{"report_id":"53c10e9b-d6a8-4bea-94ab-84dac221e4a5","version":0,"status":"done","tags":[],"date":"2026-07-17T09:19:34Z","url":{"schema":"http","addr":"rainbetcanadaofficial.com","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"title":"Rainbet Online Casino Platform and Live Betting","dom":{"size":277817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6281)","md5":"421953415648bd229554dd0105716d31","sha1":"caf7fda13cce8fefc66d68dfb6601f42e6c9908f","sha256":"67ddc394ae0c7f3ac85d2e2c0ca0af6b19599056e0e57c98f6ead074302f99b4","sha512":"0ffcc1b173a19499757b58eabf0a704c136685eed3cce380a846525c60aa831f901975091fb050d3243f9be5e3456b19f2d40eea6f03997b8c1cf2afc218c3c3","ssdeep":"3072:orqOqpP4mfpsqI9IF+HE3tjPEGtgD+gHwoK:org+mfplIWV","tlshash":"5344e92b169624592a2772799bade34c223da013cd05cde47edfd1488fc9f914a72f0e","dom_hash":"domhash8b251642322a536bb619c2329d11cbf2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcanadaofficial.com","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:19:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcanadaofficial.com","ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-07-16T11:05:05.760656Z","last_seen":"2026-07-16T11:05:05.760656Z","alert_count":108,"request_count":54,"received_data":937589,"sent_data":29813,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-17T09:19:36.588429Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d997ab58318af4f3c9694d545357707","sha1":"97795cb6515bc8f54243b16d2873034a763d84b6","sha256":"ed787fd2ca3b02c4c77a8de847887d608d00db31ecb968d1edb8f631bf76a3e2","sha512":"4adfa40d1ddb3b7238935e47a10951d8219914d28aa74a2bd844631ffa0a1fad588e420c1b6ee353240d0818ca41a9825f5aaab911ad73bba8b303fc0a0ce5cf","ssdeep":"","tlshash":"f901c056386021ba46e915b09c8b15ca6b9112a430c2a4f55828d4c137ed4eb2cbf9ff","size":696,"data":"","first_seen":"2026-07-16T11:05:09.682634Z","last_seen":"2026-07-17T09:19:36.588988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335be571d1f9586a0cf2f6952c4eec4","sha1":"f3b60c35f4f7b75ceb1266dbda8ac8d4b1ef11ce","sha256":"da1bed209470750a6c89d8f016d11e981ac975127f5db25aaf094404ecbec64f","sha512":"cebaf60fe3f7c0353c89f2de080ab49e6a5fd65040c113ae0d46f9b10f4b991b00bb15d61e287a60fe714a03569ee0fba4247de1acba85fd8ce02484aca505c1","ssdeep":"","tlshash":"91411868dbbe7662832ea0b62bfe52de143e547e7a814ebb7c38405048f48493715c7d","size":1934,"data":"","first_seen":"2026-06-10T08:18:22.002783Z","last_seen":"2026-07-17T09:19:36.590126Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"734f4123bd9d00402e9201dc792673dc","sha1":"710796b34136d0f59de7b0b59a199ff42eb1fb54","sha256":"0b4d06874ae2ee467755d5aeaa28d39a9aa61a02d44878543d166a47563b94a7","sha512":"9e4092c1622435b2c542c01909c796f389157d047b9d550bd18756bf5d18db74f082c1d8c9b31e265a1c3b1f0ad345f67b616484dab4826069c5cfaff4a5ded1","ssdeep":"","tlshash":"8f410d35f37d243147bf20b529e5669e2a3990823e878ca7cc9c9c0624c0e9d4875cfe","size":1942,"data":"","first_seen":"2026-07-16T11:05:09.684873Z","last_seen":"2026-07-17T09:19:36.590668Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-18T13:39:35.596142Z","times_seen":28755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2dfb47bc701ec19060b709f2d0e25c47","sha1":"90da9bec07a7ffdcecae9af73f233226c2389618","sha256":"5e3af44f143e6ab7e5196e90d9608b875cadb3e8306d2cbb572fd8fb2dc75fcb","sha512":"08a4cb9efcc312f5167b7eefbc7550faa48a92112be240c27d430312e3c7b869f1555ac05920e5537ede5d22e6e36087cd2e3dca8db31b6440efeab1d11843f9","ssdeep":"","tlshash":"32c080af949c1d4514ebc149417c53147114a813ce1f5f55f64f004c9ff80b97a145cb","size":182,"data":"","first_seen":"2026-07-16T11:05:09.686338Z","last_seen":"2026-07-17T09:19:36.592266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"22fa07c5b97ab47d5ba21b50efa5043d","sha1":"1f18f5be43998398d8d19d74890e57c90866944a","sha256":"53ce6081c0a7891443600509f476fce736960542b1ed6a88109e31d6e7398bc3","sha512":"8118087be173eab5d2bdbd2a80f67c6f42c6f018b8ad1ef44bbde34e04bbbdf2338fb5d218da87f5e9e84515e7e60b5936ca06cd72bdb5c5ddcf7c01f2bce56e","ssdeep":"","tlshash":"5ac02b2b0cd40f4315801fd74824e33b116c78a0dc10fc00a683c4804538a825b48002","size":131,"data":"","first_seen":"2026-07-17T09:19:36.593368Z","last_seen":"2026-07-17T09:19:36.593368Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ca1bde155051147861e771901bcef1b","sha1":"b9ce41029cf433bd2696ac9d52dc673fe5f03ed3","sha256":"3ceb9c77be6af21eca3e3bcab307156825451bf45022c9b41a9a66e4fc180b08","sha512":"eacf12b3d53ec582a5b2214ae33414874fc4bd3406e3d05d9dd6ae4175725ebe058d419d873278be9754acfdf6fe326636999a5a272741e6016b75b32eb05710","ssdeep":"","tlshash":"39111f3b3f6ca4f94bc163c903488d1fa1cc6440e09eca98d546ac2c09ac35b5b8db07","size":1091,"data":"","first_seen":"2026-07-16T11:05:09.688217Z","last_seen":"2026-07-17T09:19:36.594449Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8188552f4b3165689d154ca8584982b","sha1":"b962a3910231951e091f2c50158034691465469e","sha256":"edd24643a5b691bcd8b27120184687719669b99dc780086b2ccf668097fa37a2","sha512":"42fbe19de342ce5da5973a6b40760491a78e912c64bb4c86241706226f508e8d8e010451ac8b03c7f8314f8b73f66348575f0ea3afa51bf6dcef4d7ae76570d4","ssdeep":"","tlshash":"cef059db6b5c0432c25f305e105eb3cd3d7d803269412d67fc78c45248f0d98966289d","size":544,"data":"","first_seen":"2026-06-10T08:18:22.009293Z","last_seen":"2026-07-17T09:19:36.595508Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a85ad5ad6b7dc5739c536ead402ece9","sha1":"4f0bad18af7987df0ba4d003059b1229bf542b4b","sha256":"9bced38b31e02c72ccf4ab291b5cf6383aa18fc295986e66f14aaae8c684257a","sha512":"b5fcc29d39b6101604d6ff9bf50b8f74e98074175a795ed6ac5e77cd34267a203a827c23f9f7cc35b7195a7cb960243f4fe6224fa1d29bc8267ecf67b8bb86e7","ssdeep":"","tlshash":"842147c2f70c2432d5fe343f694a52cc252da071ac1014ba7d1c672c0572f9d46aa6ac","size":1366,"data":"","first_seen":"2026-06-10T08:18:22.012949Z","last_seen":"2026-07-17T09:19:36.596124Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-18T13:42:27.310095Z","times_seen":5240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