{"report_id":"61deb0b8-d60a-4f2b-abb4-fe44e75a88d4","version":0,"status":"done","tags":[],"date":"2026-07-08T11:52:27Z","url":{"schema":"https","addr":"rainbetlive.com","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"title":"Rainbet - Crypto Casino et Paris Sportifs en Belgique","dom":{"size":290839,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7971)","md5":"bf9681f3adb0d2418fcca79efd7cb3ae","sha1":"425f801a2708f92a5ad4b6b16592c0c10ef51200","sha256":"12148bc344ae0fa6fdf269ed88848d6d8e988091eaa98fdf9b7ac871bf157753","sha512":"5d312bef6430158e6dcbfc17c8a25e45237f2defd963869cc815dca2e552a9eb55611afa0636ab0c8805de8cf0396590bc10c3a0cd8b267ee82de4dcf2c42f7e","ssdeep":"3072:nUbcruOx26CFpPfaUM7JQp8/5Ai8x+25+1grgeDG4fSXpisBf:nmcrr26MgJQpLf5A8+","tlshash":"06541c2f56e731992a77b27caf9e7209212d9003db05cdf4badec1485fc5a9148b2b4c","dom_hash":"domhash9047eb97ab9e9c20655538257d72908e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbetlive.com","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:52:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetlive.com","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"2025-10-31","domain_rank":0,"first_seen":"2025-12-30T14:55:38.914672Z","last_seen":"2026-07-03T08:26:07.369173Z","alert_count":58,"request_count":58,"received_data":1152173,"sent_data":32484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-05T22:41:50.352327Z","alert_count":0,"request_count":1,"received_data":60277,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"allrating.top","ip":{"addr":"104.21.14.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-11-13T03:51:59.857093Z","last_seen":"2026-06-28T04:38:02.802522Z","alert_count":0,"request_count":1,"received_data":425042,"sent_data":622,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"g10102301085.co","ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":72137,"first_seen":"2021-08-03T12:42:57Z","last_seen":"2026-06-28T04:38:03.120401Z","alert_count":0,"request_count":1,"received_data":804,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetlive.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-17T12:36:54.326812Z","times_seen":35956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","size":8485,"data":"","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-09T02:17:44.810477Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e88a401907300a9989966839f7ab52d","sha1":"c15dcbe7b4ab3c929d4caa40438bbd384babcf11","sha256":"1320fe8c1f2515e760ba2b7347b1c6b4ad4f1f81e268099beb8b0b9e30cb9794","sha512":"49c9fc5c37a593f329bb646f7a7b53407fe1a05f5e43d91e0adecec646734c22a0bc32b0bb69ac87108a379fca06a89a18c0f5c208dce06471aa8cedf7a8ebb9","ssdeep":"","tlshash":"dd01abc9b9d17914259f616c21ab611e7573b5013e0c0ef3d46556922e30686d23e1ce","size":829,"data":"","first_seen":"2026-07-08T11:52:31.647944Z","last_seen":"2026-07-09T02:17:44.835205Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-17T09:19:36.588429Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"95f2a05e5ae6ace768625f9681c1a600","sha1":"130a15d98ad911168cec504323c47df8a56d16f7","sha256":"fa4fe08924aeb7be50fab76cbef2b007f1b96041bb7d29223d68f57257d07925","sha512":"caea853edf21b9e2851fe2760611762b9b4d81a019bf70662f36f764406388a1c5265c5b2a3c9b718d5aadba5cef71dbb586b5dce1eda217d6b57108cffffa80","ssdeep":"","tlshash":"72014066b3ac187143fb31a9d51f27c9a57d11fb7801948bbc0488451851f8d4678a1f","size":737,"data":"","first_seen":"2026-07-08T11:52:31.650424Z","last_seen":"2026-07-09T02:17:44.836269Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c89707a8c082961ca159d84a8131eaa8","sha1":"5fe8bc2a9ad79db0ca9d90d84321dd581af0dfcd","sha256":"7c462226aa863bec52a09827688344be38c8c4f39dd86fc2b987a45fc831b461","sha512":"4059dede13b59e95f2354e47a60406ad0edd7fbdf7e2f36cf61d10746f13255d7269647beb22b6be53d80631569ac6fa30bc2ade950aa315f4b4969ba129685d","ssdeep":"","tlshash":"f931e186e7fc0c7586e6326f1d7466c9203c56737c02549ffc8c8d09666cf91862139c","size":1854,"data":"","first_seen":"2026-07-08T11:52:31.651343Z","last_seen":"2026-07-09T02:17:44.836819Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b75ffcdf480589f19cbf78ce373dea","sha1":"316b05245c99c1420895c28a0383802e6c5d74ea","sha256":"3cb8441193a5962c3af7a83eb1a4418970173e7a7f89bb085de078e3ac16fc0f","sha512":"10af5558f1abf25dbb1f03fe16b20efea15aaa4db054488e516bc625ee6fd0b36194fe7241573aa29f91513eab613c3a5cc0f423f1c8851b3aff77a84c56ac78","ssdeep":"","tlshash":"ab410768dbaeb662432ea0b62bfe12de143e147e7a414ebb7c38405048e48093715c7d","size":1934,"data":"","first_seen":"2026-06-07T17:05:58.287593Z","last_seen":"2026-07-09T02:17:44.838838Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"70c4ea33619016fa130a1c1933d64a3d","sha1":"7f054004b6e651b33c6ce43ea172cd253e9b138e","sha256":"7c2aed9d86eaadb5284d3780434370a1c9571f51f3ac2ff63b518fea20c45e9f","sha512":"22ad339b5531a9e7d5c4d027df7376e872e52d97b9ab102faa8dda21530b31904f92bc27c0be474c8491740a539bd517531bb7850f32dd2520a6d4b2d9258844","ssdeep":"","tlshash":"7a410e31f37d293147bf64b529e5269e2a3950823e878ca6cc9c9c0624c1f9d4875cfe","size":1914,"data":"","first_seen":"2026-07-08T11:52:31.653363Z","last_seen":"2026-07-09T02:17:44.840242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa9a2e00541c5d978bbf0a6222ba76b6","sha1":"e3bbc246c652e6594c458f3eaccf859d9397eccb","sha256":"5c3b561854db1a9db55f57069bf0ef0b5b12d741130b1114a18f4c65b1a7d381","sha512":"88f6ed907a6edcba1ac4e7446911ba0b3b9aeffa748363bb42a31676c5edb62755f25a9adc29f495db93a874641ce13dc1f4b461b8ee4dc541e5692d66dc1be5","ssdeep":"","tlshash":"3611ce28b6be043286637129266ef6cc7979006bac11cd0ebd2d8dc80fd0e519db6df1","size":1071,"data":"","first_seen":"2026-07-08T11:52:31.654177Z","last_seen":"2026-07-09T02:17:44.842007Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-17T12:44:08.592289Z","times_seen":27924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7822afc6b334d0ca5ed6b539503a21a6","sha1":"1be3dc22cbc96453a4cb3d9c57bc90d59faf0cc3","sha256":"53c00b96719f2179e05a9e74bd142c8acfee616d5a6c545b88508c0d9b946eac","sha512":"08827878e9fbb6039658edd605c0841130e1bb2c38b1f6fedd6011f5dd4f196d2e6f65a7e374801851ff8c512ae76b82d6475cf804e31be666a8b3cc9a7982cc","ssdeep":"","tlshash":"fac0809998981d4514eac148017c231471149413cb1f5e55f24d004c6ff407969141c9","size":172,"data":"","first_seen":"2026-07-08T11:52:31.655537Z","last_seen":"2026-07-09T02:17:44.843265Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"16b836c6befab675fe3690d469783fd3","sha1":"c67b38eb74f13da5ea930a715982d65921c13f76","sha256":"18b33e47ad414733e8f7094aad60f4e3171fd06e898ef4934488d25bcde0cefc","sha512":"76b146f308f5724d4a255d2dc4a89b23aacba9f91e37b97ac69f8052af436fdd3cb248147cc3f3b061e3be0b8f5e2b07176a3b32f8ce789ee005a18d22a3cbcd","ssdeep":"","tlshash":"29b02b150cc01f131aa00ec64420723b11187031cd609c0056c3c44001245424a58000","size":121,"data":"","first_seen":"2026-07-08T11:52:31.656453Z","last_seen":"2026-07-08T11:52:31.656453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee801a9596c57f6de95f90fc38a767b9","sha1":"a0275eb8070f1ef39a018d22d34c2665a5fb7935","sha256":"f5983162608c89b095b9a5e69ac82651304e783d9022701fe8e071760dc590f3","sha512":"67650347acb003b98207273530dd179381acad6563943527180d41bedfe5399beb5de33b8ec8473996a5cb119f4b3a8de46b88619851955f4a4292fda1e6873e","ssdeep":"","tlshash":"da11f07b2e6c86fa4bc063d812485c1fa5dc5050e18aca9dd2459c3841a836b5bce707","size":1079,"data":"","first