{"report_id":"629f0e69-3a91-45c5-91ea-0bced14ca437","version":0,"status":"done","tags":[],"date":"2026-07-08T12:05:44Z","url":{"schema":"https","addr":"rainbet.casino","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rainbet.casino/","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"title":"Rainbet Casino | Play on the Best Crypto Casino Today!","dom":{"size":210243,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60573)","md5":"9881ca205e6bbda838552c430c936d68","sha1":"65259b59761bb14ea30ea5af01c6ed382e399416","sha256":"4bd5cbac61484c5b63466a27c756188764b229ff13a462700cce189532fb9dc5","sha512":"deef1ca08ab297f0f525f254568b8188e9e790df182b714aa2b774309ded732c5549a5d15b35398ef51a84a23d837a550df042b464e033ae5e6f647ae7f36a59","ssdeep":"3072:YR2DIeJ8pPMz/cpp6dx1FRczWMZHf8Ma+U:82DsScpIVFR9","tlshash":"fb24f951b3a014fe32bb577dfa5eb70866199903d64d27e5f4bec09852c9f8204b2b0e","dom_hash":"domhash37debf4b9e317b989fc72f8b52d16e50","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbet.casino","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T12:05:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":4,"received_data":110240,"sent_data":2269,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":13994,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbet.casino","ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-08T12:05:45.444753Z","last_seen":"2026-07-08T12:05:45.444753Z","alert_count":50,"request_count":25,"received_data":1648421,"sent_data":12807,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Yoast SEO:27.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Spectra:2.19.27","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"56cdc01d88461d9332895e3487ca954a","sha1":"9e1f77b7387f8f489b4cc9793be930b93b237f48","sha256":"8a141c1f5150e1fd5b07d095c5b41be07116255fc2e5431ef66205bb7dc4a74f","sha512":"6aae208ba50317a997a3a6aa5fbf2f3cd3840614bfd38b8226cc7b3b687b64ba0658bf062943d45c825938b7259f15bd09f6ffab10faa64e8a7496a1f04ebcb7","ssdeep":"","tlshash":"57e0e5f0630d4ab618e9d9a63669fbc4275681de60512805bc2aacf9298c680209226b","size":421,"data":"","first_seen":"2024-05-07T04:32:10Z","last_seen":"2026-07-18T01:23:03.022035Z","times_seen":4829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5d7efb1bc838480f4ca0d67c124249","sha1":"0292349ba263236243a33fb7fdded5527e17bf6a","sha256":"bac6add1bf7ec50484cc9c7336db1c6333b0f911675eb2a95c6af5d28b15adab","sha512":"4c7a0a52d7917f8387fefa7e266a9fd195fa28d077bcfb767bd985d197a32a09068cc58101d275d921d954b3f2edd390bba382ef8662ff27a6fdc3fc007da1db","ssdeep":"48:czXyS1kQcF8P32bUIP9I9s0nv2RGc+Auuk7XulA4MzU27XuTIo657XufNPh4gnzS:q/q8EI9sgv4COIUMiAqNPfEPonGik","tlshash":"0a91b08003021e3bd2a3279571dab9443330456dd7e6d47183fa9a2b6398cc768b3af9","size":4450,"data":"","first_seen":"2024-10-13T03:11:06.787751Z","last_seen":"2026-07-18T03:39:58.500081Z","times_seen":6713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/uag-plugin/assets/0/uag-js-31.js?ver=1781693518","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"839dc4702e3bf507851c9872ccfbb4bf","sha1":"039e8a78dc2ebe1e2e59ed68e39cf6fd0f1d15ea","sha256":"df2af89f46c59f0cd29aa5619cac88c6bca3af3bf1ea7a6036ad55a583692362","sha512":"9e45d3b368ed9bbd843d2e45a334dece7b0078a9727e449f913cb1dde5a213164e49170c3ee32b060767093aad2349ac346d34a4ffcdc322dceef2655eb02454","ssdeep":"","tlshash":"36e092b77a161e388471f135593ff7695c3f0012dc242884b1528cc6bd468cadce28c7","size":359,"data":"","first_seen":"2026-07-08T12:05:50.7627Z","last_seen":"2026-07-08T12:05