-18T13:42:27.47195Z","times_seen":217201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/contact-form-7-js-before","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"280eb925d8f42320087afaa825f31f50","sha1":"345d0fd192bfcb18dae157e9d97fc63f3785bb78","sha256":"84e8be3471076735b17bd463c0d6f491cf98951bb39511870b7fd8580e2aa83a","sha512":"393802a728e5138c8fe2c9c05f2b4d183512fc981138c6079ac2588ba1c48922500a42e5726bad6a3c282a69e1b9a62d1445144c1aad4bfab878c52510bcbb7e","ssdeep":"3:HL6SVGDSiCmbFFlHrGMkI5xBF/FFhhzVEGUHsR5pHdFQAwaKLlUFrQAv:vLiRhDGMkIh1ulgpwAwaKZ4rQAv","tlshash":"fed112abd5981d4514eac179457c5314b114a817ca1f5e55f64e004c9fe80b96a1858a","size":6388,"data":"","first_seen":"2026-07-16T11:05:09.665639Z","last_seen":"2026-07-17T09:19:36.59669Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-18T13:42:27.444192Z","times_seen":224845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/scripts-js-extra","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d8a4730376feeadb7ca422706ab90d","sha1":"894dc23b36bd80c3520b95ddf17f1b9b29ecf671","sha256":"d26e7af43501514dbd64ed7092303cddd62a7d0975f0c78c75e1cee23415cf8c","sha512":"d9f6ccd94a9e895d41c99058fe6f4d8996d72c2491274e21701fdabe52aff48d587ed7cb2803e1f2da4cc8c7c4f4034a0f2ebfb29a5303a92efbd0e2f5bf1475","ssdeep":"3:H76EDew5vNVGMkIJVgrTHnJH+LX/ATwHzvKGY3r:H9xmMkIJVgrTQLXIgKGY7","tlshash":"f5d12b2bccd40f4315801ff74c28e33b11ac78a0dc50fc00a687c4804578a825b48002","size":6347,"data":"","first_seen":"2026-07-17T09:19:36.598298Z","last_seen":"2026-07-17T09:19:36.598298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","size":8564,"data":"","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-17T09:19:36.574842Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","size":40647,"data":"","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-18T11:07:04.170667Z","times_seen":8141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-18T13:42:27.341344Z","times_seen":5355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-i18n-js-after","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"49c429919fe49f571333af21d5de4b01","sha1":"ea83c67b9ab30a79b2d2a2ba8ab693b343ab020a","sha256":"597dc9f8211563d74cfb188fbc884461c0d6e80c0312d04ac71a55be01b9a6bc","sha512":"65b7ec1b707dd2dee860f2ef521e20f7075387771b18fd719687018600f633e0a368af50fbc9984c2fbd3e10753d05bb350bd50b88188d7aa484c2ad0373894b","ssdeep":"3:HyaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:SBLxTqtGmVOiFM/KGNMJ2","tlshash":"d3d112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6298,"data":"","first_seen":"2026-07-16T11:05:09.69341Z","last_seen":"2026-07-17T09:19:36.599477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/cmplz-cookiebanner-js-extra","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"59fda8581a058f688a48008712e1535b","sha1":"a06e20a641e070fac2af3c2bc45c6b6cb4e6d294","sha256":"d9a0768aced48e568af588d169db8226593916ed9173630ac52d3be9f1238466","sha512":"d5ffd357ab0d168a456b8134b60d0ef5a161faf975647b36d35b63d624c4fe762a156dea5d9546596475b5853e500559f22166dfb6cebdec012ab17dd3800726","ssdeep":"24:vRWNe+n+Cyf+8BUGaDNXQUi8qR0XEwCdqE81GFxEekEwgO2:vRWr9A5GGaAr8qR+CdLFSxgO2","tlshash":"6ae1da3bff6ca4b94bc163f907488d1fa1cc6440e09eca98d546ac2c09ac35b5b8db07","size":7313,"data":"","first_seen":"2026-07-16T11:05:09.664617Z","last_seen":"2026-07-17T09:19:36.600617Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"opt-in","filename":"https://rainbetcanadaofficial.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","line_number":1,"column_number":21068}]},"http":[{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/slot-mafia-logo-1-1-8.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.701Z","timestamp":1784279937701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/slot-mafia-logo-1-1-8.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13870\r\nlast-modified: Thu, 09 Apr 2026 09:29:39 GMT\r\netag: \"69d77183-362e\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13870,"size_decoded":14215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c8c0ec5bca8f1f3fb84bbaaa30919c1","sha1":"865dcf4b34ce4bae99d0ca36f2540b86f6553b92","sha256":"95a61edb440db2381ee48a9fab1c8a2bfe4b92937290a3d8727e6f8f91e0cc4d","sha512":"eeb46b1c393045bfa5e6fa34c93c31c32c18b322696606ee1ab3f34fe8408057b1c91e71d9c8a5aa505891ea0bcd7d51ea05712705bb55e1f50aa37d4cf81d20","ssdeep":"384:8wTcpa/ZFsVhzQdTn/tXBVBWsfBh5u+OOC61hcHr:JTGGiQdT/txnWspX4N61KL","tlshash":"21529c22433152e4ce635dbb23da3304e5f4aef9171d85a8641f22e55bb6abb210c91f","first_seen":"2025-11-13T03:52:08.192508Z","last_seen":"2026-07-17T09:19:36.549979Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/visa-mastercard.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.712Z","timestamp":1784279937712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/visa-mastercard.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4608\r\nlast-modified: Tue, 10 Feb 2026 16:16:17 GMT\r\netag: \"698b59d1-1200\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4608,"size_decoded":4952,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55a9e09633d5e4380ff62dca838709fb","sha1":"fec88ef9c189490f1982269ca3505cbb7967e05a","sha256":"478ad4887b473a408724e99d4c19151306d68ecf07b7cea0c962d594395b3d33","sha512":"b3d9d3a6006cf23134ca3180fa3263516ce86a7bb5eb13d1dd5ab0fd813c3c53725b383f7add8d319366747a97436c861eb444f8506afcb3c3eef25d0454a605","ssdeep":"96:3Elbw+iXWdcv3Q4SIUPYlh2Yydngte86k476X9juJfxFK1hatF3:qwTWOvUcBt+k4gu7c1haF3","tlshash":"23917e473f6699c4c0a1a9f1e84935e3ed16bf4f096f705185da957022138c2af6931f","first_seen":"2026-07-16T11:05:09.645774Z","last_seen":"2026-07-17T09:19:36.550735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/favicon-5-300x300.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.965Z","timestamp":1784279937965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-5-300x300.