_seen":"2026-07-08T11:52:31.65731Z","last_seen":"2026-07-09T02:17:44.845767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd29938f1ad524bd6ba87f4c0bdf291c","sha1":"ccce2f1c6e49b96f686e080b7b85695a08b0adba","sha256":"c98099d4cd33c13298dc59ce0c8cf912d68a0ab756ffe1fe733dd2b224f08106","sha512":"7a3a9237343dd8840f4d9788b4e88875c086b4ca6703759708bf9ae22e1d7d781eb0f9c96dda0d3d2d1b7a2ad3f2f73262ebf8c149440c5b4865e5cc2d5d803d","ssdeep":"","tlshash":"04f059db6b5c0432c25f305e105eb3cc3d7d803269412d67fc78c45248e0d98966289d","size":545,"data":"","first_seen":"2026-07-08T11:52:31.658162Z","last_seen":"2026-07-09T02:17:44.8469Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dbc1008a0655ecb932c1fde0eb72b0a","sha1":"2e64bf12bf7529f841baceb5ac9d5089ddfe9794","sha256":"2d65e312c8a0eed794d22cb196d1fabbf363edc0db34dc532345c58ade40c7aa","sha512":"312a05df4c4d92127ba8f16b8dbf05092762e348a050ea66d7821ce6b47f01415d89448a6e2d677e8167cfc76c0e282301761845405e54224c37be2933eac27e","ssdeep":"","tlshash":"d0216bd2f74c1532c4ff357eb45a42cc262d9071bc2018ba3d6c622c0172f8c55a679c","size":1378,"data":"","first_seen":"2026-07-08T11:52:31.658994Z","last_seen":"2026-07-09T02:17:44.848182Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-i18n-js-after","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0516535a860d43b6e0d488abf93ae4b","sha1":"de32e07c73b5b23ca1c67d7120a8313aa07d7a99","sha256":"8cb5d7b0b4d8102552d79743dee6c3816ee682dd24bf95e2b3f1149089e45655","sha512":"fc4cb4b7ad3eb22e893b19aa48aa2f6e6dfd67b78fbe7b5382058a2ab9ca9d01381e76ab552f29295c7488f4898f92721ad8d098e59194164205fa37ac912244","ssdeep":"3:HqaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:KBLxTqtGmVOiFM/KGNMJ2","tlshash":"d6d112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6499,"data":"","first_seen":"2026-07-08T11:52:31.659849Z","last_seen":"2026-07-09T02:17:44.851585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-17T12:37:28.648772Z","times_seen":216612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/contact-form-7-js-before","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e468e5395841c7874bb346747b8089c","sha1":"733752983dfbf5d7eaacc436b6a11afba7cd694a","sha256":"5a52952229680588fb920b95777254c8a1b80d4cabb9a191f008c9a91a34f925","sha512":"e77db84971dbcdfdf834c17a8ea57a42e72c6b7f1a32b763c40b1161c67db1aa50e8985e6d553da6976966638a07fb8fc0692fa123856885b6d4a3986afb77db","ssdeep":"3:Hj6SVGDSiCmbFFlHrLLGLBF/FFhhzVEGUHsR5pHdFQAwaKLlUFrQAv:XLiRhDO11ulgpwAwaKZ4rQAv","tlshash":"d3d18099d9981d4514eac178057c2314b1149417cb1f5e55f24d004c6ff407969181c9","size":6579,"data":"","first_seen":"2026-07-08T11:52:31.660818Z","last_seen":"2026-07-09T02:17:44.849258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-17T12:37:28.676133Z","times_seen":224249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"56c9676ba030ad9d7fb5521ee10cee10","sha1":"f997465c15b5b5de8a53aaea553aa269dca9d755","sha256":"6da59ce6285ab9cc242e38eddfcf550026c0aaca760a6bc79a1024696b6092b1","sha512":"0849e329a05e8490ffb4aa7d72ffe67b63886370003ffddf0d4fa700a459cd399a928fc45eeb8f51016036ea1791c3838d7017118f74b7e68a5bd1ae402a7e2b","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiq:KZal0BKHWpkVM0KtmuECEh","tlshash":"2c13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc60e9bfb1","size":42015,"data":"","first_seen":"2026-04-07T18:32:07.00063Z","last_seen":"2026-07-17T12:30:37.113554Z","times_seen":4573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetlive.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","size":352,"data":"","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-15T03:21:40.92912Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-17T12:36:54.141044Z","times_seen":36762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/scripts-js-extra","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcd127deb0e541e3844824e6bd211c3c","sha1":"b936e7d52d48983199268dd407ca59e379e02d59","sha256":"d78260498aeae9ea689b2e2e47f550d2c450db65414df30d9544485ea560a053","sha512":"018107044d20580101e3f8ad1d9cd4263577fdbe1a0985ae4175fb47b7b4b5bf7ad28123e56341a05307b6ccef803aaf4eba8df2b9c2368593871e49d4b187e1","ssdeep":"3:Hz6EDew5vNVLLGFVgrTHnJH+LX/RN4HGY3r:P9xuFVgrTQLXZyHGY7","tlshash":"bad12b15ccc01f135aa00ef64824723b11587031cda0dc0056c7c44001245424a58000","size":6538,"data":"","first_seen":"2026-07-08T11:52:31.661764Z","last_seen":"2026-07-08T11:52:31.661764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/cmplz-cookiebanner-js-extra","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b981d088e7a1a3230b2cc92733a82183","sha1":"5e20a990c556c600f9a940f7eb53f01131ab8e83","sha256":"0779eefdd1fdfcf2aa8a6daaa3214f4fb4224670daaff72b82c48cb3ba9726ba","sha512":"74e7ef6246199986bcb9b288e7495e92ba1ff3caa014198c3aab6eb0675f95e3e88497a3111d30a1bff294b835f2c5b7eb0799b36b7217c96e82b86b3481441e","ssdeep":"24:3RWNe+I+Beyf+6GGaDeQdi8qRPoKPzC8eGFxEe7PUtO2:3RWcnAeG+U8qR3hFSbO2","tlshash":"11f1f07bee6c86fa4bc063f812485c1fa5dc5050e18aca9dd245dc3841e836b5bce707","size":7502,"data":"","first_seen":"2026-07-08T11:52:31.662618Z","last_seen":"2026-07-09T02:17:44.852817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"opt-in","filename":"https://rainbetlive.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","line_number":1,"column_number":22242}]},"http":[{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.485Z","timestamp":1783511524485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1027,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-17T09:19:36.556937Z","times_seen":34,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/casinolab_logo-12-1.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.524Z","timestamp":1783511524524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/casinolab_logo-12-1.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30136\r\nlast-modified: Fri, 21 Nov 2025 14:12:00 GMT\r\netag: \"69207330-75b8\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30136,"size_decoded":30481,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cfd2fc22a4e9f16905b157c3a6de81f","sha1":"bf64dca4c27074725a2f2b1582c9e666a73da733","sha256":"010a1a736b1a0a7eff1510542948c18acc28c6e74e6c55c7fe3736b74c41bcc5","sha512":"9ca4b6d3f928a6abecf791d24c6372134f1ffe398f87ecf68c948061f9cb76ec66a9fe66bc06b2ef13a5f4448062154c3d70daab4e4f9547bed8791624a0abe4","ssdeep":"384:VwTFaG2Ydy4WmMZ16V+RswvKIxhjgjO+UTi6VAtI04FBxm1QoFDMs9AS7k2lP8Tp:KT7djYZUOfDc2+6VAtIDxEQQjkCETqS","tlshash":"11d2e0c51cf606aff11c0038a61d1a66f5713ed86c0362a5f1826bdd1b59caf4b2a1bb","first_seen":"2025-12-30T14:55:49.03169Z","last_seen":"2026-07-12T22:10:25.116571Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/OnlySpins_300x300_background-1.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.528Z","timestamp":1783511524528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/OnlySpins_300x300_background-1.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5790\r\nlast-modified: Wed, 11 Mar 2026 14:48:41 GMT\r\netag: \"69b180c9-169e\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5790,"size_decoded":6134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d33767d4e03c16feb1e6053be1afb9a","sha1":"c0a67c688babef375a8b8cc5d31a6b4f9a0f17ec","sha256":"9c4c20391367781e3dc0f3bd51c18a7e3cbe45f4096cd468ab1418aad105bda9","sha512":"77a7ae702ef81eb17ccec0fe07c96ced90cc620ef167a6e2adb599b07e0f30b52f7653b8e4fc7214ab81c036b0384dca3e95cba3e86c8be70ae50c92e67373dc","ssdeep":"96:bElbw+iKodZ9fyo8WuSvgSR68OOqb0WGls4YS1N9IlGjKOUbWPLt0c:mw1djyo5/gSR6DOqbes+1N9JYbWjtB","tlshash":"fbc19e46c0a5a7f2d4b35970f1a31e9abad0de856f1ca09d46563531110de6f8d9c822","first_seen":"2026-07-08T11:52:31.572138Z","last_seen":"2026-07-09T02:17:44.794185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/Bezoek-officiele-site.