:50.7627Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-07-18T08:08:59.273771Z","times_seen":14759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"112d971e8e0af5537865d46e9da630c2","sha1":"34e05f918d58949231790df86a21fe59857962da","sha256":"3c7c9691500846fd39197988e511247a40efb3fd939f2eae8e0d73a2e4688a76","sha512":"2b547e7fb5836ff31788eb7e58d13f249d7142f866f749ad40a6d084aec948c7c3b482278c623a736258e48e53bf41d41c0e0fa05f4b99bf629e65c90838b15c","ssdeep":"","tlshash":"4ad0220402e32e2066cb8ca29021cfa4f1fdd2a0c1e0f09daa7c4a4473e7b5f1b68609","size":216,"data":"","first_seen":"2026-06-07T08:57:38.289612Z","last_seen":"2026-07-16T03:03:38.639268Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/coupon-reveal-button/js/spbcta-nm.js?ver=1.3.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"02b3a0914d7b0ab3591fdf4b0d3a6f7c","sha1":"2dac30fb15528fd49c1b2126bf44f4837d74450c","sha256":"14021f27771e6aa2a55884f5bcf49e5983e88671c147dccf3ce3b99b61ebef73","sha512":"4f4a5556d1abcc78dc10950f430b202f8bda0f0ad13e876a3c80d60122834a2f92a189816931355ee66e2a3c43dfcd2948fa656b647e665bbc8d8ee195c529c5","ssdeep":"","tlshash":"9961ab5e710815a8923b7b6acbabb10df8b5806f52018211fe6cdae04fb051967d3fcd","size":3308,"data":"","first_seen":"2025-12-20T15:23:45.366886Z","last_seen":"2026-07-16T11:10:35.108969Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-18T07:41:57.114278Z","times_seen":307465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.9.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"89a7126b1123d0261a0371f7633f2059","sha1":"749c238914e5c1d320de6ed691bc437d0813f5ad","sha256":"8ebd90228f2ab8870aa03f29501910d879d2c2ea2197f1f113e4b16e1f489fd4","sha512":"f5a687f75ff517018449f5264e8882287e8c6d943390f8431b40a0f4f8d37525413b5f84f82b1d234425fe56c8fb8738ad68e8764d044f0db4415fc4ce9e792b","ssdeep":"384:uYE9Gy3GyPy0boEcFD4ryHjdD0QoDo3oEKAZknUyCdyGvy0cUyltNmx6Eq2VqKjS:uYEPx60boEcFDTHjGQoDo3oEK2AfR0ch","tlshash":"2fb271a623002a3604fe17e7f5daabc47671109ffe0944155878cc6e19a8fd352f1afa","size":24308,"data":"","first_seen":"2025-03-06T18:00:47.699633Z","last_seen":"2026-07-18T02:19:54.262221Z","times_seen":1008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.js?ver=2.1.14","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5e3262f9f557bb91d6ffba0801707f6","sha1":"2beed0a2c56d4511f7bbdcf07500e9d12f3342c8","sha256":"995456f7211327129612b97dc0a2baa2288f1e3065d1d6ed1882a0eb89d6baac","sha512":"b25997c3b7923f6c52baae4bc7a476b39bde52944eaee992b33ae7042bd26d5ea61cfcdf32cfb5ffb0e77b2e69a494f507978480e1b50aa4f0927fd0c6b2be02","ssdeep":"","tlshash":"207187fa7200763349fbb196da1f53423035207577079484e63cf88a547c9d63a27eb9","size":3678,"data":"","first_seen":"2023-03-07T12:24:12Z","last_seen":"2026-07-18T05:48:16.543922Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-18T07:40:34.346316Z","times_seen":976277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-animations.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"49921b48ed8ee3337588d0c77afda916","sha1":"e572c5e4310c02f1c8caf3d22accc6faab0b781d","sha256":"31f6c2ca0dc704b351fce45632e0df70302f52858b12e1862e27a5d1d41589fd","sha512":"583247f11d6c3c03cccdd84a33b892d0068fec0b9c22dbe34c008b8191b14dd44c68471b8d89ecb4433d33c4ff54beadb6681a52a265e4d8376fdd4942862c21","ssdeep":"","tlshash":"86a02208fa233c3200e2f03202bf3b082a3b3faa08000a80282000c08f30ecb3002ccc","size":81,"data":"","first_seen":"2024-06-14T22:14:49Z","last_seen":"2026-07-17T19:30:48.940177Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"84