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1oZBVgcClYeDVAbAlgURVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4984\r\nlast-modified: Tue, 10 Feb 2026 15:55:41 GMT\r\netag: \"698b54fd-1378\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4984,"size_decoded":5328,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a25d5383999b8469ffd495ae287050a","sha1":"8a0ec1ace4858473f8468ed9d4dccc0c17ef4bf9","sha256":"87c28b17c7eff14a0761838a939e0522dd4f461c01c3a41af73aa5fefa685ef4","sha512":"20ec0eb4a3a588d8d621db496402d9fc8890013264664834e21632fe4e7352891b7ff569f4b5fe96d01bf1c26bc45ede2d271de0ca524a771203632f789c33c7","ssdeep":"96:sElbw+iXK1aHIXmPYuQVFq/lOv7PgSJM92yu8aZM48QGOqM3qBpfX3QM:5wT0aLuDqYkaM9M8JSZoSM","tlshash":"b5a17f75827c0a5ee37ecefd40c66e53d715fdb147641a7802d9818411e828e547e28b","first_seen":"2026-07-16T11:05:09.62458Z","last_seen":"2026-07-17T09:19:36.55148Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.678Z","timestamp":1784279937678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 984\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-3d8\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":984,"size_decoded":1353,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.672Z","timestamp":1784279937672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-30e0\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":3879,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-18T13:42:27.47195Z","times_seen":217201,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/fat-pirate-logo-12.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.690Z","timestamp":1784279937690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/fat-pirate-logo-12.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10304\r\nlast-modified: Thu, 09 Apr 2026 09:29:38 GMT\r\netag: \"69d77182-2840\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10304,"size_decoded":10649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb3abf1b63b529dacbfbce77141d0713","sha1":"d66d7cd249f048046bc3eec8d7eb37c345e6754d","sha256":"de13940234c35f39dc1a5b48c9123b4869f8df868e4290b255fb6683d48f86ee","sha512":"9454bf9ceae50728a7ce9a828c47a7001815531a84397bde6a5731cf3cc357f378fce1599a511f85536c1e6705c38a139d10b89c79111f3e10150865514a9202","ssdeep":"192:wwT9cKAJo9hSHQf5H4Q+uKTWl9S7gFuIM5fiQdPncQ/nQG3Rq8:wwTTVoGYQkWbSy2piQdvcCQGQ","tlshash":"b322c0f022522da8f203fdbb64ea5340d6ba2427961d37519311fbbf1f079c4249e98a","first_seen":"2025-11-13T03:52:08.194529Z","last_seen":"2026-07-17T09:19:36.553583Z","times_seen":13,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2021/06/bitcasino-1.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.692Z","timestamp":1784279937692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/bitcasino-1.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9362\r\nlast-modified: Thu, 28 May 2026 08:58:21 GMT\r\netag: \"6a1803ad-2492\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9362,"size_decoded":9706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-07-17T09:19:36.554611Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.694Z","timestamp":1784279937694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15200\r\nlast-modified: Tue, 09 Jun 2026 13:46:21 GMT\r\netag: \"6a28192d-3b60\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15200,"size_decoded":15545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a29908cb688d388f9d676f2df3005a","sha1":"08fd835f8877b50dfa0bf86c7c7289bf80bceb19","sha256":"e5387df49b389f37e9edeb9f2ad57bf1a905bde34505abd4b53abe7484104207","sha512":"5e8b9b2aaf1e4add5ab7d7fd51938b68f06bedbcc2fb14e60ab325e939b7ceb515d979ab18de9e276618df0be209cb4408b775264c1c0cb74d7da5acd852abaf","ssdeep":"384:VwT6fMoelWQoVm1B91IqkeutDRdzIww132gLcpznBGrJOov:KT6cWQoIWeMDzTw1voBOOo","tlshash":"f962d162361e5d30f093797ab2c3716f2329dd21a3794780624e54ef1bc8de20e885f8","first_seen":"2026-07-03T10:53:35.712019Z","last_seen":"2026-07-17T09:19:36.555317Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/goldex-casino-logo.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.699Z","timestamp":1784279937699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/goldex-casino-logo.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10772\r\nlast-modified: Thu, 09 Apr 2026 09:29:39 GMT\r\netag: \"69d77183-2a14\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10772,"size_decoded":11117,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b743c8b52d59a4896ed4a107b8464a5","sha1":"3c377e02290e1c945fe95683c6c48a30e9133af0","sha256":"3f6459adc35f31999790a201dbac78ccb7e39be24e50e3b903c0e1757ed6f995","sha512":"f8c1a06382479a20b21bafa7ac56d0a931e35372ec915d63195edabd161310b5de2b284ea2e879d256f63446033b10285caf2573948cdd17c481cae6444c986c","ssdeep":"192:QwTCf/R1TjpVlxSLqYUGYrcXrpbyC+oaAn/k1WL7bqVItIuPxwEmmc:QwTCnR1vpVqG5GYrcXrEhAM1XmtImwE4","tlshash":"2a22bff052338ab5ed435134a0e27bc4a0eff51c4fadcfa6874507032e66961969379e","first_seen":"2026-07-08T11:54:42.219485Z","last_seen":"2026-07-17T09:19:36.556302Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.658Z","timestamp":1784279937658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1027,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-17T09:19:36.556937Z","times_seen":34,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2021/06/Logo-black-2-scaled-1-1-1.png","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.695Z","timestamp":1784279937695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/Logo-black-2-scaled-1-1-1.png HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 35674\r\nlast-modified: Wed, 10 Jun 2026 14:38:22 GMT\r\netag: \"6a2976de-8b5a\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35674,"size_decoded":36018,"mime_type":"image/png","magic":"PNG image data, 240 x 112, 8-bit/color RGBA, non-interlaced","md5":"e3e7d3767b0ec1a8dc053f8a6d64b7c3","sha1":"f56d4cfe52e6207ea2ba7f4727e6f6b78f50042b","sha256":"1e9e342045c462ea2050b85f8489f560c2fc245da8136cae9e98827940748553","sha512":"b080ad48f4b33103f3f1c41a12e0e578f2951cada4ee3418922ffd983499cb37686ef31319eb01ab5dc5d3ba0d1512e627204b7947360b1d1e0b967859f7421d","ssdeep":"768:nLPNALQ1XHGFOHLLT6eDDHhV8x0oLu5agG3oAz9vVq+:nd1XH80LLu6HTN+u5ag89zxVJ","tlshash":"cbf2f1e25e5952b49d18e328cf00d16a573f196e80ff3a9f88f84f24132ee5ee40465a","first_seen":"2026-06-22T07:10:50.454495Z","last_seen":"2026-07-17T09:19:36.557534Z","times_seen":7,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2021/06/casea.