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.530Z","timestamp":1783511524530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Bezoek-officiele-site.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41150\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-a0be\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41150,"size_decoded":41495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5acfa8a88e76d16dc55cfe91460a759","sha1":"6f8a7720120e578bd0534c0e4d5bedd6711b48fe","sha256":"bdd79eace956f7a2017a0e0a435518f77fd3f49d2bcbc565c46632194c7c4668","sha512":"71b2425a483e69257438f62c74de961e2c4b3089a89f58c082f7f3d56b29f6e4009991ba34462d1455e7d304bd5bce0e8c950ff5000cf37a5cb5c8ccdc35e679","ssdeep":"768:zSvgMAyzbaGC2WRon/stP0TM+qdboiY9coxWK8wRpaVBT69qCH9q09pvJb1ZrvHG:ztzk/oPDdbtYGy7pW6Nph5ZLmJ","tlshash":"9c03f11db4825bc185f92a245dd2ada6fc3bdba5ae11a007cce352f71f140f16a4736c","first_seen":"2025-12-30T14:55:49.08495Z","last_seen":"2026-07-09T02:17:44.808127Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/complianz/css/banner-1-optin.css?v=1533","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.778Z","timestamp":1783511524778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=1533 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Jul 2026 10:56:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4b89fb-3def\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15855,"size_decoded":3284,"mime_type":"text/css","magic":"ASCII text, with very long lines (15855), with no line terminators","md5":"6429eaa306c83c6f689222027b0fb19e","sha1":"d3b0447ddeb3030844ecb6aefbb1b8d6b2331112","sha256":"be6ed808fd23fd2851de453ece45530b68aee1a13419bf2dd98e6b5a0af5d72d","sha512":"298a39cd48cf738d80ef2822bf96197a952cc09a259046b0b6cbe648423cea76fb8b30e13ad36ba6373dfb124b61c7aad7cce4e4abdd37184d69af1aaed86a04","ssdeep":"96:su9ppeDJpne6ngZ1csUi5p8Z1cAvqlIWurrkTobudlYLhf8Iqb56qlym6OoLBa/e:f0SHWDi5cWi2IWRzZbZ3sMBg","tlshash":"786220a99e0c1164d2cfdf1d3baa9a0e9114f731b29d1af824a17850f2fe5d11d2e387","first_seen":"2026-07-08T11:52:31.574224Z","last_seen":"2026-07-09T02:17:44.814347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.481Z","timestamp":1783511524481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2216\r\nexpires: Mon, 28 Jun 2027 11:52:04 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBgzurgvoB0lKN0tjhHi4LsjEepGTmscZdmyI3rbd4jBSUNAQPiNGeY%2F57P26oztyjCBKePOHnD0xc%2Bc3H8fSHLDonXDUUuAVT4MmPmTi%2BGcKeW764qd7lxSDC6rERMh9wD0fXqL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a17ee1747d080883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59305,"size_decoded":11434,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-07-17T12:27:22.251279Z","times_seen":45966,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":60,"connect":13,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.516Z","timestamp":1783511524516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 598\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\netag: \"660dd398-256\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598,"size_decoded":967,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/polylang/de_DE.png","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.518Z","timestamp":1783511524518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/de_DE.png HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 357\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-165\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":357,"size_decoded":698,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"c8366d209d63b7cda8314d4258c36807","sha1":"6adb58ed9c1803599601de3f3645b0181c23709c","sha256":"6434052af0ddf6b0203fc314c95448d2148edc35dab8973128a46430fd6152c2","sha512":"9a78f5c6c4d95d2e73ee6a8b3e623660592a00713ba8461d5f772f689d6f0e6baf1aa0ce2b651e401dfb75ec3fa73e3784e0a0c0caf03f8e17657e1ef9843a30","ssdeep":"","tlshash":"7be0c0d01560ed29e2815af9449e4181d07b24be40ca16871c16cda90a4ad7b82523ad","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-07-15T09:41:04.731815Z","times_seen":485,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/rainbetfav-36x36.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.864Z","timestamp":1783511524864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainbetfav-36x36.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH1URHVxWCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 898\r\nlast-modified: Thu, 20 Nov 2025 19:09:35 GMT\r\netag: \"691f676f-382\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":898,"size_decoded":1240,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de31e0848aea8621fce848599a2f837f","sha1":"3c38f36c3e1e50bf29f15db7399f88debc350701","sha256":"b9aff756ba31a26aa6100d3c928baad608d06924a23ba037f80423bd0667b297","sha512":"04fdb663704c06bd569a9ebbc895e27947192fd3c5d7587f0d45965f32fa0610b89b57bc0c07721a7e6051f721c970ee5280ae530aa578d7182d2b98b1d22277","ssdeep":"","tlshash":"6811203fa3785b5ee0087d7461e91fa2e326ee07c227872a814487a20b244c2f96c187","first_seen":"2025-12-08T04:02:28.610897Z","last_seen":"2026-07-17T09:18:25.922891Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.742Z","timestamp":1783511524742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4d38\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/dist/styles/styles.min.css","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.483Z","timestamp":1783511524483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/styles/styles.min.css HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e0018-90cf\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37071,"size_decoded":5540,"mime_type":"text/css","magic":"ASCII text","md5":"b4ff3bfe226d51aa7d62c65d9dc21b68","sha1":"feb0060ac2a89a7e6cec259fe4fa2abc6554432a","sha256":"81adf3d9093244663cca03c502058b0131408962a15d9a035609f7908249f3fc","sha512":"9183893095c0cc667e25a3015080ecced33778f4cefc8d49b639875cc053b59945f2942b8606ba193e39bd68a30570d4d8ba0fbe852ad3ef95cb37c762b835fb","ssdeep":"192:/NqClYjXbiLZmBOll/qnewojZ815/t4ssaWZZ+ya76kCaZQF7hoCkiufoSfufTGG:TZs5eoQFlN3svBeb7","tlshash":"9ff222216ab738d9651ff018ef99260621585007f14addf8fedde2886fce29484b1b4f","first_seen":"2025-06-17T02:00:31.753232Z","last_seen":"2026-07-09T02:17:44.809919Z","times_seen":12,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/polylang/pt_PT.png","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.520Z","timestamp":1783511524520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/pt_PT.png HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-53c\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1340,"size_decoded":1682,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"af1547fd2a4f0637b14c97b9a00037be","sha1":"415583b94ef979b1ec469b59f7d2facac6cd3512","sha256":"a95ec412210a006e992d724d7695b49d843bb2ecec3547bd0be3f6b2b15a7407","sha512":"72becf4556091f88c0086dfc4efa0d36a9d42fbb62c58504d84d3a66ce979513e2b24672ca8510ee289c7c1c9db2f623c8f736a95ce3f36ff38c5c6939a2585b","ssdeep":"","tlshash":"05214e87eb813c81268ca6c254df803786534a80cae1f86e70cfd41b1d62ab118299eb","first_seen":"2023-06-26T20:40:20Z","last_seen":"2026-07-15T04:39:25.12283Z","times_seen":64,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.989Z","timestamp":1783511524989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH1URHVxWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4c08\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.504Z","timestamp":1783511524504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 07:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dfe28-1641\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5697,"size_decoded":2814,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-17T12:36:54.326812Z","times_seen":35956,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.710Z","timestamp":1783511524710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-df\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-17T09:19:36.586377Z","times_seen":37,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.741Z","timestamp":1783511524741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4c7c\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.525Z","timestamp":1783511524525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e0018-5fe\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-17T09:19:29.581557Z","times_seen":38,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/10188811-41ab-4cbd-9226-64fbce346b00.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.552Z","timestamp":1783511524552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/10188811-41ab-4cbd-9226-64fbce346b00.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1980\r\nlast-modified: Thu, 20 Nov 2025 19:18:47 GMT\r\netag: \"691f6997-7bc\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1980,"size_decoded":2323,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cba74cea8fe6c59a4d939e2e94615c6b","sha1":"33a5aae92cd699f24df8168e8cc0454a5912c0a7","sha256":"0531737cf8ef31a4669653610977a5529ff633bd38063c7aaf2dd9f4a0033a60","sha512":"ee34165999fb2d0b059472964a7ba8071692cb19153de8c09d81f21d67c25a350c6a20374fbb5adbc8011e1d2628be52af8859e3adc6f982c1a7e22c86332e53","ssdeep":"","tlshash":"9a41e92817a80308fda16bb471d51f56f7e4b53ac6414b4940829f2a2308df87cdc4cf","first_seen":"2025-12-08T04:02:28.616426Z","last_seen":"2026-07-09T02:17:44.826798Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.294Z","timestamp":1783511524294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Sep 2025 10:01:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29df0-d0f\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-17T11:46:23.607118Z","times_seen":4452,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allrating.top/wp-content/uploads/2026/02/ChatGPT-Image-23-%D1%84%D0%B5%D0%B2%D1%80.-2026-%D0%B3.-12_19_42.png","fqdn":"allrating.top","domain":"allrating.top","tld":"top"},"ip":{"addr":"104.21.14.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.522Z","timestamp":1783511524522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allrating.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 23:21:08 GMT","end":"Mon, 07 Sep 2026 00:19:41 GMT"},"fingerprint":{"sha1":"B8:A7:2E:94:32:9E:88:87:CE:0F:AB:6E:EC:23:A4:CA:01:43:9C:2E","sha256":"B3:36:32:AB:6A:92:11:C1:EF:D4:A0:4B:AA:3F:2A:72:8E:D9:D9:46:1B:94:1A:E8:AE:B5:AC:FB:19:B3:26:C7"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/ChatGPT-Image-23-%D1%84%D0%B5%D0%B2%D1%80.-2026-%D0%B3.-12_19_42.png HTTP/1.1\r\nHost: allrating.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Feb 2026 10:19:56 GMT\r\netag: \"699c29cc-67944\"\r\nexpires: Thu, 06 Aug 2026 15:54:25 GMT\r\ncache-control: max-age=2592000\r\nx-server: console-manage.host773\r\naccept-ranges: bytes\r\nage: 71859\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uGuMu7atC9tIDdTCyvQv%2BPTES5RHLQ9bIwW6my8VsYoPzyG8T2fY%2F9qYnp4TvNMb8Qt7CnR%2Bc%2FUcMt7YDYQqDYmX7my4VcLPto%2Bh9%2FeRI8ZE68PCP9%2F%2FJGRGuaNJ9cz\"}]}\r\ncf-ray: a17ee174fde0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 424260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":424260,"size_decoded":425042,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"192e6472dcee1df90b1d449cf356ca6c","sha1":"161fa302f4236f85aa53e4b5bcc50998caa1f068","sha256":"f13f96de1645b5632de6df80f8040c66f1fbd5a74d1798f1089885a017c5683c","sha512":"c5082a3945316fc872f081476b799e2309835d9802d3c3bffd6f446120d0917ae96bf547ab10756cb136b8174986355d6c8a5822c6a14f96ad3276c419fa24e0","ssdeep":"6144:rc4Dh+TWY7M8S0hhZu954dk0EBclYutKcJ5z6WRB/QiG2LPj/EoUQO0R/w:hhA+0hhI9Mk0E2Yul5z6u/QQLUo+","tlshash":"d594def5ffcfa6c6fb6faafc035e271459b066c20ec00511487b524a1aa5b170c3697a","first_seen":"2026-07-08T11:52:31.591007Z","last_seen":"2026-07-09T02:17:44.825697Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":32,"connect":14,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/822c111c-69a1-4978-8284-4317ae125eee.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.546Z","timestamp":1783511524546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/822c111c-69a1-4978-8284-4317ae125eee.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2080\r\nlast-modified: Thu, 20 Nov 2025 19:18:44 GMT\r\netag: \"691f6994-820\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2080,"size_decoded":2423,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25bd97ed63cfcab632649a9f1886b27b","sha1":"ae95f1d196dfa3c01032c49fc496c1ad1e1734c1","sha256":"0b4507801a93c0414ea01d747d4f56aa6c3bb6058def83fca97fd2c049d5477c","sha512":"78bcef71cc4576df1a6d70bc119c7aeed2aec94ccb3705006b246803ef3f2e29d77a7dcc496cad9e65f3ddf26335fbde21c17557feec24f2f2337f5a7bbb0623","ssdeep":"","tlshash":"3141ea56a779679fd4230fbc22c50f41c7d52366439495b0c70852716f992dc79ec4f2","first_seen":"2025-12-08T04:02:28.613589Z","last_seen":"2026-07-09T02:17:44.824816Z","times_seen":6,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.985Z","timestamp":1783511524985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH1URHVxWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4bc4\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-17T09:19:36.575522Z","times_seen":137,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.523Z","timestamp":1783511524523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e0018-5fe\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-17T09:19:36.560105Z","times_seen":44,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/582486df-f28d-4a38-a46e-6563b5b23e27.png","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.527Z","timestamp":1783511524527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/582486df-f28d-4a38-a46e-6563b5b23e27.png HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 141301\r\nlast-modified: Fri, 20 Feb 2026 15:40:19 GMT\r\netag: \"69988063-227f5\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141301,"size_decoded":141647,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"24f8cdb94fbd5488c5204875faca005f","sha1":"8e4469b176a132674b485c78bdd40b5a500a3268","sha256":"204cd11b0fd6716084e7ddf0f4d5dbf594c06c38e153e683537c59cb7f849624","sha512":"4d39ac63d9016fe3fec26c02c4365b4e09cd7f840a4c4a4cf96d4900bbb6048e2adb55e3b9d8b58c6f531ad42389ab5fc4fe40fd58945f5a309daa3cca40300b","ssdeep":"1536:SSnTKyKqfIHwAqSJjeTLqtYZHbB5dQi3umZ7U1yqk4nKR7SehpBBNJxrfloMt/T:HQEIHwAReXSYJxQFme7nKR/hxNJtdx/T","tlshash":"39d3aff0bf4fb5cbfbbf58fc032a2b66263252c25fc5295601be07412564a235d76868","first_seen":"2026-07-08T11:52:31.594476Z","last_seen":"2026-07-09T02:17:44.791879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/Email-activatie.