a4fb9c096adc039c2110ff5d23af4c","sha1":"708c5a354c12f935375b5189d52f0fe42f779f40","sha256":"07fef98a581cb1497c7cb6bcab1b6bfa6a26435e6e7067539b9fbc8cb790130e","sha512":"db167a959917696ec112e2ae310288f4651a1f1625e4e63eaef5f442dcdd33dea0bb57fcb070175d88f60056ed771fc40bd07a958f23a4502b317f4415ed92c2","ssdeep":"","tlshash":"1d71969ae77638dbb2f900f2697a0d47eb614435d6c8d038c9bea3141cb58a3c274b46","size":3761,"data":"","first_seen":"2026-07-08T12:05:50.764623Z","last_seen":"2026-07-08T12:05:50.764623Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-18T07:40:29.749723Z","times_seen":895946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/astra-theme-js-js-extra","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"200b077b7e99b1d65fb90f3348e29eb2","sha1":"a455176add2e8ce174b6ab24f09f742879ae6096","sha256":"e8cf3c9f739b2dc7729fa337da78806950be46caa3ee5a62ae9377e96791e6bd","sha512":"a49d900404a9f266865956adaf0e91a485a437ebd97dd4df324d00b79f6b56d8e934dd3ef84377fc6f1157f4d68564048be45b3ca2470488800623c73771d487","ssdeep":"","tlshash":"1b112304c1d31d1066cb8c725011cf65f1fdd1a0c1d0f05d9a7c454473e7b5f1768509","size":997,"data":"","first_seen":"2026-07-08T12:05:50.765469Z","last_seen":"2026-07-08T12:05:50.765469Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/aos.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e861c3c7aa3ae1eb067bdd021849fbea","sha1":"c24de7e458fde71de63c35e8fab145ec767b1424","sha256":"3fe032d2f2113e4e7bf80d77a320caedfa6a741c571af727aa1d266675c2d0ba","sha512":"9d2b19088a56e870b0dc1b68e8bee156a8e2931f0aca542b6d4b6dfb9b5a13154a594489b9ec15da2ee10064509377d7f066d0c854774046c47c89c6605e0b7d","ssdeep":"192:3M4ps70fNaZdhh0BSu5HSL5J78yLupOIFtlomlApOIltlomldlWaU1h1m/k1Ay46:3RZfNaZdheS+SvoAYWZWa+h1mM1Ay59","tlshash":"d25208e83185f0d60393d4f7827f600bf2f19838605da061d669c4d27e758ee9663e6e","size":13639,"data":"","first_seen":"2023-06-05T10:35:47Z","last_seen":"2026-07-18T08:04:18.325307Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://rainbet.casino/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/2025/03/rainbet-banner.png","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.738Z","timestamp":1783512316738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/rainbet-banner.png HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 275801\r\nlast-modified: Sun, 09 Mar 2025 13:22:28 GMT\r\netag: \"67cd9614-43559\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":275801,"size_decoded":276175,"mime_type":"image/png","magic":"PNG image data, 677 x 270, 8-bit/color RGBA, non-interlaced","md5":"ac9d604bd101d5c3313c4ac0c6f3fb47","sha1":"72b2dfff3dbf4e533910aafc5e023e4a7871b638","sha256":"b1f345356614bfa29d5d809f7727516ef970bc7a99e9c024e1e9dbd25fe39e50","sha512":"b5d2eaa512e2d4068121b5eff6870780746d2882bb0ef5de68367078742796e04b14be00a3a4f91454e5b8dc47f38cdefd173ee03ba628af33f419cfe2b3e747","ssdeep":"6144:qxdauJGCfV7hpOUNc/O4aU6vR8L90k0mEi:eV4EhhpvmO4cvR1k0k","tlshash":"8a442394a828c19e529cb284737bafd22d45991b74acc5c78fbd5f07e6b6da07c008a1","first_seen":"2026-07-08T12:05:50.732895Z","last_seen":"2026-07-08T12:05:50.732895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/2025/03/weekly-race-1024x256.png","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.740Z","timestamp":1783512316740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/weekly-race-1024x256.png HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 230467\r\nlast-modified: Sat, 15 Mar 2025 08:30:14 GMT\r\netag: \"67d53a96-38443\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230467,"size_decoded":230841,"mime_type":"image/png","magic":"PNG image data, 1024 x 256, 8-bit/color RGBA, non-interlaced","md5":"92e24b7de55bca53f291cfc2b7683b13","sha1":"ae4e3d415f1cb419359bd5b0bf3ea27f451b39aa","sha256":"3284f13250662a3ab7005620ff140d0fac019c63788a16549f1fabf155e59f45","sha512":"06c8b602bac182aacd6d3438c34dcd9f209ea98d1620708dd0e0cb3747b60c05e9f1f479fcd56d9058b547b29032f178242d9e1060475d012600f9be536c8a97","ssdeep":"6144:3PzDM9rEMmtWjlc+yQLpUuDZ2yMiagLBYlrqPt2:3fM9rVmtQlcB8pUuthBYlrOt2","tlshash":"503423f15e8b1e3a359a4089e474100f932827a25bd775db4c82f34ebd2a73b560c6de","first_seen":"2026-07-08T12:05:50.73411Z","last_seen":"2026-07-08T12:05:50.73411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T12:05:12.016Z","timestamp":1783512312016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cache-enabled: True\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlink: \u003chttps://rainbet.casino/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbet.casino/wp-json/wp/v2/pages/31\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbet.casino/\u003e; rel=shortlink\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Yoast SEO:27.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spectra:2.19.27","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":210001,"size_decoded":34018,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (60503)","md5":"e7b1c0e280c8d1db791ce32d9c58b972","sha1":"3c775688dd748a05d2da90ec5520785bcc2be2b3","sha256":"923ec9ed64fec709c4fcbcfec4bf26170dd6c361d3d4ff66f29639ac6e663b97","sha512":"48982874f2674fd19ca27ff0ae74d4fc6cd7f600923ac7bd2f44794f8fd087f959299841490267625b857c1638da769c740f068a25e3c9ff22ad3746f5b1b1a7","ssdeep":"3072:Qq2DLeJ8pPMxwE3a6dx1FRcTWMZHf8Ma+U:L2DXXE3LVFRJ","tlshash":"1024f951b3a024fe32bb577df95eb70866199903d64d27e5f4bec09852c9f8204b2b0e","first_seen":"2026-07-08T12:05:50.735375Z","last_seen":"2026-07-08T12:05:50.735375Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4151,"timings":{"blocked":-1,"dns":4004,"connect":27,"send":0,"wait":38,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/aos.min.css?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.698Z","timestamp":1783512316698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/aos.min.css?ver=2.19.27 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 May 2026 03:50:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fd28e-56a0\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22176,"size_decoded":1650,"mime_type":"text/css","magic":"ASCII text, with very long lines (22176), with no line terminators","md5":"c19d8b128cf319cfa5216dd685ad1724","sha1":"080baebe8c0cb2f27fc8bf1128c89cb5b37c959c","sha256":"3dd5441ff12e98fe08545eff10042f39b30ccb7ca30200e9d2bdf57b253f827f","sha512":"ffc49b06f5b51d4f21a42a25a6da8a0fd4c9b3f94e8c60e0baed95c91c8fe69335dada85773ed191744fe176740560ad304fb6857e065ec492b56c9806d36e17","ssdeep":"384:4MJvwr0T0/AnIl1sj0vAPdDm3M5aHc9OfcZaPslGnPoge5kP6FsvuB0nCVMX+5RP:4MJvwr0T0/AnIl1sj0vAPdDm3M5aHc9x","tlshash":"40a2f9aa7a4cd004ff871b47629f2a0819347588e1301985be3f35ca1cd5cd6b977fa9","first_seen":"2023-06-05T10:35:48Z","last_seen":"2026-07-17T19:30:48.936555Z","times_seen":1238,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/2025/03/rainbet-welcome-offer.png","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.711Z","timestamp":1783512316711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/rainbet-welcome-offer.png HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 