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.696Z","timestamp":1784279937696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casea.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4626\r\nlast-modified: Thu, 28 May 2026 08:58:22 GMT\r\netag: \"6a1803ae-1212\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4626,"size_decoded":4970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99854d0a11a9071b5bd0c7b524240ec4","sha1":"cf6a6a259afdadcfe429374ad3a0d51e30c9262d","sha256":"333b32661434cb1ae472903224465055af7f02193ac37189529020f6204276d6","sha512":"017b2a49e749a74b0f8b61217bbffe0a88b766d7441410b96d0672b3b4826b3edb71c4e139206dc9d734b68fd1593e91b9030969ee93b0824ab027a7943110a1","ssdeep":"96:gElbw+iZT9OliRStMUZedQGjvTOIimJV8endhCPllse5DHFmEF:FwjGiRStlopj7OIisVNdAPbxF1","tlshash":"45918d712f4653bdc1180af80b69f18b83ddb03cc1ee466b54940023be614e6acd1ec7","first_seen":"2026-07-03T10:53:35.713042Z","last_seen":"2026-07-17T09:19:36.55851Z","times_seen":8,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.877Z","timestamp":1784279937877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4c08\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.691Z","timestamp":1784279937691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588191-5fe\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-17T09:19:36.560105Z","times_seen":44,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.874Z","timestamp":1784279937874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4c7c\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:58.045Z","timestamp":1784279938045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1oZBVgcClYeDVAbAlgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4c7c\"\r\nexpires: Sun, 16 Aug 2026 09:18:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.653Z","timestamp":1784279937653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:13:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c0b5-d0f\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-18T12:15:38.788221Z","times_seen":4465,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/lukki-casino-8.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.706Z","timestamp":1784279937706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/lukki-casino-8.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4418\r\nlast-modified: Thu, 09 Apr 2026 09:29:39 GMT\r\netag: \"69d77183-1142\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4418,"size_decoded":4762,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d01b3e09ac6a68bf4ddd5088eeece361","sha1":"bc6eb050ea932e43f3c03c6dde7a584b9545b7b5","sha256":"d9db133b5472ada60b4553b9b14628cbb581b4aa8d9040806980bf3e74e47cdd","sha512":"d5024135988eb1fe6d7343af4b185a87a3bdccdec270cdb5c02be82dd856bcb9db604ea4e2d70131e6381ed321d99905a9c27909e6c4b5d92d4302d9a6314db2","ssdeep":"96:TElbw+iXtIRGmci3vpvaJmkrL9Bu1ROoSD86pOvBVeKlginBdCrbFzN:OwTCUmci/BaJ1XSFVFLBYPf","tlshash":"05915d1e97a6d382eb216ffce1902356a3157d31c2857d3145e9672b8300ee42f59e2b","first_seen":"2025-11-13T03:52:08.129441Z","last_seen":"2026-07-17T09:19:36.562412Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/gordon-moody-1.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.718Z","timestamp":1784279937718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gordon-moody-1.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10726\r\nlast-modified: Tue, 24 Feb 2026 12:25:26 GMT\r\netag: \"699d98b6-29e6\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10726,"size_decoded":11071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a29304823c632caa324e70130435c8db","sha1":"968d55beef76e1306673bb932059daadb4787a53","sha256":"4aa4b6eb193f0785947442dc0086bc630da24899842f5e7b00ea49ca78b26a5b","sha512":"b592dac2a0e069760082f4e51b86887b0f32310b7d946a84bcfbdfbed0fb3809f63fa1f3cffe5c01a997beea8fe0820b98e8ad41a2d41f880d96c9631a49a6d7","ssdeep":"192:4wm+LfX7hgce7AUzLZdTzN1rZ/DOfjyTOKSLQB5suCqYaj42i7IQP3INNLMxmU:4w/X7C067nXrZ/DoGTaLQjCR7KEV","tlshash":"e622bf1fbf293199f30376b51a907934931c8a3481ddeb3994060d3cfa1c5c2b9da08b","first_seen":"2026-07-08T12:11:29.131367Z","last_seen":"2026-07-17T09:19:36.563014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:58.049Z","timestamp":1784279938049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1oZBVgcClYeDVAbAlgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4c08\"\r\nexpires: Sun, 16 Aug 2026 09:18:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/background-3.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.832Z","timestamp":1784279937832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/background-3.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15746\r\nlast-modified: Tue, 10 Feb 2026 16:36:09 GMT\r\netag: \"698b5e79-3d82\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15746,"size_decoded":16091,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e6de3b2741fd76b7e5dc21689524234","sha1":"9c3543cbb4251d5eca8727f63948ec855a548c1d","sha256":"5c33aa405b6e37fe780353890685322370ecdbd4795d333eb1c5b257cf6fcd9d","sha512":"db427daff9d1b0571b1a933ee2749429f29b4a3b631c9d2467767224e4e725bc3c72f7b053e2703a05d62e5848b63af6ab9a37f1f21fd02fc3a6baad1a3cd4f2","ssdeep":"384:twZ4tw6ZZcDFtf7vFONSWQvr2EKVeIRie:SmtwMZcff7dO4DvCJ7","tlshash":"e262d1e2b3b4c310f30a5d3668c9ae2ac880cf27456ae4d9443d1d5d29c1541defe6dc","first_seen":"2026-07-16T11:05:09.621218Z","last_seen":"2026-07-17T09:19:36.564172Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.674Z","timestamp":1784279937674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-348c\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":4641,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-18T13:42:27.444192Z","times_seen":224845,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.689Z","timestamp":1784279937689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588191-5fe\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-17T09:19:36.565344Z","times_seen":43,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/interac.