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.533Z","timestamp":1783511524533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Email-activatie.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9722\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-25fa\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9722,"size_decoded":10066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8fff16c5978e094c1a51fd95b5ae621","sha1":"001d63e1f4333b0d7b7982142e330061ac60df10","sha256":"4ac6fe9e278a666766f5fa24872cc9332bd990bf4fb7a2b377a8da34670b4bac","sha512":"8353f52923e3ad415c2e40ef8fffdfc2da69cfb0a6c60568db07d9e647bd11069590672ce38ac73fbc85cd980b4d7086f6aa4c1c17d740b57dcbf88497317d24","ssdeep":"192:9LHCSvVOMAVZyFdV1bjuVlAD8t4oNoPq+ceeYyt1pnzrq4Mbj5Is:9GSvgMAVcFdV1HGyD8+oNo71eXnKbj5p","tlshash":"4f12ae17981a72d2c78e971a8efc0cf4e573af58cdd1c48351d1cce782056a16eea28a","first_seen":"2025-12-30T14:55:49.066765Z","last_seen":"2026-07-09T02:17:44.821447Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/Crypto.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.536Z","timestamp":1783511524536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Crypto.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3374\r\nlast-modified: Tue, 04 Nov 2025 14:30:31 GMT\r\netag: \"690a0e07-d2e\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3374,"size_decoded":3717,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d163dbcb25a906f2ee2439b2e0c6d39","sha1":"c404967c633d727514862cee1f96efff0c02d2d7","sha256":"7f95cb99f573b868e81cf428b34b51365adf1dbab7b1d3bd5fded050fcd6f60a","sha512":"56a683cf6beaccbf16989e379b1f3d9774822cd77ee02f5414ab6971f19ef8da0c03f40dbcd5c25ad66a78e9ab8acc4e91ed469cd687a728765a9f866a966770","ssdeep":"","tlshash":"ce613d1dac5103e0064e72698cf9b8f4dd336949ccc05445a4d3d5db1d94e825b7b0cf","first_seen":"2025-12-30T14:55:49.043684Z","last_seen":"2026-07-09T02:17:44.822522Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.711Z","timestamp":1783511524711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 282\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-11a\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-17T09:19:36.583551Z","times_seen":104,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.740Z","timestamp":1783511524740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4bc4\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-17T09:19:36.575522Z","times_seen":137,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.521Z","timestamp":1783511524521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e0018-5fe\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-17T09:19:36.565344Z","times_seen":43,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/Kies-registratie-methode.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.531Z","timestamp":1783511524531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Kies-registratie-methode.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14200\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-3778\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":14545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14e8b8701829ca0ce0e85ad87695340b","sha1":"6633ba74fced80f7170ddee0208fb9d7b8dbf2d5","sha256":"338d3ec9aca81cc29c15d1b0fe3b3dc6515c7f4988c4ec56534af82476e55189","sha512":"d58ed0a8a0ff9596aa818d1fa2fc6d8c305679e21ab99cf415901938e7648e9c1bed2b6001de68ae1f12becf34b58935cdfacabe2bc80b7f7fd06875bd027e4f","ssdeep":"384:pGSvgMAVcFdV1HGyDCknCa5ztKRlrFXK+ameqR17d2HpkK15bSOP+oL:kSvgMAyz+eCa5kgmFRRd2JzSz6","tlshash":"bd52c0686a3213d64b65278e48f0045ed4338a41d4448caf7fd788736ea70e7ef7d295","first_seen":"2025-12-30T14:55:49.059035Z","last_seen":"2026-07-09T02:17:44.795341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/rainbetfav-300x300.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.862Z","timestamp":1783511524862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainbetfav-300x300.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH1URHVxWCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3768\r\nlast-modified: Thu, 20 Nov 2025 19:09:35 GMT\r\netag: \"691f676f-eb8\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3768,"size_decoded":4111,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ecd14b4037aab18af49c0c24bd43d97","sha1":"34174cb594165b8aa92fa4fd28114a00ef779f8e","sha256":"b47701b3befdef1d213d351741c2f7ef6a4c88d3a26854f041b760f46c94be29","sha512":"03b0c1ac961caedba30c69b8b85267e8de2568e13a02599b3ea0dbe1bc456fa137e0997359ff13fd3c154df378331d7fa11f985443b429fa5df0d677ece25ed8","ssdeep":"","tlshash":"38717eb517376779c6701eb4e06036e2ebd07517ca023566a0280eba03407c17d7f5bd","first_seen":"2025-12-08T04:02:28.687932Z","last_seen":"2026-07-17T09:18:25.873805Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.988Z","timestamp":1783511524988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH1URHVxWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4d38\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/61c01ace-3a1a-43f2-b564-f37e55a17ad6.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.542Z","timestamp":1783511524542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/61c01ace-3a1a-43f2-b564-f37e55a17ad6.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2336\r\nlast-modified: Thu, 20 Nov 2025 19:18:41 GMT\r\netag: \"691f6991-920\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2336,"size_decoded":2679,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f111f7ef53193e4da6880e13be80733c","sha1":"ec8caef1631e4f0b6f02e83c4913b7c908771425","sha256":"2700c2db71cf9307807a9e85fc2f8d85b0bed6970414f626ac569ab4f3fbefc2","sha512":"ab9ee5d79f8b5e6cb4902376e281a5992f07b2ed60481b489cdde28820dfde3f4367bcb6b8cac2581c9d97b5244d6a1b5ec2b0469b0f82a9331882a9ae283cd8","ssdeep":"","tlshash":"c441e92153550b1af95f1bf022a16f10eaf1bd75d3416e199243438357a02cd795f5cf","first_seen":"2025-12-08T04:02:28.680985Z","last_seen":"2026-07-09T02:17:44.823497Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/092657d8-8e83-484a-9717-442ae1ab7886.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.550Z","timestamp":1783511524550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/092657d8-8e83-484a-9717-442ae1ab7886.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2650\r\nlast-modified: Thu, 20 Nov 2025 19:18:46 GMT\r\netag: \"691f6996-a5a\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2650,"size_decoded":2993,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0cd28c3b7fd01c4bd0a91491643354a","sha1":"68f553857f319be3598b919912eacc9723a1b995","sha256":"cf5f2c4057c53433704fc056bf560ae224b401741bfd2c41f020c7bd68d7aed9","sha512":"c5fe40193e39969119a7b8ea330601a20c993ecc818e8103d081109e1a30aa35fcacff691f591ba06db37271e9b5604853c181a0d5add84f7fee638b66e6b563","ssdeep":"","tlshash":"44512cff1f64860ef10426bd68aa8deef5c9ab1289587f54b2d3012d4b13dc06c6538b","first_seen":"2025-12-08T04:02:28.678906Z","last_seen":"2026-07-09T02:17:44.819377Z","times_seen":6,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.987Z","timestamp":1783511524987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH1URHVxWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4c7c\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:52:02.543Z","timestamp":1783511522543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: pll_language=fr; expires=Thu, 08-Jul-2027 11:52:03 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://rainbetlive.