298297\r\nlast-modified: Sun, 09 Mar 2025 13:22:17 GMT\r\netag: \"67cd9609-48d39\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298297,"size_decoded":298671,"mime_type":"image/png","magic":"PNG image data, 677 x 270, 8-bit/color RGBA, non-interlaced","md5":"41a7b20f5d6578827bc1f206119d953a","sha1":"00ec3b7cd1cafa928d6e2da743e3822b27835ebc","sha256":"112b5a0427a9fad75cdd6c3e7e23ae26fe15d8f0b46b745691306c1098cc8858","sha512":"6e55528f277be3508fd268545a29dfaf22c77f77a2978d87fa159d01925467e3db24ce50ccf55d60d8ec1665c8c0919c5ef7f6ff8f45d3cab88868dbf15f7713","ssdeep":"6144:Eq2Sd9nTEnFc9mVX5EoD4HUMdBCgVYijIweeIENIdfHpx3e3Y:E/SnTEFc9mVX5EozMdTVYiixENqHpFwY","tlshash":"e85423372102da0821866b2c0f4a276fde73fd86ddd3d6d786401a97345897cba3888f","first_seen":"2026-07-08T12:05:50.737003Z","last_seen":"2026-07-08T12:05:50.737003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/2025/03/cropped-rainbet-header.png","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.736Z","timestamp":1783512316736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/cropped-rainbet-header.png HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 6959\r\nlast-modified: Sat, 15 Mar 2025 08:41:53 GMT\r\netag: \"67d53d51-1b2f\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6959,"size_decoded":7330,"mime_type":"image/png","magic":"PNG image data, 198 x 66, 8-bit/color RGBA, non-interlaced","md5":"52cb0532cb37ddcae5b48bb30b2fd0e9","sha1":"5be0e0fc9d61544f15510578eb24d1d119222851","sha256":"e19db07b7a9aa29714eaef0109be8874b7bdcd4a725dfa12afa6e960a4f2fedc","sha512":"828964f981a1e7a925c54630649e0541fb8b8f5ce8426606302503cf02be40d98cac7e31640a0954487fa2edf25cdf110be20ba8e1eab5eb979902db5f34a5fd","ssdeep":"192:W7K/xtMQsTVxRtdkltgYFirzzw0TdkrheqW7:QYfyTVpd0tKdOcqu","tlshash":"ebe1c02c01fe32152b576201f9717f501b3ab6bb9120488b6137a195dbfffab8647244","first_seen":"2026-07-08T12:05:50.73792Z","last_seen":"2026-07-08T12:05:50.73792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/2025/03/cropped-rainbet-logo-192x192.png","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:17.049Z","timestamp":1783512317049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/cropped-rainbet-logo-192x192.png HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 10353\r\nlast-modified: Sun, 09 Mar 2025 13:06:10 GMT\r\netag: \"67cd9242-2871\"\r\nexpires: Thu, 08 Jul 2027 12:05:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10353,"size_decoded":10725,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"156c3fd4cac3be744d364443ef7bc839","sha1":"4f84c938c5edd15762151472fcaed57eb5b2e492","sha256":"7dda38f8f07b7854f5bc949340a5a479408f13e08bcc6c90c4791423784b1f2f","sha512":"f0f5a0b2fd275454124c8cb6080f70e27a565865001dcb5264e4d14dd8d9092543c1c3adfe159bbb912654c247b34f5daf3e6eb1df7fe487b34a0d5c0cdc6616","ssdeep":"192:jlYHZRYnRVZ9NdCzWHp51LlnU33kMoncw8TOb9C8e4UZl2:j8ZAZ3QWJ5/nU332cpGag","tlshash":"3322bfadf0197e3bc95c77234e4673e6bffea50b0ba45d97d7408202be6558182800c2","first_seen":"2026-07-08T12:05:50.738883Z","last_seen":"2026-07-08T12:05:50.738883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/coupon-reveal-button/css/spbcta-stylesheet-front.css?ver=1.3.