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.710Z","timestamp":1784279937710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/interac.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2982\r\nlast-modified: Mon, 27 Apr 2026 13:19:52 GMT\r\netag: \"69ef6278-ba6\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2982,"size_decoded":3325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"641926d0a6599b44a06964a62a5b5733","sha1":"d4496627f44e1c66f24231c6bb73b181527597c3","sha256":"b64169ca899a5cafad62fdf79323ce1e43e080fc64f58eebeed24e9c3839ebd0","sha512":"b17ba90c6f5d8776bb20cb654ad3fd35aa9c9812f6511469ef4e0480fbb6254dcf7b134e99fa98fd335deeeacff572a7290e7f72258c9afb374d7c90350e3fb1","ssdeep":"","tlshash":"d451f816acb313a3d55fb33a1ce93b5cc7234645acc053ea36e589630e414c22d77183","first_seen":"2026-07-16T11:05:09.655069Z","last_seen":"2026-07-17T09:19:36.56594Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/logo-playfina.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.709Z","timestamp":1784279937709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/logo-playfina.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36516\r\nlast-modified: Thu, 09 Apr 2026 09:29:38 GMT\r\netag: \"69d77182-8ea4\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36516,"size_decoded":36861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78d693c5ffcb8938f9d786a438c637a1","sha1":"cbab5f0e49f47e88cbcf3e0e929dfe9375c7ca11","sha256":"159396cb290ee45165cbaa7d8d0d691d22e090f6c56ae107106ec4589af3f15f","sha512":"606109185e43a415dd6bc365a8fbb1cf975436ecd6a119ffb108c18bd4bd6b5025f1ab21568df69f2202c0519f327cd4f15210ce8ccba4a47b5aea8103d97021","ssdeep":"768:VTNOoMmLx7Qh5c2P8lV8/ST7KBLuuyWn/6pBGdCF0SJWgv:3nzx7Qh5c6+8/ST7uuuy4ypwu4w","tlshash":"b6f2e09b6316770aef789b7c7ec2ea53702b79109ef85aa3d07084a329981c69495c84","first_seen":"2026-06-22T07:10:50.512438Z","last_seen":"2026-07-17T09:19:36.566536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/crypto.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.713Z","timestamp":1784279937713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/crypto.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8936\r\nlast-modified: Tue, 10 Feb 2026 16:16:13 GMT\r\netag: \"698b59cd-22e8\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8936,"size_decoded":9280,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90be702530632980af151d7abcebf060","sha1":"d0473a07b330d5c150cec97a9461a5d24e7f3b54","sha256":"bff570ae13f2f006ede83d31dfd81fdffc51aa1e0a6a62a9f3392493dd9ae91c","sha512":"08f9003e4c9d1af880acb17dffe7e30ee754889453c7c02d05a7ecccecc08da0b50a2c539912b858e9f4c86fa0e9e97927b047a123c12f17fcb80a219f362a09","ssdeep":"192:VwT0qSsxhdzLgaiB6aY5sOK5UYWMPOvOQ9w1NbtCD3C:VwT0qxhdvgaiBa5sOAUYnPOvOIwRCbC","tlshash":"2602b063b768abd9e80a6175110b2f24d42339230f8d34d4fe5c25c3566bba82f455fb","first_seen":"2026-07-08T12:11:29.165598Z","last_seen":"2026-07-17T09:19:36.567149Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/e-cogra.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.716Z","timestamp":1784279937716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/e-cogra.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3290\r\nlast-modified: Tue, 10 Feb 2026 16:16:14 GMT\r\netag: \"698b59ce-cda\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3290,"size_decoded":3633,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"784df1bc85fceab4db9b889f86aaba8d","sha1":"a885264019d189425f1070ffd650b9b154e03f92","sha256":"5114fbb60fe14892f8b53ad458cb5016625951dcc9d8332979d42c84f0673985","sha512":"9dc98766d7126fbc40ab7f185ec67661d3bae74285866b935118b28fa8d7fc9e21a711b7d480f0b4cc6e889e51920c59475988dbbbdc0c7c075cfa63d7b152c9","ssdeep":"","tlshash":"3e612b72737dab6ae911567260402787d25cf032d66ac74a37d01273a36dddc1e1f0da","first_seen":"2026-07-08T12:11:29.19487Z","last_seen":"2026-07-17T09:19:36.567715Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/gamblers-anonymous.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.721Z","timestamp":1784279937721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/gamblers-anonymous.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4188\r\nlast-modified: Tue, 10 Feb 2026 16:16:15 GMT\r\netag: \"698b59cf-105c\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4188,"size_decoded":4532,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d679ae3bd48192653c8c8a6e5942ce7","sha1":"c56b71f5996147947ed4a92afa2ad43885f1111b","sha256":"2e580df9323a347044575ef2b4eeac85b12affff720e913d8b91a7252207a994","sha512":"3883caea8078264cfa3cf455f1d5322d221ba5ab748684a1b2b224722ee42f3d480e4f9fed0812ddfbb777d9fbc867312254251be3d4f27e562ccafb30b58bbd","ssdeep":"96:2Elbw+iXQ0o80SkEglTOFU5v1P0gslhX7kQZid4vO8uu:zwTWKgZOK1cHoQZe4Ou","tlshash":"a0816d6df3b62356e8031bb8e42257563e1ebc744b83f06b864513b23d400e6669c353","first_seen":"2026-07-08T12:11:29.148058Z","last_seen":"2026-07-17T09:19:36.56832Z","times_seen":5,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:58.048Z","timestamp":1784279938048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1oZBVgcClYeDVAbAlgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4d38\"\r\nexpires: Sun, 16 Aug 2026 09:18:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/05/rainbet_casino.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.660Z","timestamp":1784279937660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/rainbet_casino.