{"report_id":"5508b91c-8a65-45f8-a8ae-97fef9a7bcf8","version":0,"status":"done","tags":[],"date":"2026-10-04T03:50:35Z","url":{"schema":"http","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"title":"Rainbet Login NZ: Sign In, Register \u0026 Get Bonus","dom":{"size":217642,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (33876)","md5":"52944d7f0b2392bae9485cb9d7fcede1","sha1":"5f110dd9a4f46560bb286a59536a22fb68bdfbcb","sha256":"0856a6ee30e15eec74321746dbbb50df3a3a45afc9ce3319fdd0221bc6f05fe9","sha512":"8b65743d4a0e4e0a8f64dbaad4d41392caa6a1c38de57e93f3e6b9e0397f53e8fc71d69d1ee9a9ebeea9450da9add56c17532c08bee3686e42523cc0ca4524c9","ssdeep":"3072:6ay4zdePRZ1gOskniX3oHfSzF+ZOOBsRbcnRP0tAU9sq2a:gxPRZ24JSX2Za","tlshash":"8d243b762358347d263fe3589f44721ca52e9006ea06cefcf1eac158a6c6fe109b674d","dom_hash":"domhash556872289a55693742128ca9f478d715","first_seen":"2026-10-04T03:49:49.517897Z","last_seen":"2026-10-04T03:50:38.142441Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T03:50:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-login.net","ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2026-07-28","domain_rank":0,"first_seen":"2026-10-04T03:49:44.641061Z","last_seen":"2026-10-04T03:49:44.641061Z","alert_count":46,"request_count":23,"received_data":708550,"sent_data":12854,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":4,"received_data":196500,"sent_data":2388,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-10-04T03:50:38.162857Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"c35a67191117e90174938f756c5cd7dc","sha1":"d3fddce91e3b0f150d8c66587ab8130cfdcb438a","sha256":"f867304aa06b5218124f4cb784e97840c4f374c50292265931881b8254e973d7","sha512":"dcea992f859908c7f817992ddc6590b1a76d80e0c2c8fcacb6407aa668064a026741ef63dec19434bf41a64ed15e4ba9b3b7c24bda3f5b7b1f547e43c97eadec","ssdeep":"","tlshash":"15e0221263f0333100bf861422ca8a8e3ba04407be428f76696cc4061f84e94c8f48fe","size":367,"data":"","first_seen":"2026-06-07T17:05:58.289775Z","last_seen":"2026-10-04T03:50:38.163347Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"573644323a09927356dd5f562acdcfc3","sha1":"7617e8cecd6975b03c32129287b81c490904cb54","sha256":"ec35cfe297ee9a57d5fe9259f24a645f18f81c655db9d8cd9e1f5cf31c855f0f","sha512":"9db118874b7570f604fe2535bc680efd175a0ce0d3e6b87ce6640e95f418cf9d2ea9b566639df17a1789e2a428ab5e693cebd3474a4aa0a29b976ea906fe219b","ssdeep":"","tlshash":"7841fb35b3bd243147bf24a529e5269e2e3990823a878cb6cc9c9c0624c1e9d4875cfe","size":1923,"data":"","first_seen":"2026-10-04T03:49:49.542527Z","last_seen":"2026-10-04T03:50:38.163917Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335be571d1f9586a0cf2f6952c4eec4","sha1":"f3b60c35f4f7b75ceb1266dbda8ac8d4b1ef11ce","sha256":"da1bed209470750a6c89d8f016d11e981ac975127f5db25aaf094404ecbec64f","sha512":"cebaf60fe3f7c0353c89f2de080ab49e6a5fd65040c113ae0d46f9b10f4b991b00bb15d61e287a60fe714a03569ee0fba4247de1acba85fd8ce02484aca505c1","ssdeep":"","tlshash":"91411868dbbe7662832ea0b62bfe52de143e547e7a814ebb7c38405048f48493715c7d","size":1934,"data":"","first_seen":"2026-06-10T08:18:22.002783Z","last_seen":"2026-10-04T03:50:38.164751Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-10-04T07:32:55.133031Z","times_seen":66954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"86251445d0e8ac3a017d8a0ce3acd5a1","sha1":"c888c1b67dfc8ff22964cb4e145d94e44690e96e","sha256":"6f6559d0a82ede2c87509bc418cdca6a2b7f63d435807f0b45f23dbd7145402e","sha512":"4c44eb57fee9bbb93fb419ad97b6400d38a0e035c009e0ae3b1c174fa304d253c0488321a52a879c1f3c70c1d704b303be4bc73907abbb4b371ac42d79189af0","ssdeep":"","tlshash":"7ef0ac842c79992744d2a2cb35aa7904b06df910537f6d47b20e08491a50e6daaf395c","size":567,"data":"","first_seen":"2026-06-24T15:19:36.100206Z","last_seen":"2026-10-04T03:50:38.165865Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"451358a88c5a28ac56bfd30e99ed9c40","sha1":"66c7629e8d9ceadf78a83da16905a1e39c3ba786","sha256":"5d96340838a7ca8badb25846835163cd2bc2e742a8b615d2b472b4fddc2bf8c2","sha512":"2d068f17c365fbc00a1bba5813c44c7af57c0aff5d84afcfd431cd2579ef71932174a5cd8576fcb670b83f18558a26a988a0da06d3584c91cfd2b85e6340d080","ssdeep":"","tlshash":"b9c0809dd49d1c4914eed148057c1314b5189413ca1f9f55f34d014c6fe40f879141c9","size":174,"data":"","first_seen":"2026-10-04T03:49:49.547316Z","last_seen":"2026-10-04T03:50:38.166379Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"709ac1fff759a851c5db89c6da6f3ca3","sha1":"14914e292005fdca586a736fe7e354bf6fbffb19","sha256":"186a5fc98a2a2d8ef6d00d738a4c081e2a732bf8ba6608ee93e7cb654956bc5e","sha512":"615005d625efdc04b15e860a412fb96a3e275c4019fbcea5627fc2bd747441d5799828225bab3d16ce1daa51cad80b4e0df27988e5cfef7b3cc570d9bdd882b5","ssdeep":"","tlshash":"e34111c25ece3cef1e2615c174ccde0357e18284fe604c0be619546a73cac83d25aea8","size":1968,"data":"","first_seen":"2026-10-04T03:49:49.54868Z","last_seen":"2026-10-04T03:50:38.167007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9061e86f2a90bcb3ab249c8a72e73c8","sha1":"cf15840657090976db49b8f43395269f42f94023","sha256":"08c8e053cde4bfcef8f8fa6b27a88319592cc0ae60625ce76cca7caec604e263","sha512":"0cfbb2eca1a783b4cf53f8dea3a2785986a09e43caa7caa9bfd2887d5c70311945e92e0adfdefbca94d98c4c9482a54ea6fdc157ab126430b1572042671c39af","ssdeep":"","tlshash":"f811dd3b7a7c94be47d463d806845d2be5dc5040d09ec99ce285dc2c0ae83565b8db07","size":1097,"data":"","first_seen":"2026-10-04T03:49:49.551265Z","last_seen":"2026-10-04T03:50:38.167602Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