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetlive.com/wp-json/wp/v2/pages/18079\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetlive.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294289,"size_decoded":51116,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8118)","md5":"e8aade267be8e6b1c847133b42b8211d","sha1":"90962e5a4f5b1ec2431c7edcce140956381f1c40","sha256":"9fc3c4078ea23e05caf1b9b7efe8c67b8654c81e5452beca1bce000caf50c538","sha512":"dd88d005d32d1cfe56b42ffb7c06fdc0da570b376a466f0039edc0b49f6814e5cf43c96c24c28512f1ee2188c6da9c4bfca9fd5a7bfc398de1b0cac6395f2cb1","ssdeep":"3072:FUbbAuOi26CFpPZJQpsW/jvllsrgD9Vzn5MxeDG4fSXpisG4:FmbAA26MfJQpz+gpo","tlshash":"53541b2b57a721992a37b27caf9e7309612d9003cb05cdf4baded1485fc9e5148b2b4c","first_seen":"2026-07-08T11:52:31.615412Z","last_seen":"2026-07-08T11:52:31.615412Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1479,"timings":{"blocked":-1,"dns":71,"connect":19,"send":0,"wait":1360,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/rainlogo.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.515Z","timestamp":1783511524515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainlogo.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3778\r\nlast-modified: Thu, 20 Nov 2025 19:12:22 GMT\r\netag: \"691f6816-ec2\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3778,"size_decoded":4121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3f1559f7cb6abcbe9a23fc75173c304","sha1":"87b231b2ddbaf4a2cfb71d9bcf0662899d592c65","sha256":"97b00246ef0fe09b6eb39f12cc43179c32c25b0fdb2ceb5bd2a4b7617533709d","sha512":"2ba56e0cf730294aba137e6ccc5b1841e5f7ee1c657acd1416e3a25f4c8cd20f5ca410fbe917b4ea4855b9c111677ec1afa6402a7fe509d308b15f8ad8b0c9b9","ssdeep":"","tlshash":"da713b66b324973df022b5f5016917daea84ac00818bfbf522c441602b38bcc61f8a1e","first_seen":"2025-12-30T02:21:12.811036Z","last_seen":"2026-07-09T02:17:44.803383Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/be.png","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.517Z","timestamp":1783511524517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/be.png HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 272\r\nlast-modified: Wed, 22 Apr 2026 08:54:41 GMT\r\netag: \"69e88cd1-110\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":272,"size_decoded":613,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"c110ddb748c542b725956c20e952f039","sha1":"4610c72d189c48a1cbd892c89ddc4600bb15301b","sha256":"158dbb93307e0f78dff134debb341424e9ccfdc11784459f26d486fbf65b968b","sha512":"d9204ca763edd05925344ba14c3effd622fea101a6241f067d73cac8cccd67ce2ab6bbca0154f978ce06d84b5966672496f60dbecb65396eed3022207078dc65","ssdeep":"","tlshash":"8bd02bcbf32e5c38f36c69bb631540558d05501d581c818ad08e31405747c3078dc195","first_seen":"2025-02-26T19:06:02.919898Z","last_seen":"2026-07-09T02:17:44.798409Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/Invoeren-account-gegevens.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.532Z","timestamp":1783511524532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Invoeren-account-gegevens.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16158\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-3f1e\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16158,"size_decoded":16503,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ebab33d7fdc0ddf5dc700603b2b676e","sha1":"72f8d28337f2ab2de390414237a9c1adf3490dd6","sha256":"aedc7b645e9546410df1798e515f120d5485819cdfc02efd2837a7ac429fac94","sha512":"fa4910c3a465c726f742e7ed1b2bfa97314e06355cd81549801f96ee49169c0bbfb42ca07ceceb41a31738e5ac33b545aff246a7ae493727b8a19c26846cf004","ssdeep":"384:bGSvgMAVcFdV1HGyD4hLzBvLlyN1q9YTS+hLVg9lFAY74YwU2DOWp:iSvgMAyzuvgHrJg9vZ74YwpCw","tlshash":"9272e039ae6117fb026e524a44fd218ac7774e2af8c6a0267487de7754d68006b273ce","first_seen":"2025-12-30T14:55:49.056297Z","last_seen":"2026-07-09T02:17:44.786325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/74de2455-966c-47c3-84c7-7202b4acd950.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.553Z","timestamp":1783511524553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/74de2455-966c-47c3-84c7-7202b4acd950.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1674\r\nlast-modified: Thu, 20 Nov 2025 19:18:42 GMT\r\netag: \"691f6992-68a\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1674,"size_decoded":2017,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb744b64324949b5c5d2df2f7b141951","sha1":"b9bca1aad1c94ac40d60fdab1515537c26520184","sha256":"0f5d25b1df3bc12f960ebe7124c82f3b583232dd5d386911b5c1cdec9c82faec","sha512":"82250e10b04aeb461838e53fc1e84faa15e715abd2f56428ebcaf089a80b721c0fc6d349fb3863bab02709761bd7a60bc5141334508f64cca83582bf865a5df6","ssdeep":"","tlshash":"9931d76413b02b0be1527ffe00e35bc6829d1c10c69f9743e71a8a776724ae5298c75e","first_seen":"2025-12-08T04:02:28.60794Z","last_seen":"2026-07-09T02:17:44.787089Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/18.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.555Z","timestamp":1783511524555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/18.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1148\r\nlast-modified: Thu, 20 Nov 2025 19:18:40 GMT\r\netag: \"691f6990-47c\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1148,"size_decoded":1491,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdc831b6b11226f06fa66ddf16669fa0","sha1":"bc15af299bcf51c7f9799f324cca18f916ee4a70","sha256":"a9acb299047f1409952793a383a1685b151a3fc57a999a9cde69e73198036afc","sha512":"74f9f13a33628f71a2fc92f112f220da14cd129aa183114bdf8d888d22c13579f74ed27f152e2fe4a93044b98b6f207d1dc17551fe2bdec6181585087ec51856","ssdeep":"","tlshash":"5e21652f93156349d90a36f520c42b82eb2d7c399253b6bbd38a03251b04ad6698d0cb","first_seen":"2025-12-08T04:02:28.682592Z","last_seen":"2026-07-09T02:17:44.80281Z","times_seen":6,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.516Z","timestamp":1783511524516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 05:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f1918c-a41f\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42015,"size_decoded":11310,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42015), with no line terminators","md5":"56c9676ba030ad9d7fb5521ee10cee10","sha1":"f997465c15b5b5de8a53aaea553aa269dca9d755","sha256":"6da59ce6285ab9cc242e38eddfcf550026c0aaca760a6bc79a1024696b6092b1","sha512":"0849e329a05e8490ffb4aa7d72ffe67b63886370003ffddf0d4fa700a459cd399a928fc45eeb8f51016036ea1791c3838d7017118f74b7e68a5bd1ae402a7e2b","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiq:KZal0BKHWpkVM0KtmuECEh","tlshash":"2c13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc60e9bfb1","first_seen":"2026-04-07T18:32:07.00063Z","last_seen":"2026-07-17T12:30:37.113554Z","times_seen":4573,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/legionbetlogo-removebg-preview.png","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.526Z","timestamp":1783511524526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/legionbetlogo-removebg-preview.png HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 6364\r\nlast-modified: Tue, 12 May 2026 12:40:41 GMT\r\netag: \"6a031fc9-18dc\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6364,"size_decoded":6707,"mime_type":"image/png","magic":"PNG image data, 119 x 28, 8-bit/color RGBA, non-interlaced","md5":"b7370aa0ccffac49558538fb439037b5","sha1":"47998847f03d452c02ed2bd1e97dced4109469b5","sha256":"c5698aad4bd453efa7e27e92ac4c607385f0ccf0741e67b94d8376490b094f42","sha512":"56f54e2a63ce29499e3f87d9f06b7b23bd95cff62bb6034fc7685b2442448d82f43cb0356ad811752fe09d58fc891154edd95cd686b60e06e9902032a283fc26","ssdeep":"96:p1CHsMy9UB1W6rLAYZdlzEue+BAaMT4gNZxfKPtxFnWVzULiQ1SPBD0uyA4P:p1BMwR6jlzEue+BAj/Z1KNWKiQ1SP14P","tlshash":"33d17e4615837bf95dae170610bac0fad1acc22107a53d9c1af4e8d802df2aad8b534a","first_seen":"2026-07-08T11:52:31.622868Z","last_seen":"2026-07-17T09:18:25.93909Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/images/rating/badge-4.svg","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.828Z","timestamp":1783511524828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-4.svg HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH1URHVxWCFYV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e0018-5fe\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1094,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da49c60a038c21ad060f0b53ff910426","sha1":"174fdc729062994bb104f00c9c6072a0cf4faccc","sha256":"addd89150ca262be3c0335ee993d4559fb1d5ce30ac6c25c6c3bdccb7c49e9c5","sha512":"38a85e0737612e812633a5b3f7f66a8bd9609ff6d24011b479ad55027f61373b54cecb7750d75d45fd2765931456920866eeafde617bc6e6d018cdc206d072ab","ssdeep":"","tlshash":"cd31957ee10d2c2af12885bcae52d478047abdfb4cc2000044e1b9abd0a24c60cebe5b","first_seen":"2025-06-05T18:04:56.85468Z","last_seen":"2026-07-17T09:19:29.534296Z","times_seen":27,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.503Z","timestamp":1783511524503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 07:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dfe28-1397\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5015,"size_decoded":2175,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-17T12:36:54.141044Z","times_seen":36762,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.506Z","timestamp":1783511524506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Sep 2025 10:01:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29e10-30e0\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":3879,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-17T12:37:28.648772Z","times_seen":216612,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/polylang/pl_PL.png","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.520Z","timestamp":1783511524520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/pl_PL.png HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 141\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-8d\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141,"size_decoded":481,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"4b53fa04377e83e3e32e6713243e6743","sha1":"bd52136484ef01d10470a0f5c3212cad0d816525","sha256":"a40dbff14680cf16f097a83cb8ae65e08bd804c8710e4de15babc1f5d6f558b6","sha512":"1e30059982cbc85f51e16cf09f432d7710af21ca819cb7e52ea4e851da7ea18f23b86e78658e7819f38ac803902d2bd9856a1dda7f2e662df2bc55d32bbf4d0d","ssdeep":"","tlshash":"c5c02be353122c56c1d99033533f0012f85138292131024348870f2d3cc770443dc067","first_seen":"2025-08-13T16:04:47.955542Z","last_seen":"2026-07-09T02:17:44.807406Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/fb1e50c6-45db-42ce-93fa-2244a05711cb.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.540Z","timestamp":1783511524540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/fb1e50c6-45db-42ce-93fa-2244a05711cb.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2314\r\nlast-modified: Thu, 20 Nov 2025 19:18:39 GMT\r\netag: \"691f698f-90a\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2314,"size_decoded":2657,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9e70e0a4bc1dfd97eb4e1a28029e4ba","sha1":"0a9b9d28ce85f116dff79468ca118eb9c9d87e47","sha256":"b5aef05c2d335a0d53a69a79c1bf59222ea85435714b5a46a2233c4eb8c536d5","sha512":"b8ed16f84b5fb1abf52103fee6adc1c628ca350071394b3601004dc84b9c7817307641896ffb6047054d67095f04da262ba6e5789b4ff597bb1824a7451ca87e","ssdeep":"","tlshash":"6a412c2743b58b28f58e2db470849b0bd7dd790126836b79f1c4817d07886c2be4a10a","first_seen":"2025-12-08T04:02:28.666378Z","last_seen":"2026-07-09T02:17:44.805043Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.513Z","timestamp":1783511524513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 984\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-3d8\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":984,"size_decoded":1353,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/fat-pirate-logo-1-6.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.529Z","timestamp":1783511524529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/fat-pirate-logo-1-6.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10192\r\nlast-modified: Fri, 21 Nov 2025 14:12:00 GMT\r\netag: \"69207330-27d0\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10192,"size_decoded":10537,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a5be47dd772d2864750c67733f7d32d","sha1":"46ea13d83a6db3c708881856c58b2c5cb4032153","sha256":"1733acd63538aa668e85d88647f3f90c458689e1ff485579b0e9b094c58f5e70","sha512":"34fc9d7a2843ce0c5b50f957bd9116a3ecf6b8e3ac2b7e6f917e0eac2d59f9afee8904746ee0695eb2aeca5bdf2e5cff0ef227174504c59e432c842f4672941e","ssdeep":"192:vwT9cKAJo9hSHQf5H4Q+uKTNZukDM7oTLF6EnCbdMdT9:vwTTVoGYQkN3DM7oQECBMd","tlshash":"1222bf32a3ae5c08e947f1b355a71740ee7c3e7593bde550b007ab0bcb8ea85216584f","first_seen":"2025-12-30T14:55:49.042003Z","last_seen":"2026-07-12T22:10:25.146258Z","times_seen":5,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetlive.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.534Z","timestamp":1783511524534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9508048080.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 23:47:34 GMT","end":"Tue, 06 Oct 2026 00:41:06 GMT"},"fingerprint":{"sha1":"33:85:DA:27:B6:E8:23:41:7B:FC:54:07:F6:E6:0C:F7:14:8B:79:09","sha256":"20:2E:77:9F:D3:C2:12:6D:43:BA:E7:23:70:C5:CD:D1:2C:F0:B8:C4:D9:42:EA:A4:B6:AB:24:B0:98:11:19:A1"}}},"request":{"raw":"GET /gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetlive.com%2F HTTP/1.1\r\nHost: g10102301085.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate\r\netag: W/\"160-9XoKTHJPhkwR+uq3SOUaam5YNgk\"\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: c38c010da67d57252da3da7922b9d723\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\nserver: Google Frontend\r\ncontent-length: 352\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":352,"size_decoded":804,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (352), with no line terminators","md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-15T03:21:40.92912Z","times_seen":13,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":54,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/Start-met-spelen.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.535Z","timestamp":1783511524535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Start-met-spelen.