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45648\r\nlast-modified: Sat, 23 May 2026 09:27:47 GMT\r\netag: \"6a117313-b250\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45648,"size_decoded":45993,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b1afb57f977d070241ea346c3556758","sha1":"8025ec797ac326aee90f612915423fee4bf1e7f1","sha256":"3a88c1e0c2af04aa33bff3cba57d8a792fba5d96bdfb24beec7d4d13b28dac67","sha512":"3b12d04b51cb45cf48c55ce61cc1f6204cbb178507f42b24b87129c0045da12be05197eacabaf5f12a9e494a08369b5782a5d89f8504486c824155684b65512a","ssdeep":"768:ethyFjLiBS/yZJMlbCU07OADnl4kwhwH7YxQJmDc7tSisTjGpqL7fZwFt9:eTFS2Ml07OAzlGhwH7vJmDPJAmW79","tlshash":"ce23e17ddabd146457db03790edc1a0ac237466a994cb24a9c4d179a2e430f74f32bcb","first_seen":"2026-07-16T11:05:09.638409Z","last_seen":"2026-07-17T09:19:36.569777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/logo-200x50-4.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.688Z","timestamp":1784279937688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/logo-200x50-4.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4666\r\nlast-modified: Tue, 10 Feb 2026 16:06:53 GMT\r\netag: \"698b579d-123a\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4666,"size_decoded":5010,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"804bed8412877b1a644280d74ab2c77e","sha1":"bfdf5d6d8223a4190d599e6bdeb532eb61057eb9","sha256":"8cbe468fc22c701b26977c093ab73ed3fb47411f58d98e92330a7475facda193","sha512":"40deeb02036553a54a3391f01437731401105d3cadcdf6eec5059ae9776efb087c8c53e3ed07033369d3a5e6968011491673ceba2b60899e829533cbbaaf8725","ssdeep":"96:LElbw+iXRk3XFJ0VqokTvBGlLr7b8tDCJs2OhorbpI9H8Ke73UOm6hm37C:WwTq1JrhTpkLgtmJsPoRI9H1e73mC","tlshash":"3aa16d40c9548a5ced8cfdb2e2a197f0fe610913ea075a91c384816e0b4d1ec9bce78b","first_seen":"2026-07-16T11:05:09.657686Z","last_seen":"2026-07-17T09:19:36.571252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/ssl-secured.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.722Z","timestamp":1784279937722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/ssl-secured.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4792\r\nlast-modified: Tue, 10 Feb 2026 16:16:17 GMT\r\netag: \"698b59d1-12b8\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":5136,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2852abb5d2784a21f7af235e332f6d32","sha1":"cd836f41e0e47bab1729096e8ad29e8085e2be65","sha256":"f19c6225cdc5789bef81e53a10e28265a5185bbcbb33bde7181be362ce8c83fa","sha512":"1e02c32c8635c6f6db2d673b0a185de7bcbeccf6751e77999bb9463d7eb5e84da8d940cec19c0dfe40547ed410f63b2255b3ad81b380182a71acfbf14cedfa4e","ssdeep":"96:wElbw+iXtcFUwALK6FBhvWn4z0lqjyQHlyJx+UZ5isOYgetltGau3yYAkmbpFBe:VwTiyVK65ug0gjyQFyJpZ5dzbtijafe","tlshash":"c0a1ae7dd69172c0dff72e38a0906d505f5e1d294fc2c28392ed1201ffd4982a45a00f","first_seen":"2026-07-08T12:11:29.150265Z","last_seen":"2026-07-17T09:19:36.572405Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/1xbet-2.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.704Z","timestamp":1784279937704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/1xbet-2.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21310\r\nlast-modified: Thu, 09 Apr 2026 09:29:39 GMT\r\netag: \"69d77183-533e\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21310,"size_decoded":21655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77eec379564edb6287104dfda9645466","sha1":"341adf4051f285ba548cdea4569a7547098ea883","sha256":"a1342708a6d7976d0ae545897dcfeef18e26cb9792b098ac8a72999d78416d17","sha512":"4aab9dc2c8f5fa606939a1588a9d5e9c04754b8ebdc7d6934f05ee3efc0a2c0cf8c2659e3b103f359388e94d1efe75c0aaac1477f2739d2d47ff2af666afd562","ssdeep":"384:XwTxfReHXGpEudnM4xN54obhB4lguiukpxHIPIso8sbCSkGCfIvIcAQ8N:ATxfEHXOJxfxuvk7TzbCvG5rAQ8","tlshash":"24a2bf4acea20493d357cef92ac497824b79926ac429e03549b1460163efcd49e6cfcd","first_seen":"2026-05-10T08:25:06.379303Z","last_seen":"2026-07-17T09:19:36.572989Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.681Z","timestamp":1784279937681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 598\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\netag: \"660dd398-256\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598,"size_decoded":967,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.669Z","timestamp":1784279937669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 06:54:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588019-13ba\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5050,"size_decoded":2205,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-18T13:42:27.341344Z","times_seen":5355,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.676Z","timestamp":1784279937676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588191-2174\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8564,"size_decoded":3064,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-17T09:19:36.574842Z","times_seen":11,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.867Z","timestamp":1784279937867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4bc4\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-18T10:56:39.587472Z","times_seen":138,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.876Z","timestamp":1784279937876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4d38\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-includes/css/dashicons.min.css","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.654Z","timestamp":1784279937654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 06:54:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588019-e67c\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59004,"size_decoded":36087,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-18T13:42:27.374933Z","times_seen":62154,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/dmca-protected.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.715Z","timestamp":1784279937715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/dmca-protected.