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.696Z","timestamp":1783512316696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/coupon-reveal-button/css/spbcta-stylesheet-front.css?ver=1.3.0 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Apr 2026 20:42:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d56c38-1177\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4471,"size_decoded":1297,"mime_type":"text/css","magic":"ASCII text, with very long lines (4471), with no line terminators","md5":"9d9687fdc8d73217e2786f62cb0008f0","sha1":"fed7cf5590e42246de1c6cd9c11ddfd6de261bd2","sha256":"1c79d10a736a7799df7e2f8c7385e9c816f808abec79ea638d0a190d484fa57d","sha512":"68b518ac15f75f7217903b08d9538ecaf4f895e6d949e0c1176ce47c9590c4d69320e49a3bf4a76e0f479516893141fe25dd3d5245204a7777bb9eff0c3f86cc","ssdeep":"48:tbNkkdyxcyB4BHtjNp0bVjNvcl+qpdHxrAyPQAlUTb2bvHbvM4bvE:txXdEEHEcl+ydHDPWTb2bvHbvM4bvE","tlshash":"94914797f0c926689303d929495bbb3eac7ed061af022eb8dd15f3744bc29c7069425f","first_seen":"2023-07-14T19:36:37Z","last_seen":"2026-07-16T05:45:19.53483Z","times_seen":39,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/spectra-block-positioning.min.css?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.701Z","timestamp":1783512316701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/spectra-block-positioning.min.css?ver=2.19.27 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 May 2026 03:50:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fd28e-14f\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335,"size_decoded":511,"mime_type":"text/css","magic":"ASCII text, with very long lines (335), with no line terminators","md5":"7b197104afdf6f3f918fd92a5aa1c657","sha1":"f40aef07a4afcbe679aaff6f3a8cef6a20cb1fe6","sha256":"edba0fcba74296c16b2ce9016b6fb6f20c7cf68f3d48665c6d5fd3947824b449","sha512":"24dd57053c08b906a9ebb9ca256b09fdd6ce2cd6e62b1a923fb163d5b992b5edf99717f05bffc820e3fe5abb6d420420d971eb44094773c64fb802b7b3c18304","ssdeep":"","tlshash":"58e0df5197007ea1d867b34925e658148230ce00dfd22cbd732ad383f2c309018b3bc8","first_seen":"2024-10-13T03:11:06.747915Z","last_seen":"2026-07-18T06:16:01.3787Z","times_seen":6872,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.722Z","timestamp":1783512316722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js?ver=2.19.27 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 03:50:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fd28e-1162\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4450,"size_decoded":1393,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4450), with no line terminators","md5":"eb5d7efb1bc838480f4ca0d67c124249","sha1":"0292349ba263236243a33fb7fdded5527e17bf6a","sha256":"bac6add1bf7ec50484cc9c7336db1c6333b0f911675eb2a95c6af5d28b15adab","sha512":"4c7a0a52d7917f8387fefa7e266a9fd195fa28d077bcfb767bd985d197a32a09068cc58101d275d921d954b3f2edd390bba382ef8662ff27a6fdc3fc007da1db","ssdeep":"48:czXyS1kQcF8P32bUIP9I9s0nv2RGc+Auuk7XulA4MzU27XuTIo657XufNPh4gnzS:q/q8EI9sgv4COIUMiAqNPfEPonGik","tlshash":"0a91b08003021e3bd2a3279571dab9443330456dd7e6d47183fa9a2b6398cc768b3af9","first_seen":"2024-10-13T03:11:06.787751Z","last_seen":"2026-07-18T03:39:58.500081Z","times_seen":6713,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:17.179Z","timestamp":1783512317179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 00:58:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6930dcc5-58ea\"\r\nexpires: Thu, 08 Jul 2027 12:05:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":5311,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-18T07:41:57.114278Z","times_seen":307465,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.706Z","timestamp":1783512316706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Mar 2025 