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15074\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-3ae2\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15074,"size_decoded":15419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b833ac1fbbd2c7fb2ccd59fa76b6ca4","sha1":"d706a02078e632b4b077f7a8591e5887560b7fc9","sha256":"d0f2e6b962f99e8cbab62655bcc9a55cd385bb16dff29dfc26cbd19c14c0961e","sha512":"f2a626e5b03721bb372fd401526d294eafa1f1e75c6eae1446363ea3e2578a42ba5a014503d599905825d393c8cf7f3fd65cb0ef1c02373ebe5bd5be1e0bef8c","ssdeep":"384:QGSvgMAVcFdV1HGyDs0O1jOaROMHY+rOCBdMSKGJ6PwrmlXhktz97EXLZsL:9SvgMAyzonjOaROD+C0daGJ6oryRktpD","tlshash":"7162cfd22a4113c048a9bb4f4cfc15dc96575b5291b0509a6cc7c9630c95df9ecee0cf","first_seen":"2025-12-30T14:55:49.091866Z","last_seen":"2026-07-09T02:17:44.803983Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/84182e5f-bf10-4af9-bc9c-8a55ff649655.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.548Z","timestamp":1783511524548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/84182e5f-bf10-4af9-bc9c-8a55ff649655.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2598\r\nlast-modified: Thu, 20 Nov 2025 19:18:45 GMT\r\netag: \"691f6995-a26\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2598,"size_decoded":2941,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a69313e28331ed4a0029c7cea05d82f","sha1":"bd7538d80e7246d6c41eef75ca8a539a345c4aa8","sha256":"c28b69fa77da238487da5eeaea9f36141f09a10e0598ad4298e2136872456624","sha512":"8daa63f76dee4f1a9eccbffdaa3fbf8252f1fb7f26e5a25b91ec80109bee1b0c8c37e42cdc8c61f012219f5d47fda052a19b080eb7d70e342914a215f9ab2833","ssdeep":"","tlshash":"0d510a5a77286b66c90213f920c0b3a6fbc83e578e83d95044c146846f66ad756ec44b","first_seen":"2025-12-08T04:02:28.672912Z","last_seen":"2026-07-09T02:17:44.812879Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.511Z","timestamp":1783511524511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Sep 2025 10:01:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29e10-348c\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":4641,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-17T12:37:28.676133Z","times_seen":224249,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.298Z","timestamp":1783511524298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Apr 2026 05:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f1918b-ade\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-17T12:41:34.869547Z","times_seen":30370,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.512Z","timestamp":1783511524512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e0018-2125\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8485,"size_decoded":3034,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3531)","md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-09T02:17:44.810477Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/interac-e-transfer-logo.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.538Z","timestamp":1783511524538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/interac-e-transfer-logo.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5058\r\nlast-modified: Tue, 04 Nov 2025 14:30:30 GMT\r\netag: \"690a0e06-13c2\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5058,"size_decoded":5402,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d48f85a5a65c4b455396f3f4573cbc3f","sha1":"50e3d8c488ba9abc321ed9e8b38cfc516f120773","sha256":"a4552c0f5ee0b81b0e13cb21df070e00483f227c56baba89d16932884d8af105","sha512":"8a52749235fc6366e784aca624db5fcdc01d3cea21607c5df3e81cd3ccb6d45c20bee606d635830e2fc58f103a78a9843f739b1b62ef80bc3783a8d42326fa02","ssdeep":"96:r+unH7jccuMELTUCwMMR7HAr4Ln2dFaKF1vR9U2uuxG3QaYrcgaqxdINzy2Lt9wr:rp8rxhMRtLnu9p9U2+QVj4z+IY","tlshash":"eaa15d643cf7228299c97a914cfb7ccdc6b3c165c88815daecc68c674b5098256fb7c6","first_seen":"2025-12-30T14:55:49.048683Z","last_seen":"2026-07-09T02:17:44.792991Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/786f77e6-02a2-4626-9846-d040bdd0f0f3.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.544Z","timestamp":1783511524544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/786f77e6-02a2-4626-9846-d040bdd0f0f3.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2688\r\nlast-modified: Thu, 20 Nov 2025 19:18:43 GMT\r\netag: \"691f6993-a80\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2688,"size_decoded":3031,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7bff080ce05d05842cbcb6fc373b3b0a","sha1":"a2239c4cc79de821a32ba099da91d2c5b1e454c4","sha256":"b7c7d1c41967de68e44a7f13795390b6e4f4deed1c26b467b00f944c47e41f12","sha512":"bc141f9eb06557930908f03a75464ae3c8ca755fb762bf28d4172dd149fda5e262ddfb19f67c6d9191235888cfcc22cb0b17d9102f40ba21b7ca3f6e2a1de866","ssdeep":"","tlshash":"ce51d6def376a259f12525b8a0d00bc3eba43d16875e8936e2d544368f382c63c8d296","first_seen":"2025-12-08T04:02:28.612551Z","last_seen":"2026-07-09T02:17:44.809329Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/uploads/2025/11/rainnlbg.webp","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.708Z","timestamp":1783511524708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainnlbg.webp HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 138004\r\nlast-modified: Thu, 20 Nov 2025 19:32:00 GMT\r\netag: \"691f6cb0-21b14\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138004,"size_decoded":138351,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6584c1e7682f2fe10536c22bf82ef8d6","sha1":"0a0e70477361c2f7a560631e192d09c6fe25f8e7","sha256":"d50e3a04a9a35cbd9ce26d5f171929da259cdc39b81b2861bafed3b7c0f7a67d","sha512":"53bae8d58053181781cf4e009c6cb88bd259003a6e3c7164f2550ccec123bbd339153af398853a88498649512f4c20643b745acac67ada5a9294fe4bdbe78362","ssdeep":"3072:1eo8Jf5qJSzW9uWxOICNpgk1SaUAeNlBorDeuOO0UZaHQHj0:1oJf5qUzWZmpgkAaUjZAPOMoHO0","tlshash":"5dd3121da7616d8fd7698a339fe1f852903afadab38c466d90b0d104f01524e3798f6c","first_seen":"2025-12-30T14:55:49.045249Z","last_seen":"2026-07-09T02:17:44.813828Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.744Z","timestamp":1783511524744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Wed, 08 Jul 2026 07:45:28 GMT\r\netag: \"6a4e0018-4c08\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlive.com/wp-includes/css/dashicons.min.css","fqdn":"rainbetlive.com","domain":"rainbetlive.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlive.com/","date":"2026-07-08T11:52:04.296Z","timestamp":1783511524296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlive.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:47:51 GMT","end":"Tue, 06 Oct 2026 09:47:50 GMT"},"fingerprint":{"sha1":"F9:58:D1:53:4E:41:DC:F1:83:23:34:C0:81:EB:00:90:42:6D:7A:7E","sha256":"B3:3B:B3:88:4C:0E:65:C9:67:AE:03:97:1A:1A:A2:EA:02:62:72:45:99:75:F1:4B:AC:FA:D0:6B:A1:23:2B:C8"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbetlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:52:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 07:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4dfe28-e67c\"\r\nexpires: Fri, 07 Aug 2026 11:52:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59004,"size_decoded":36087,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-17T12:52:16.148382Z","times_seen":61850,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}