-10-04T07:44:37.694368Z","times_seen":31023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/b2a854fe4fc51227827b12c4ea4551ba.js?ver=222ce","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9679fe476776547befea2305c99b10d5","sha1":"c9da6166a5d8e642a3b9c8283a89e04ad7e343d4","sha256":"dd73f85423ad73c481febcdaa85a8eacd3c67080f5dfeb44f5783dea92079558","sha512":"2c13a217abeb1134d7b37d55008e9424b2f2173a7b10cfa48c5aeb157f55a0fbd84e483fc0306a19fd4152b35c3b10c8ca3d9084190464c244c465c15f6e29d5","ssdeep":"96:1u/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiT:1GIhNBcAD0NRv8XlD3wXY2yH+EoaY2T","tlshash":"46b150c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0a7b3d","size":5097,"data":"","first_seen":"2026-08-20T02:52:09.609066Z","last_seen":"2026-10-04T07:02:33.032876Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/site-reviews-js-before","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"38970c9d053b300cbe08d2bd88699aed","sha1":"4d11011cbcbc954e3ea5596551211598ccd74992","sha256":"695b6117e5858153a0f93b721af0115c7e7be463f7f106eadaa153d8ac35671a","sha512":"a1a4c1e5d158d3a3c1fd2be3811929c2a0f9e80ee09b8f4dda4558b8da8405a9c95326c5ce7365bb08e518ec38bae62c564c0b3b0b27816315b5c9bc4dbe0f63","ssdeep":"","tlshash":"4051f0c2deca3cef1e2615f174ccda0357e18144fe604c0bd619546a72cac43d25aea8","size":2508,"data":"","first_seen":"2026-10-04T03:49:49.569393Z","last_seen":"2026-10-04T03:50:38.168759Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/cad89bb31b939ad5af2c803941469557.js?ver=2483b","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"911995437aae1bc199d126bb26428fa5","sha1":"e11293ccb88be443b7b3780cd5eb0601bd7051fd","sha256":"398c57cf7fe56d0cf358e47151948e171af00f88f961ee540dd26cfe59e9f47d","sha512":"157c9b3c5cf65695614aaff0ed244317f950d19a7a497a119ebcf43ae293c88ebb71ab91d5bec4378849a830b23896ca980094146452e29cb40950628e5c8ced","ssdeep":"96:4E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMK:nhgws4WTBYNB1C9aNwAMPyd0R3SGaMS5","tlshash":"cac1a8c975def056135a10a594afb005e134be2870deb800aee0c4957eb44cd71b7fba","size":5781,"data":"","first_seen":"2026-08-20T02:52:09.678128Z","last_seen":"2026-10-04T07:02:32.968073Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/contact-form-7-js-before","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"076027bb117bfb9d36180d8a58c5e9ff","sha1":"6d1930f356685ac6cf3e260bafa535d7b7ef3bb2","sha256":"4689563a1b51b0aef57184f2c085960d0921183eb1b95455f08ad6ba3d84dd50","sha512":"96cea33fa8160b41f75e4da631cc0543e8a05e08369127cf5272cee32e654c628aa9a1d0923ab9035d4208e7b00bb344dc1de637134082084771fedf2aedf3df","ssdeep":"","tlshash":"9501809dd49d1c4914eed178057c1314b5189413ca1fdf55f34d014c6fe40f879141c9","size":708,"data":"","first_seen":"2026-10-04T03:49:49.573946Z","last_seen":"2026-10-04T03:50:38.169336Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/e276e1af20019ec6072360c077bf0be5.js?ver=a21fd","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"30c15296f961b60a8481b8da2db3c27c","sha1":"1b03a4d912d76dd30286c176016bcdb32a2be54a","sha256":"2e295457980bbc2b28511dc9c3e5b97729433923be9e3462da787396800fd577","sha512":"bdb89b19ce32e038e0c72c8b9201ed9f59867bebfb912f2d9dfcff02463e62bbafb440746936bc690798e2e902cac092cbe2fbb28a4de4290dc79c8b565dd22f","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQo:LDESVre/zP1vV95t9SWgLt27W35LP5zR","tlshash":"b713d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","size":42592,"data":"","first_seen":"2025-06-24T23:16:09.300854Z","last_seen":"2026-10-04T03:50:38.146703Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/3531154f6a67901dd518481225145315.js?ver=cbbbf","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","size":12513,"data":"","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-10-04T07:12:03.822935Z","times_seen":10573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/73ac67b45d8f4b741199537d8dd1133e.js?ver=6b747","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13453,"data":"","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-10-04T07:12:03.885194Z","times_seen":10850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/007916a8e139fefafa6483e40f1fd83d.js?ver=7684a","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"40720fcbc8006bb4d592816af9525115","sha1":"8d5a9d596e3f0c5de1cc1cfe81753047fc251f4e","sha256":"27b24cee39f0132b487e6fc05dc6421bc30942e47138c6096de7004c91ffa5b2","sha512":"f490d4651677c60e2712db831d91aede9e9203517e67fcabc02a39b23d08c9e9021a1728aa763aff823ecc675f141b47ca47434d86a16173cf761a985368decc","ssdeep":"192:tZK4tK/DH4bcrmpjPDDV1CpAV3oWgEcPvX6OIvzgZ2xDmWIIqex0jmHQM798wNvK:u4tK/DH4grcx1C9EcPfumWKiHQM79xNK","tlshash":"6a12836163a03c7a06f61d564c3a6b80bd3c80d97a42d0aa783b7c8d5de9993136277d","size":9123,"data":"","first_seen":"2026-07-08T11:55:32.500647Z","last_seen":"2026-10-04T03:50:38.156529Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-i18n-js-after","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"af938673f0ac87574de8140e587bcd52","sha1":"56a84e10a62d6696313dfd0917bffcd5d4841e8c","sha256":"75f3f39e1bdf73e93550b7439c43db2da8f48c57adefd0e36693e399e56c558b","sha512":"5d190a527f12c5b154e795955543717c4d13ea33e93fc1d2ca0b89fe980222175b9d5ea97c63e326e0f19171a3bc8cbd0ad75095fbb2911aa0e2417a98efb25b","ssdeep":"","tlshash":"02f012cbf4ab3d50828fc7b48d23ba0145502487c2afd50875e59d3496718c0b4c362f","size":625,"data":"","first_seen":"2026-06-16T14:03:22.432599Z","last_seen":"2026-10-04T03:50:38.169913Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/contact-form-7-js-translations","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cc16ef3fdb1f11220b54cad7b4c81bb","sha1":"aa2215be50525d77ae052988802c5cec269df461","sha256":"42b4a54e469b65ff7c8065220a4672bb943674ba6af02b7ff833a6cb01010a79","sha512":"56fec92fb6da7e5f8070286eaf27929b98025fe64420f35dde32ec46c42ccfcabbd87790ed90b32979c581490b30e270555f45a0a5e64cc039b0342fc3c281c2","ssdeep":"","tlshash":"da110c84ec78d92744d2a2fb35aa7904b06cf810c37f2d47b20e08491a50f6daaf390c","size":1096,"data":"","first_seen":"2026-10-04T03:49:49.570842Z","last_seen":"2026-10-04T03:50:38.170417Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/cmplz-cookiebanner-js-extra","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c332c4defee61a691d0759a733b57c6f","sha1":"ab5dcab1da6ff3afacb229ffd41645788ff8c92a","sha256":"e922268b6c5427a27f320fd38be4ce28aef2117f1e07ad5ab61527fcbdb5329d","sha512":"93e668bcbfc751b92a94d9f73fcb1b870b162f853535ae10208316956e1adea8ba824775b1d0725dab27e5d6a16848d2a72bb5293d785d9837ba343f2f331b3a","ssdeep":"","tlshash":"6731dd3bfa7c94be47d4a3f806845d2be5dc5040d09ec99ce285dc2c0ae83565b8db07","size":1638,"data":"","first_seen":"2026-10-04T03:49:49.568314Z","last_seen":"2026-10-04T03:50:38.17103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/a44a7854136e649ebf213291ea95a73d.js?ver=e9b5e","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c92a5a237a1df7b6d01e3b5d89e4058","sha1":"738b505e725998c72a6b33061c94c79852a03f05","sha256":"dd30cd6492424c532c7946f05df828cae82be9ba11f7b44102c90c16740269f5","sha512":"882dd6be16f91edfeccd6cf6a044187e0853fcca8bfb59d6f0c600e5bc14b838f29338c425b06cd725cddbac7d9bc3693fd0b90ebf27d779af9eeae9604f576c","ssdeep":"768:lW94cj/g8aGSJjv+lfzwLpstNIuWBxumxesKNVhIkYJO2ybEXoHVFnvhY/I+1UR7:38aMSBchY/IlUCHC59KmmDECTV","tlshash":"d613eab93e9cd0b516ee47ed37abab48f4303562d80f88509465dc542268dc60f9bfb1","size":45493,"data":"","first_seen":"2026-08-01T21:39:31.79622Z","last_seen":"2026-10-04T04:24:03.725352Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[LiteSpeed] Start Lazy Load","filename":"https://rainbet-login.net/","line_number":543,"column_number":7981}]},"http":[{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/a44a7854136e649ebf213291ea95a73d.js?ver=e9b5e","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.757Z","timestamp":1791085804757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/js/a44a7854136e649ebf213291ea95a73d.js?ver=e9b5e HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-b1b5\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45493,"size_decoded":12263,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45491)","md5":"4c92a5a237a1df7b6d01e3b5d89e4058","sha1":"738b505e725998c72a6b33061c94c79852a03f05","sha256":"dd30cd6492424c532c7946f05df828cae82be9ba11f7b44102c90c16740269f5","sha512":"882dd6be16f91edfeccd6cf6a044187e0853fcca8bfb59d6f0c600e5bc14b838f29338c425b06cd725cddbac7d9bc3693fd0b90ebf27d779af9eeae9604f576c","ssdeep":"768:lW94cj/g8aGSJjv+lfzwLpstNIuWBxumxesKNVhIkYJO2ybEXoHVFnvhY/I+1UR7:38aMSBchY/IlUCHC59KmmDECTV","tlshash":"d613eab93e9cd0b516ee47ed37abab48f4303562d80f88509465dc542268dc60f9bfb1","first_seen":"2026-08-01T21:39:31.79622Z","last_seen":"2026-10-04T04:24:03.725352Z","times_seen":58,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/nz.png","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.761Z","timestamp":1791085804761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/nz.png HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 391\r\nlast-modified: Thu, 20 Aug 2026 07:39:47 GMT\r\netag: \"6a86af43-187\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":391,"size_decoded":732,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"dd8d4ab14d1442d92ae79c66d2ebd89e","sha1":"547010be1a399d4f163e21ea1c8e40ad22da9cfd","sha256":"ee50e7f0e8272dc5354a74801805c0aeec47ad4b842e3edd5abf282be62d6580","sha512":"f1fef0bab91f13c8e5a1e2eebcd93829184ea5ff848a5fb373fe87abbed555e54e77307ad795b26d130960af358113a0cb680fa4c596a474d464d1ad30aaff49","ssdeep":"","tlshash":"38e0f1abc629992cecd2083d041406f6d925d4655f436f340a4840011f4fd09c2b3792","first_seen":"2026-03-27T22:31:34.460787Z","last_seen":"2026-10-04T03:50:38.144074Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/uploads/2026/08/Favicon-1-150x150.webp","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.240Z","timestamp":1791085805240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Favicon-1-150x150.webp HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz; iu_popup_unique_name=GVgRBVsdHxQUBF4RBRcWDk0=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"},{"name":"iu_popup_unique_name","value":"GVgRBVsdHxQUBF4RBRcWDk0="}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1920\r\nlast-modified: Wed, 19 Aug 2026 06:00:28 GMT\r\netag: \"6a85467c-780\"\r\nexpires: Tue, 03 Nov 2026 03:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1920,"size_decoded":2263,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0e99e869af3858bf6aa419bf7a1a826e","sha1":"6b752b0a65cb33951c8e04d210bdaa3a1a590eb3","sha256":"47f5e0fcb889654b81f8fbee91103750df87986d58f59a2b651a9e3961adfba2","sha512":"722d15b681e994e5081cd39abd5e7baeccf9158a09fd45ec7a06be42c92dfad44b4d76859724d1edf8575c3865abd87876c5d008f305259f6346dec09831af1f","ssdeep":"","tlshash":"fd412b6493355bccf8312fb0b9304b95a21edd20819a835ac2838169478dcc45c4cacd","first_seen":"2026-10-04T03:49:49.537059Z","last_seen":"2026-10-04T03:50:38.144647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/uploads/2026/10/0x0-1536x1536.webp","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.280Z","timestamp":1791085805280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/uploads/2026/10/0x0-1536x1536.webp HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz; iu_popup_unique_name=GVgRBVsdHxQUBF4RBRcWDk0=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"},{"name":"iu_popup_unique_name","value":"GVgRBVsdHxQUBF4RBRcWDk0="}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15776\r\nlast-modified: Fri, 02 Oct 2026 09:12:48 GMT\r\netag: \"6abf7590-3da0\"\r\nexpires: Tue, 03 Nov 2026 03:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15776,"size_decoded":16121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86d24c8765fcad764f36c5ff27a7cdf3","sha1":"1855041d381a1461a6fefa84aba679c53b12b187","sha256":"cbddaf2107c270324034285f1ee5e71ee2b199628e422de416d5257e425d8673","sha512":"949ba5587d4539123da807dc6db40dae78c17dbda1fa8629c02b8d6646c8ef38d01694340e58f2a7e04598192d04cebdd4106c11f3cb2de9b2cbdcc25a0035f4","ssdeep":"384:I5555555555555595w+h0SYILVw6mxJk6OuSlSdBXomM6svERCLoxlkI55555551:I5555555555555595wklYILVw6UJk6Oo","tlshash":"af62e9c979854025d2693c3c3bb5f51b30677390aa3027c9686366a61a7f3f08e9d1ef","first_seen":"2026-10-04T03:49:49.52247Z","last_seen":"2026-10-04T03:50:38.145378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/cad89bb31b939ad5af2c803941469557.js?ver=2483b","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.747Z","timestamp":1791085804747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/js/cad89bb31b939ad5af2c803941469557.js?ver=2483b HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-1695\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5781,"size_decoded":2858,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"911995437aae1bc199d126bb26428fa5","sha1":"e11293ccb88be443b7b3780cd5eb0601bd7051fd","sha256":"398c57cf7fe56d0cf358e47151948e171af00f88f961ee540dd26cfe59e9f47d","sha512":"157c9b3c5cf65695614aaff0ed244317f950d19a7a497a119ebcf43ae293c88ebb71ab91d5bec4378849a830b23896ca980094146452e29cb40950628e5c8ced","ssdeep":"96:4E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMK:nhgws4WTBYNB1C9aNwAMPyd0R3SGaMS5","tlshash":"cac1a8c975def056135a10a594afb005e134be2870deb800aee0c4957eb44cd71b7fba","first_seen":"2026-08-20T02:52:09.678128Z","last_seen":"2026-10-04T07:02:32.968073Z","times_seen":163,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/e276e1af20019ec6072360c077bf0be5.js?ver=a21fd","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.754Z","timestamp":1791085804754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/js/e276e1af20019ec6072360c077bf0be5.js?ver=a21fd HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-a660\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42592,"size_decoded":13472,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42590)","md5":"30c15296f961b60a8481b8da2db3c27c","sha1":"1b03a4d912d76dd30286c176016bcdb32a2be54a","sha256":"2e295457980bbc2b28511dc9c3e5b97729433923be9e3462da787396800fd577","sha512":"bdb89b19ce32e038e0c72c8b9201ed9f59867bebfb912f2d9dfcff02463e62bbafb440746936bc690798e2e902cac092cbe2fbb28a4de4290dc79c8b565dd22f","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQo:LDESVre/zP1vV95t9SWgLt27W35LP5zR","tlshash":"b713d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","first_seen":"2025-06-24T23:16:09.300854Z","last_seen":"2026-10-04T03:50:38.146703Z","times_seen":41,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/uploads/2026/08/Favicon-1-300x300.webp","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.239Z","timestamp":1791085805239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Favicon-1-300x300.webp HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz; iu_popup_unique_name=GVgRBVsdHxQUBF4RBRcWDk0=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"},{"name":"iu_popup_unique_name","value":"GVgRBVsdHxQUBF4RBRcWDk0="}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3652\r\nlast-modified: Wed, 19 Aug 2026 06:00:28 GMT\r\netag: \"6a85467c-e44\"\r\nexpires: Tue, 03 Nov 2026 03:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3652,"size_decoded":3995,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a846f7da2df806dc1cdc6383ae90781c","sha1":"1069c831fd64d61f3782b1ff59202e846cfb332f","sha256":"b42c38a884a32e92d9ee011c5de5e526f4259233f7456b7a0527f37254f40ef4","sha512":"b8cab7f78c8529503c10f3d4d8076d9f4fdd6f3158d7f3ec7da2c717780b920e8f18fc785dc1de8618fa7d07a87b3243f4b08a8dfa1eb46fb0a5914fdc5cba63","ssdeep":"","tlshash":"3b714b552bec8f91eda117b960e2271555a3fe27437b8562c1a290132704fb11a7c1ce","first_seen":"2026-10-04T03:49:49.536032Z","last_seen":"2026-10-04T03:50:38.147314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/css/99c579f408daa638872070169bbb5774.css?ver=ac868","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.733Z","timestamp":1791085804733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/css/99c579f408daa638872070169bbb5774.css?ver=ac868 HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-ad2\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2770,"size_decoded":1068,"mime_type":"text/css","magic":"ASCII text, with very long lines (2770), with no line