10:06:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67cd680f-3509\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5064,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-18T07:40:29.749723Z","times_seen":895946,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.905Z","timestamp":1783512316905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 03:03:45 GMT\r\nexpires: Fri, 02 Jul 2027 03:03:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550891\r\nlast-modified: Mon, 08 Sep 2025 17:58:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29292,"size_decoded":30105,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29292, version 1.0","md5":"bc34823f42d59bf550e99604c4a1cb08","sha1":"cfaf56855c8113d9e461e154d1e225e09b8a258d","sha256":"52e605852c72cc2df1473df1fb7f26a3a0be58e31835bc8f33f29b1918c82cbd","sha512":"ea2cde28aa5332697b4538e0a67bdcb61afa2c0603f302268cc3ffb6866409916539c919b1f1d4a05b480072c417d70e73c060198325e8730b7a54483e8c2b5d","ssdeep":"384:xRWnMC/6Y9cLA6b8+K2Wn2iMJmtaHqkmBJ4SYe2KOeugFKnGgWz/kUN2zWppbt9U:uMTpA0AimtaHoLYe2KfKGP/5NYsp5jdO","tlshash":"dbd2f1578470a5c488452db4922ccdc9c7d89ff1a9bc0a0a1cd274b9cbf05ddd1cabc9","first_seen":"2025-09-09T00:23:24.758315Z","last_seen":"2026-07-18T07:45:16.540956Z","times_seen":6331,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":2,"connect":31,"send":0,"wait":25,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/2025/03/cropped-rainbet-logo-32x32.png","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:17.050Z","timestamp":1783512317050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/cropped-rainbet-logo-32x32.png HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1289\r\nlast-modified: Sun, 09 Mar 2025 13:06:10 GMT\r\netag: \"67cd9242-509\"\r\nexpires: Thu, 08 Jul 2027 12:05:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1289,"size_decoded":1659,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"687987bd8babdd17718700ac55808485","sha1":"79def63fe1dfb5b29c5f15a9a69ea58797a7b0f1","sha256":"db7777f684b5787bafd92a0da96ee45fe70fb3fee13cf93019bba2d225c9e292","sha512":"b2be6796644c588157fee3ef39c5f78427326c66700af8358a171586b32d9c81468d4cc0ec332f026862f1e8222c9bbcabf1ea451dcc2306aa6c92dca98c1109","ssdeep":"","tlshash":"fb211a68df6060ecced00880f203c7a09c6c14518a42291e7146582ee33dfd359cf538","first_seen":"2026-07-08T12:05:50.743864Z","last_seen":"2026-07-08T12:05:50.743864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.721Z","timestamp":1783512316721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js?ver=2.19.27 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 03:50:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fd28e-1a5\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":421,"size_decoded":589,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (421), with no line terminators","md5":"56cdc01d88461d9332895e3487ca954a","sha1":"9e1f77b7387f8f489b4cc9793be930b93b237f48","sha256":"8a141c1f5150e1fd5b07d095c5b41be07116255fc2e5431ef66205bb7dc4a74f","sha512":"6aae208ba50317a997a3a6aa5fbf2f3cd3840614bfd38b8226cc7b3b687b64ba0658bf062943d45c825938b7259f15bd09f6ffab10faa64e8a7496a1f04ebcb7","ssdeep":"","tlshash":"57e0e5f0630d4ab618e9d9a63669fbc4275681de60512805bc2aacf9298c680209226b","first_seen":"2024-05-07T04:32:10Z","last_seen":"2026-07-18T01:23:03.022035Z","times_seen":4829,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.js?ver=2.1.14","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.726Z","timestamp":1783512316726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.js?ver=2.1.14 