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3140\r\nlast-modified: Tue, 10 Feb 2026 16:16:13 GMT\r\netag: \"698b59cd-c44\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3140,"size_decoded":3483,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4580e6da433fc59c555d0b4c3006f2e2","sha1":"573a0e22d03cdb7aa794e5409c317018e146f5b5","sha256":"884b61ebd16a2bc9b304383975a232d0b8a9ea1ce32fd37e49a6dd613d94a5bc","sha512":"eba650982d72662f651a18a63e546aac2ece5f807a088242e09979ba575b32d121b0ce460d3739ecce8d1e53dde909f22beba9d38eea6f3e0d03d3df8c9538f4","ssdeep":"","tlshash":"74515d9f17ad4f1cefbcb5b932c21f52e777a92fc2af5d128041076309053d222040a6","first_seen":"2026-07-08T12:11:29.195932Z","last_seen":"2026-07-17T09:19:36.576705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/mc-afee-secure.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.720Z","timestamp":1784279937720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/mc-afee-secure.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2086\r\nlast-modified: Tue, 10 Feb 2026 16:16:16 GMT\r\netag: \"698b59d0-826\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2086,"size_decoded":2429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01cc7ffbd9b08546811c16d036cde6a0","sha1":"561c6a6520bc561aa2c436c9ae1152f3bd617a7b","sha256":"3788a634740edcf53414dae9102ea8aafa097cd3549ea21df3a5d297736c757b","sha512":"ec9e1a49dd546a61f97f195f6cb516707e8452d2fcc0256e7d791cdf902f91ed257caf31dbb24047e956ae93cc3315b7875d83eef9c019d91a9dcc8b94bc7da0","ssdeep":"","tlshash":"e441c876e36cd3dcc094b63d76b21bc173ba3834ca56afd2818088694a35dc43454cd3","first_seen":"2026-07-08T12:11:29.149171Z","last_seen":"2026-07-17T09:19:36.577282Z","times_seen":5,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/complianz/css/banner-1-optin.css?v=203","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.936Z","timestamp":1784279937936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=203 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 May 2026 09:43:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1176d9-3b6a\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15210,"size_decoded":3213,"mime_type":"text/css","magic":"ASCII text, with very long lines (15210), with no line terminators","md5":"80fcbb2e7a262d0bcea18bbc776307ea","sha1":"6eab131b48149254f53544fd4fc67787cf2b5bba","sha256":"0adf4c1707289b6da4d080fb5f72bdbef5a3e64f56eaa2f5c43126cc04a807d6","sha512":"d81e1803063c128600816b166495fc64a4365e8dd07e187f53485afb62545c7e2c252f5e88bdc6bf047a1a505b848d79bd4301568a0c0aebbcafa9de8bd6fcf2","ssdeep":"96:su9ppeDJzne6nxZ1csUi5p8Z1cAvqlIWurrkTobudlYLhf8Iqb56qlym6OoLBa/V:f04AWDi5cWi2IWRzZbz3sMBd","tlshash":"ae6222a99e0c1164e7dfdf1c37aa8a0e9114f731b29d5af824a16850f2fe5d11d2e383","first_seen":"2026-07-16T11:05:09.623549Z","last_seen":"2026-07-17T09:19:36.577837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.657Z","timestamp":1784279937657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Feb 2026 15:47:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698b52f6-ade\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-18T13:09:10.601211Z","times_seen":30483,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/19.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.723Z","timestamp":1784279937723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/19.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3748\r\nlast-modified: Mon, 27 Apr 2026 13:19:30 GMT\r\netag: \"69ef6262-ea4\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3748,"size_decoded":4091,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cf8297ef9496d20c579c118769c9dfd","sha1":"eb2b7769dd763fd3aeb5410ce6863c82f9594668","sha256":"9dd2b0a1806477da79569b5d03dc133bd8bd393083b5df44a34e48885de0806e","sha512":"d727557d2cbe6b1e9abc1a5e2b48978ed4e6332a5cc0fe9206707e7f014061dd8ff63c4505d5c93843745bef85b1d1ba3d5f9064c77a2dcb7630dcaa5d94400d","ssdeep":"","tlshash":"77711a145cb213a2c69d7b364deb2f50dab316468ac4c3dafde9cc635d518403b2b08b","first_seen":"2026-05-15T08:04:12.089938Z","last_seen":"2026-07-17T09:19:36.579554Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:58.043Z","timestamp":1784279938043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1oZBVgcClYeDVAbAlgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-4bc4\"\r\nexpires: Sun, 16 Aug 2026 09:18:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-18T10:56:39.587472Z","times_seen":138,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.680Z","timestamp":1784279937680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 10 Feb 2026 15:47:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698b52f6-9ec7\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40647,"size_decoded":10956,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40647), with no line terminators","md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-18T11:07:04.170667Z","times_seen":8141,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/gransino-casino_logo-13.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.703Z","timestamp":1784279937703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/gransino-casino_logo-13.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11764\r\nlast-modified: Thu, 09 Apr 2026 09:29:39 GMT\r\netag: \"69d77183-2df4\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11764,"size_decoded":12109,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de4423a831842a22de1885b71e228ab","sha1":"c9bed5a72e642a86a69087fd150cb6db0c0135cd","sha256":"457a0926d55c930b17bd92fe88049283a2f53f8b39136fcb5fbbcb23a0b8b176","sha512":"7ded7a6382ed74a24188b344dce13e47e154d4faecba1376498af60ddb1b4f84cd2a77214664807eff4639e1e6c0d9d8c75a252956611ecaf1ba88574abcb71d","ssdeep":"192:HwT88rZHYe3PDSIhmR/VSRVOUSsPvpGftFGIfX+6xGhZ1xASU2:HwTNF4e3mIa/nUtPvcfbGIW66D","tlshash":"0b32c057f730ca4ccb0943331d559f849b2a2d366227cddd9894e8d325173e8ae6aa33","first_seen":"2025-11-13T03:52:08.138651Z","last_seen":"2026-07-17T09:19:36.580705Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/04/lucky-hanter-1-1-7.