z","timestamp":1787179217750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoromania.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:32:21 GMT","end":"Wed, 30 Sep 2026 17:32:20 GMT"},"fingerprint":{"sha1":"92:B0:3C:5C:E5:39:7E:A0:15:E8:CE:1A:95:30:8E:CA:43:DD:85:13","sha256":"9D:FF:9B:76:C6:CC:16:9D:46:79:1C:4F:F3:AC:69:51:AE:F1:2C:5B:AC:A5:82:45:74:12:D9:C9:02:6C:09:3E"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/eba19ae920563fb2.svg HTTP/1.1\r\nHost: rainbetcasinoromania.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetcasinoromania.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LpwZE40l%2FBorTNWchZC2tZ%2F98PQm2VYNKmNzXl%2BxuqKT3vxY8nW2c%2B75pubyIPmOS4%2BirNYxCrhHpWYt3f0HoBeON9g4Xh%2FUHrwKkRTBBJZMBf%2FL0PP502d7bZmOFNoyVyNUPtDx5Ts6%2Fsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"23306222a45248858ca480e12d8b6939\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 19 Aug 2026 22:40:17 GMT\r\ncf-ray: a2dca8beedf1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16262,"size_decoded":6787,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"670470d454337c8c6eaee623167dabc3","sha1":"68a63e5a24ea782bd7b2ac0408055a09cb2ea990","sha256":"3106024d95e4eb371f4a2f8f0640c6c55755683d875a9a5d284c94976a736e84","sha512":"157abe4b93927f64b71f92cf5e21262ae3652da036bd250e25afaa10d6aeac8803a5bb30a6bb118ede022f08671203f5f41f87cd7b72641ce4ee80a7b6053ee1","ssdeep":"384:f1cNDhR1R7FDQiW/BBJLq/mBsPDuqV6updauX+:Ncr97FDQZByEsPC4pHX+","tlshash":"4c72c6ea533802dc54c79a6fff2564f9130fa4f7b95b81919d9e8bb89087a48f613d00","first_seen":"2025-10-12T07:48:56.600079Z","last_seen":"2026-08-19T22:40:47.360927Z","times_seen":80,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"rainbetcasinoromania.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}