terminators","md5":"1ffef478b7c4ff7a3827fdaa27e5d329","sha1":"19af4f884783afcfe25f551cd05e95b91ada1cfc","sha256":"4f35834ac00657a2bc69f5bc20412be996cdbf9a2303ba2d0512162b0709366d","sha512":"76d39a482b8b851aea2dfbb3e37019e804a1f0131a56210627882db546d69044fb41d3777299ab4a4d9fa05d8bd0e6112cc62730a4f29062e682e567a35f3c30","ssdeep":"","tlshash":"8b5128656d931994b3feef052d80b9881a29f353c02e0dece062962cb1df585cce7345","first_seen":"2025-05-21T19:02:52.086745Z","last_seen":"2026-10-04T04:24:03.641797Z","times_seen":440,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/au.png","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.764Z","timestamp":1791085804764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/au.png HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 402\r\nlast-modified: Thu, 20 Aug 2026 07:39:47 GMT\r\netag: \"6a86af43-192\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":402,"size_decoded":743,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"a3ded6f6eb7a300ccd343b0ff2e790e8","sha1":"fd6e74a5acafeb9cd486a63dea2b8c785cf69ede","sha256":"39824eebae7e0422b5a80ae88849c5cb47821f9a801cdbb86b6ffd010e34009e","sha512":"468e22f3265b8526ef6cc4ca30fb113a9814305891890bb2662857ccc70f1ddc6dddc9882dba5b58d4f392aa4a7f03bc8b53277ee3c94db31859bb9b39c2f5c5","ssdeep":"","tlshash":"b5e0f1f35f743d24ea510272d8603925b3a19e3547b201e758bce852e2001dc92b47c7","first_seen":"2025-07-07T21:42:52.447971Z","last_seen":"2026-10-04T03:50:38.149178Z","times_seen":10,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/b2a854fe4fc51227827b12c4ea4551ba.js?ver=222ce","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.745Z","timestamp":1791085804745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/js/b2a854fe4fc51227827b12c4ea4551ba.js?ver=222ce HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-13e9\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5097,"size_decoded":2223,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5060)","md5":"9679fe476776547befea2305c99b10d5","sha1":"c9da6166a5d8e642a3b9c8283a89e04ad7e343d4","sha256":"dd73f85423ad73c481febcdaa85a8eacd3c67080f5dfeb44f5783dea92079558","sha512":"2c13a217abeb1134d7b37d55008e9424b2f2173a7b10cfa48c5aeb157f55a0fbd84e483fc0306a19fd4152b35c3b10c8ca3d9084190464c244c465c15f6e29d5","ssdeep":"96:1u/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiT:1GIhNBcAD0NRv8XlD3wXY2yH+EoaY2T","tlshash":"46b150c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0a7b3d","first_seen":"2026-08-20T02:52:09.609066Z","last_seen":"2026-10-04T07:02:33.032876Z","times_seen":168,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ca.png","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.763Z","timestamp":1791085804763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ca.png HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 340\r\nlast-modified: Thu, 20 Aug 2026 07:39:47 GMT\r\netag: \"6a86af43-154\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340,"size_decoded":681,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"6618f57e99509993a9658ee2f4cf6ff9","sha1":"68d4f81fc4a7ef1c4229d48f64fac958eafa4fe2","sha256":"d6c22a9a64e98907ebfc032b62dd12b8b5fa61182ef36c7f1b59ea05b35a0c66","sha512":"c8a521f9b8e0a02a978adfd4035ec9efd9218921098dfe897175008590751c2ca8dcb3b8c772880fee56ba38d42b87fe5c35ea81db4b192c0731edc2bf5adef1","ssdeep":"","tlshash":"f5e0c0d057c5fe5c41ca25252e9d9501ed21d116b95c6507904aeca2c7211131480be5","first_seen":"2024-09-19T22:42:23.495236Z","last_seen":"2026-10-04T03:50:38.150623Z","times_seen":21,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/css/e20a0113a9b03c8e8b5d8f3f72f778de.css?ver=c8903","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.732Z","timestamp":1791085804732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/css/e20a0113a9b03c8e8b5d8f3f72f778de.css?ver=c8903 HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-96d\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2413,"size_decoded":1254,"mime_type":"text/css","magic":"ASCII text, with very long lines (2413), with no line terminators","md5":"be04df56711e114aae60fa2d8cb825fa","sha1":"1d69c0b5b03ace9804daf4ba4e10515e0122fd8d","sha256":"a3a04d7bf3d6b75ed03b1882e75414faa3fca8fde79ee82937a62360e0bf6f34","sha512":"dadefe1f0900fa2d5ef04eba47844e5b6693e4eccdb4993d83bbaed0c66007b5d563a83db59c72ccbaf24de41f9f25dc442a47bc9b58f44fc03110c1687ddeec","ssdeep":"","tlshash":"11411fa1868810254bf382f7aae1af4a73359892c427e76ab0da17784d7c7451623f0f","first_seen":"2025-06-26T12:17:55.2988Z","last_seen":"2026-10-04T07:43:56.951933Z","times_seen":11673,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/css/733fdc42d8d058810f67a763224a2719.css?ver=38698","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.735Z","timestamp":1791085804735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/css/733fdc42d8d058810f67a763224a2719.css?ver=38698 HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-1993c\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104764,"size_decoded":18391,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ed4470522ecc3850e44a799e39df7e05","sha1":"aed774b3691c1b84ea118af00baa15d2262f0ca7","sha256":"6ca47e15987680d9a626ca66c6d8077c1bc6d33864a7f85977c970018e2298d4","sha512":"38048273550c0237540a4161870c93b37c6732079ea83ead9ebc660c112241b3252db2f7b7ba090164c5fc7eae85502a31139d64d13c6e3f3b86532674e9254d","ssdeep":"1536:Z1zIKNTyHHa8SaEDeEN2co4tlJ3SYiiuVENM6HN26KG+P7x5Pz:TZ3tz3SYiioENM6HN26KF5b","tlshash":"f7a392c7f1a03518d467c61da0d07abe2a6f4641e3269eebf8277bb487c92c70552e0d","first_seen":"2026-07-08T11:55:32.50655Z","last_seen":"2026-10-04T03:50:38.151777Z","times_seen":6,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/css/3dd7d134c12b805ad47d0232a0e7c6e3.css?ver=7d5d5","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.736Z","timestamp":1791085804736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/css/3dd7d134c12b805ad47d0232a0e7c6e3.css?ver=7d5d5 HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-764d\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30285,"size_decoded":6199,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30281), with no line terminators","md5":"d191b1eec990e2ee95ae18dc37b99f7b","sha1":"c5ddfde0c69750a80517f6f5041cea30c5e63a6a","sha256":"98f312997fd3e3b8a0c855ffa8fb0b596e6c9afbf69417a76062a98c013e12b0","sha512":"fe4eb2d2fe57be3453d6c0bdc193b41835a0bb4f11d22ccdedfa0384c0958cccb0456bbf26a6113a533a0f0931cbfaca006e1481c0f490881ba1ca9d72ca3d56","ssdeep":"768:rGNnMIy/Z+hHMs6Cy6VT38RbzZlGyHBjNjgG0W7Lw0xmBN1m:aNnqZ+hHMs6Cy6VT38RbzZlGyHBjNjgQ","tlshash":"48d24349fd38f07c9a03633bb7d963ac002a5814e91267a5a65fa47c47c3db71632f58","first_seen":"2025-06-01T08:24:54.255658Z","last_seen":"2026-10-04T03:50:38.152329Z","times_seen":41,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/gb.png","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.766Z","timestamp":1791085804766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/gb.png HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 394\r\nlast-modified: Thu, 20 Aug 2026 07:39:47 GMT\r\netag: \"6a86af43-18a\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":735,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"1f9bec96b4dd22cbfb7303708a8572b4","sha1":"99168a28b7713b5c4aba6daac57c8c29adaf528b","sha256":"0258a377207160921b4def95e08bde2b05f202a1d441850d49502f768e72307d","sha512":"a5b5eef6d0c496480a22ab26ced2c25b7c06853af0ef88b9933231c13c2ab3c800e113fcc28c93d648c47b05e3a3800ad41f0d54036626233f1033ee1b60a53c","ssdeep":"","tlshash":"bbe0f1a0b3d14c36df7e96b68474f024ef310c01e1c5452188a2537f0f25a26a0b0315","first_seen":"2023-04-24T10:56:41Z","last_seen":"2026-10-04T03:50:38.152891Z","times_seen":606,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ie.png","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.767Z","timestamp":1791085804767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ie.png HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 243\r\nlast-modified: Thu, 20 Aug 2026 07:39:47 GMT\r\netag: \"6a86af43-f3\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243,"size_decoded":583,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"8232eaa33ed9cfdd2a8f473d76380ec2","sha1":"b6f2d720346e6a6a2a12bfadb5243a94ad9d2187","sha256":"55c487f0a3f9bb9b378ecba3decafb520fcfe1b0b3eaa14fd4781f47351e1640","sha512":"b9e412c781afb5f4b70b8186887ceefe7bb89fa080b133d0a7dc19c7c12b9c39afbc345b61753bd6d6f4c7d9293d1aaef33cd1c41de9c8c3f39637b36c69dbfc","ssdeep":"","tlshash":"95d097d30fecce78dadc23720026d82ae452191c08e8c5821f3d547212723035acc3c1","first_seen":"2026-10-04T03:49:49.529553Z","last_seen":"2026-10-04T03:50:38.153437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAfJthTg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.124Z","timestamp":1791085805124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAfJthTg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rainbet-login.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 18:32:27 GMT\r\nexpires: Tue, 28 Sep 2027 18:32:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 465458\r\nlast-modified: Wed, 10 Sep 2025 16:30:51 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48280,"size_decoded":27562,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"e783b4d0a9b758bd6847ef4afab958c7","sha1":"74ae0321e69f616713fd7589765fa2124e9d2681","sha256":"b79a2ea7a38f33fd96a282fadb9ce97626bb0724a44d21075859f0e50239993a","sha512":"11248ac6b4f7ef99e990d68b5bd0a25b2abcc6ec6d53121e801886b415a3de6f26a6b3b0e7cb81e1efd9779786177d59c107763de4bbec79cc80fff1fa70cdb6","ssdeep":"768:xuFWXCmmfMGDj+ZZa615uj2WAVoGiZ0vVx7GCYYwTQ:HXCBQHv5RW9GiEFZwk","tlshash":"6d234b2d73129759d307b9bc9963b3b45770f6387fe7834b44b22b7ab88d4a14c25288","first_seen":"2025-09-30T13:37:00.820651Z","last_seen":"2026-10-04T05:49:27.63563Z","times_seen":74,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZthTg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.128Z","timestamp":1791085805128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZthTg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rainbet-login.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27027\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 17:53:05 GMT\r\nexpires: Tue, 28 Sep 2027 17:53:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 467820\r\nlast-modified: Wed, 10 Sep 2025 16:30:51 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48200,"size_decoded":27885,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"411346eea6cdbb447eae79117bec91f8","sha1":"86add8f35d7c3a6a088c575ac140320c7bb52862","sha256":"2a8e7f713ee79fbccdef3cef5c787aff47580299f7da60144961e7db2ec08211","sha512":"8c87b8f0313dc29201d9a8d575a9e4e1ed8222a555d2ecf5e1965e902feb76be79bbfd61feff7e6b2930dceacb3b2c56172566a32fc21c057edd1f13c5bb748a","ssdeep":"768:bYpmmfM/terDj9OH6iBIq6jshjd5BGCK7TuaQtAnnI06ERMZgmq:bkBGte6e1jMQpPQanI06ERcgmq","tlshash":"55235d76b322e348d3076dfc981283b41775fa30bf21474bd4765b3abe890b44d66a85","first_seen":"2025-09-30T13:37:00.780746Z","last_seen":"2026-10-04T05:49:27.705641Z","times_seen":67,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":29,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/007916a8e139fefafa6483e40f1fd83d.js?ver=7684a","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.752Z","timestamp":1791085804752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/js/007916a8e139fefafa6483e40f1fd83d.js?ver=7684a HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-23a3\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9123,"size_decoded":3142,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6743)","md5":"40720fcbc8006bb4d592816af9525115","sha1":"8d5a9d596e3f0c5de1cc1cfe81753047fc251f4e","sha256":"27b24cee39f0132b487e6fc05dc6421bc30942e47138c6096de7004c91ffa5b2","sha512":"f490d4651677c60e2712db831d91aede9e9203517e67fcabc02a39b23d08c9e9021a1728aa763aff823ecc675f141b47ca47434d86a16173cf761a985368decc","ssdeep":"192:tZK4tK/DH4bcrmpjPDDV1CpAV3oWgEcPvX6OIvzgZ2xDmWIIqex0jmHQM798wNvK:u4tK/DH4grcx1C9EcPfumWKiHQM79xNK","tlshash":"6a12836163a03c7a06f61d564c3a6b80bd3c80d97a42d0aa783b7c8d5de9993136277d","first_seen":"2026-07-08T11:55:32.500647Z","last_seen":"2026-10-04T03:50:38.156529Z","times_seen":7,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAopxhTg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.129Z","timestamp":1791085805129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAopxhTg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rainbet-login.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26894\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:48:31 GMT\r\nexpires: Tue, 28 Sep 2027 16:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471694\r\nlast-modified: Wed, 10 Sep 2025 16:30:47 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48280,"size_decoded":27752,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"c26dd178864e132f538f22946f4bba94","sha1":"982b0e6f1234a1fa364309eb508eb374c27572cf","sha256":"b0ae3e89a7d3ef2b1838bb4b1ceb0b17cc3435af061eee809d76aa623ff116e9","sha512":"6d2431d1c91a79f2b94b8cd93d3dbe82e492818fb8c2baac7709c4146b38bace515489081bec4efaaf1b51d561d64afb22025974451811869fd6d9bb819a5b63","ssdeep":"768:H9o1g5mmfMy+DjK4PKrWLUjU3Adh/dys+TXcQv0Y877TmrcChwzwzVw:H+1g5B50Afs6PmrlAwpw","tlshash":"f7234c26b316c74de2476a7dcb32d394b375f930be23434b60ba5b55ae8b0f84d61284","first_seen":"2025-09-30T13:37:00.768094Z","last_seen":"2026-10-04T05:49:27.702177Z","times_seen":136,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":34,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/uploads/2026/08/rainbet.webp","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.284Z","timestamp":1791085805284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/rainbet.webp HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz; iu_popup_unique_name=GVgRBVsdHxQUBF4RBRcWDk0=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"},{"name":"iu_popup_unique_name","value":"GVgRBVsdHxQUBF4RBRcWDk0="}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 169272\r\nlast-modified: Thu, 20 Aug 2026 05:54:41 GMT\r\netag: \"6a8696a1-29538\"\r\nexpires: Tue, 03 Nov 2026 03:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":169272,"size_decoded":169619,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b070a6f52625b338e41a14e7655022d6","sha1":"dbc9dec0ac94459b18d561380061180d2f9b9c86","sha256":"c86c4b3f00c413c7a291d858b9d8f9c23c03ae16668263a6fd02e4b3e286a6d7","sha512":"de1259f706fa5bf60623aa2d9570865e9f49ba68c2365386066b4d10b4e60d2dfe90b4a665c416eb68c6b06cd84b882d5a8bf50ef7e184f00f8dd23b9897550a","ssdeep":"3072:54TVmiuAXhjmqjLH3PNf4I1/i/D/lqQKnXFSAUYVDLKZYNdGtyRdkt9FHV:54dua8qjLHfNf4yM/lq5VrV3KftmdeF1","tlshash":"0bf31269f77202aef01344f7ee8876a920f7b56bf03c0352014ab5d68f741adad4a15e","first_seen":"2026-09-17T03:16:53.438387Z","last_seen":"2026-10-04T03:50:38.158082Z","times_seen":4,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T03:50:03.375Z","timestamp":1791085803375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: pll_language=en-nz; expires=Mon, 04-Oct-2027 03:50:03 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://rainbet-login.net/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbet-login.net/wp-json/wp/v2/pages/4599\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbet-login.net/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz","quoted":false,"path":"/","expires":"2027-10-04T03:50:03Z","raw_expires":"Mon, 04-Oct-2027 03:50:03 GMT","max_age":31536000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"pll_language=en-nz; expires=Mon, 04-Oct-2027 03:50:03 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":216464,"size_decoded":44321,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (33916)","md5":"aad0a24ced99a070c01d263362e4b665","sha1":"f36dc2e131c6eb086f65aefda3ec0dedd8d6a39c","sha256":"62ccce572d39fa1e4d35281cd24d09b2c65f379ba0a99c0ca0411aadcd7c56f5","sha512":"73e0462ac3fd988b4b081c6dd61bad559db019c9193aecf6c155af7ea40cf40c700f0020831f018142ffe3908977d0b5c1763f5625ae28f0ceaec4b7df1ee719","ssdeep":"3072:xay4zdSPRZocSGgj1IALH7skniuxvKkk6ULHB5iekPso29:dhPRZnS/x78/9","tlshash":"86243b766358347d263fa3589f44721ca52e9006ea06cefcf0fac158a6cafe109b574d","first_seen":"2026-10-04T03:50:38.158698Z","last_seen":"2026-10-04T03:50:38.158698Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1109,"timings":{"blocked":-1,"dns":13,"connect":51,"send":0,"wait":965,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/css/50ba075f5f0b7464f0d41e9606dafef7.css?ver=88e87","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.741Z","timestamp":1791085804741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/css/50ba075f5f0b7464f0d41e9606dafef7.css?ver=88e87 HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-3f58\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16216,"size_decoded":3443,"mime_type":"text/css","magic":"ASCII text, with very long lines (16216), with no line terminators","md5":"516368f20eae2f8b78bb6e5f57edec4e","sha1":"688c5bfb85c6c39c4490e64049aa3d5b9a3e312e","sha256":"58492226d481dd950e6ea926a9c42c6fd4ad741a8b5759580d888d02f6e975f9","sha512":"98c981de8317c0d4a2492658839b0c5a59eb46445484156d6a21a0c27c80c2dd2f766f7657000f52807c8d328a39cc09f29df50408d9a4dd9188a39f1a1aea05","ssdeep":"192:8DlLGcxHF7WYqeauc4hVv/IcwKRBhTvPIhRxsEWxsxsjaGUFg1twWTWjWY:ylj1F7Ora1lHjQwPlji","tlshash":"d27224ed9e4d0168e3dfcf19779a554ea404f731f26e0af46461b860f2fe8c21d2a246","first_seen":"2026-10-04T03:49:49.533289Z","last_seen":"2026-10-04T03:50:38.159745Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/3531154f6a67901dd518481225145315.js?ver=cbbbf","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.749Z","timestamp":1791085804749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/js/3531154f6a67901dd518481225145315.js?ver=cbbbf HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-30e1\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12513,"size_decoded":3882,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12511)","md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-10-04T07:12:03.822935Z","times_seen":10573,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAkJxhTg.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:05.127Z","timestamp":1791085805127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAkJxhTg.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rainbet-login.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27185\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:48:31 GMT\r\nexpires: Tue, 28 Sep 2027 16:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471694\r\nlast-modified: Wed, 10 Sep 2025 16:30:50 GMT\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48308,"size_decoded":28043,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"a165d87fb7ee4f2daf1c1d3c0dd81ee2","sha1":"6e8b4c3c899786d5d9b5698c87dc8264e2b818cd","sha256":"376427b5322148d8de1e03f263bcca4935a2d60ba71d9f94f4947ab664c711ae","sha512":"8c819441d78cd8960c3f6c7d9baee0b5ed7f552615ebe677e514cb8a9b771a88423a1a9b110830155b44fbe4f1b1df53d47acbc13f7f97fcab47390f0dd3faf2","ssdeep":"768:4u8eGSmmfMJmblSDji1L0LsypQWvrIKtwtsSlIscZQyrwQrDIo+:JBY07w/pQWUNOuYwQrD+","tlshash":"19234b26f3568a08c207adbc8a23d3e47777fd30fe62474b50be6b15ad8d4b54e64284","first_seen":"2025-09-30T13:37:00.823105Z","last_seen":"2026-10-04T05:49:27.594727Z","times_seen":105,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":22,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/css/61ba624707517bff5f976ca29e6b3255.css?ver=b3255","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.730Z","timestamp":1791085804730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/css/61ba624707517bff5f976ca29e6b3255.css?ver=b3255 HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 844\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\netag: \"6ac1ccb6-34c\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":844,"size_decoded":1184,"mime_type":"text/css","magic":"ASCII text, with very long lines (844), with no line terminators","md5":"3e8c03e80f105ffb3f1ee650ca1e948a","sha1":"eda96a3db2e8d939a6e2507d2849f4df46ecc467","sha256":"8fc98424dfa86be55b0ddb032547990e0949f3e9d1f2e16562e9b84ef3b1885f","sha512":"e5aa7b565afc201a1b9b351323ea27e34d42a249ddcab53a6121054f4130ee4538230d905c98b4b362ca012d56a3ff5ce24c4cb8da5e39eff096aeb1e72b60bb","ssdeep":"","tlshash":"11014400012a84fae9b08ce936cef716b507103a623450bad1285caceceb43f03a1f18","first_seen":"2026-08-13T22:34:15.434728Z","last_seen":"2026-10-04T03:50:38.161625Z","times_seen":3,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-login.net/wp-content/litespeed/js/73ac67b45d8f4b741199537d8dd1133e.js?ver=6b747","fqdn":"rainbet-login.net","domain":"rainbet-login.net","tld":"net"},"ip":{"addr":"194.102.104.14","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-login.net/","date":"2026-10-04T03:50:04.751Z","timestamp":1791085804751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-login.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 10:03:18 GMT","end":"Thu, 31 Dec 2026 10:03:17 GMT"},"fingerprint":{"sha1":"FA:8D:C1:AC:F5:0A:55:3E:45:E0:97:40:5C:6D:13:52:A1:2B:8D:8D","sha256":"93:FD:36:FD:4D:BC:DB:AF:D7:B8:A7:66:F9:4E:FC:73:74:4E:86:A4:02:7D:4A:7D:B9:E6:C2:59:27:65:59:3A"}}},"request":{"raw":"GET /wp-content/litespeed/js/73ac67b45d8f4b741199537d8dd1133e.js?ver=6b747 HTTP/1.1\r\nHost: rainbet-login.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-login.net/\r\nCookie: pll_language=en-nz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en-nz"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 03:50:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 04 Oct 2026 03:49:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac1ccb6-348d\"\r\nexpires: Tue, 03 Nov 2026 03:50:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13453,"size_decoded":4645,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13451)","md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-10-04T07:12:03.885194Z","times_seen":10850,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"rainbet-login.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}