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.708Z","timestamp":1784279937708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/lucky-hanter-1-1-7.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8428\r\nlast-modified: Thu, 09 Apr 2026 09:29:39 GMT\r\netag: \"69d77183-20ec\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8428,"size_decoded":8772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"500497469fc4d9c8535196fbcc740b05","sha1":"354360f6ddbe55afc69f59e694de47d9ea88fcc1","sha256":"a1130edc12b108309f078b239cf9edaf461ab0dbe162323bfa31721218194d7a","sha512":"31b94c02fd24cec0c61e530db7036a52a4c3942847548355977e3f56923661d6003b8423574f19d698c621f6b9d7f4bc73af7b032ec53d5e6f76da963f1e5e6a","ssdeep":"192:NwTJLik8H9zUQ1K0oTatnYrJVphEzOph0ldaT:NwTJv8obQcJV4zldaT","tlshash":"0f02ae092bb60dafe490517d5e69cfd2958841a6c2de3f9903cecb26716ea441c4a273","first_seen":"2025-11-13T03:52:08.173283Z","last_seen":"2026-07-17T09:19:36.581337Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/03/gam-stop-1-1.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.717Z","timestamp":1784279937717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/gam-stop-1-1.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4158\r\nlast-modified: Mon, 02 Mar 2026 09:44:25 GMT\r\netag: \"69a55bf9-103e\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4158,"size_decoded":4502,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d4c624fd742ad3e70ba1d1443d95529","sha1":"983f08f7aaf6a24e482b74baa9bc50fa2994047a","sha256":"38a72e8fde99abe32d90a1d569c7e81fc6fd28cf1018b51098d7338bae72ab65","sha512":"250d0b02da8bc75440da0964b829689046db37f44d93e77e37bf9775d7b8d9424e48e0929e3372448fe50749c168e45b98e1e0ebda7e3c5f41da6d2cd4eae92e","ssdeep":"96:RElbw+iXj4gpJQO0fRgM8JKzhsvesr4dxnw0VFmXIy:8wTj4gbQVfRpivudeYy","tlshash":"61814cbe739fc685d8706d76b5902b5276d63e1b0bc67a22025407139c9ca8c05ed8bf","first_seen":"2026-07-08T12:11:29.181677Z","last_seen":"2026-07-17T09:19:36.582551Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.897Z","timestamp":1784279937897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 282\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-11a\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-17T09:19:36.583551Z","times_seen":104,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:18:56.826Z","timestamp":1784279936826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbetcanadaofficial.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetcanadaofficial.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetcanadaofficial.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282760,"size_decoded":48662,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6229)","md5":"389561238015ec0fed88da6ea1b7f3bb","sha1":"8400981646c68459a2aa18f4ec0b3e13b3e8dcab","sha256":"8c1761b98ee2277a60821c021578b9d2b36327883dd63423d95ea3bcfb6a3d75","sha512":"6e67478bcf4174ebca2260d0542a1eaa008307b6a729ce2a33555c66f574ea98701daf004367c3b1ca24fa3366c796ea95d6fddcf9bb23706a78a6aabaf73f1b","ssdeep":"3072:WmqOfpPimfpqG2JrnnHNUtuEGtgD+gHwrC:Wmh0mfpt2c","tlshash":"4554d92b169620592a3771699fade34c622da013cd05cde47edfe1488fc9f914a72f0e","first_seen":"2026-07-17T09:19:36.58412Z","last_seen":"2026-07-17T09:19:36.58412Z","times_seen":1,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":66,"connect":22,"send":0,"wait":473,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.671Z","timestamp":1784279937671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 06:54:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a588019-1664\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5732,"size_decoded":2841,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-18T13:42:27.310095Z","times_seen":5240,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.833Z","timestamp":1784279937833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Thu, 16 Jul 2026 07:00:33 GMT\r\netag: \"6a588191-df\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-17T09:19:36.586377Z","times_seen":37,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcanadaofficial.com/wp-content/uploads/2026/02/favicon-5-36x36.webp","fqdn":"rainbetcanadaofficial.com","domain":"rainbetcanadaofficial.com","tld":"com"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcanadaofficial.com/","date":"2026-07-17T09:18:57.966Z","timestamp":1784279937966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcanadaofficial.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 06:11:45 GMT","end":"Wed, 14 Oct 2026 06:11:44 GMT"},"fingerprint":{"sha1":"1E:3C:9C:10:20:C8:4B:4C:66:19:B8:CB:0E:87:5C:B6:B0:D3:C0:06","sha256":"12:48:D2:FA:87:D0:D6:6D:76:99:74:03:F2:81:ED:E9:6C:06:50:C5:17:F5:13:F2:89:F0:2F:66:19:6A:46:BA"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-5-36x36.webp HTTP/1.1\r\nHost: rainbetcanadaofficial.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcanadaofficial.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1oZBVgcClYeDVAbAlgURVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:18:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1014\r\nlast-modified: Tue, 10 Feb 2026 15:55:41 GMT\r\netag: \"698b54fd-3f6\"\r\nexpires: Sun, 16 Aug 2026 09:18:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1014,"size_decoded":1357,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f52fe9384425b2a5d3984c74c2d5262","sha1":"12725b70ce9e011248a6908d74b511abe3544d5a","sha256":"f7406815ac9bc5ed8b1269d2685f438f8e990c11cc8e6a17b87831f80ccd85f1","sha512":"035e46ee832dc6f27cc324512cd3c6d4858edb4958b3cf61197d3745d2638980f61be40169d42b2af239b734e8929786704b16df55a9a6f2e079ea4b5fb8992e","ssdeep":"","tlshash":"4a1196305f16171cf5134bb026b00f52ffbc3d345289c6b58040026213086d71b2c78b","first_seen":"2026-07-16T11:05:09.647425Z","last_seen":"2026-07-17T09:19:36.586969Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetcanadaofficial.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}