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Apr 2025 20:14:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68000fa1-e5e\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3678,"size_decoded":1720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3678), with no line terminators","md5":"d5e3262f9f557bb91d6ffba0801707f6","sha1":"2beed0a2c56d4511f7bbdcf07500e9d12f3342c8","sha256":"995456f7211327129612b97dc0a2baa2288f1e3065d1d6ed1882a0eb89d6baac","sha512":"b25997c3b7923f6c52baae4bc7a476b39bde52944eaee992b33ae7042bd26d5ea61cfcdf32cfb5ffb0e77b2e69a494f507978480e1b50aa4f0927fd0c6b2be02","ssdeep":"","tlshash":"207187fa7200763349fbb196da1f53423035207577079484e63cf88a547c9d63a27eb9","first_seen":"2023-03-07T12:24:12Z","last_seen":"2026-07-18T05:48:16.543922Z","times_seen":1164,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.9.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.690Z","timestamp":1783512316690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.9.0 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 09 Mar 2025 13:04:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67cd91d4-b2ab\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45739,"size_decoded":8745,"mime_type":"text/css","magic":"ASCII text, with very long lines (43557)","md5":"7aa9be2b6bc3772350fa1059d461af6b","sha1":"25b94188cde43738f3a0e658b22401a534e5be48","sha256":"44622e9d59e3d2c9c4ffb9fc53d368e250f382ab07a3df978410eaa86556cff9","sha512":"8d47800211a8f5f6f563b4cbb3e07d41eb6041caf2763b8e51e203b732cfae06e25485b6483004ed8cf06807ba18ac84230899cdb58dd9f052eddcbd88f29de7","ssdeep":"768:mR7Ork1rhDYollnk+FHkqYCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2a7ZAR2s:mVVY+tHQtBU5PTwDuaP","tlshash":"5623e86057d035391233873efad6bd082a694313d74f26e2f8ab8668c9c57c71a72a4c","first_seen":"2025-03-07T03:37:02.022924Z","last_seen":"2026-07-18T05:42:02.880353Z","times_seen":2992,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Libre+Franklin:400%2C500%2C600%2C700|Rubik:700%2C700italic\u0026display=fallback\u0026ver=4.9.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.693Z","timestamp":1783512316693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css?family=Libre+Franklin:400%2C500%2C600%2C700|Rubik:700%2C700italic\u0026display=fallback\u0026ver=4.9.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Jul 2026 12:05:16 GMT\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13310,"size_decoded":1809,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"a4254a0059fb1eb4999776c752a85b43","sha1":"f123ac4d8e8eac30a9d60f6ec62c684450e5e35b","sha256":"87ded5a1447ec83c728b4acfb907faccd42c2a992927cf7e7b3a19d73859c706","sha512":"7e103e6958f97d27a6bd5a47e05e0694b8fd4f7e2ad8696701dc5914a7cd5c58d2277b325d28629ac327d38a497cfd213e3541535a6d5d9290f22ab990789a44","ssdeep":"192:jzzNIkHZ8zQNrXHe9zhNe6HryzmNZFHIHGGClkGcsGbGNGGGGMLClY4AK33ms:HBAQKXIW6qlkRs8yikltx","tlshash":"8352ebd2581b5080ba6b1cc263cfbf37ee0e61587055c5299ffd0a589cabc266360f9d","first_seen":"2026-07-08T12:05:50.746363Z","last_seen":"2026-07-08T12:05:50.746363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.705Z","timestamp":1783512316705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Mar 2025 10:06:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67cd680f-15601\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":29985,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-18T07:40:34.346316Z","times_seen":976277,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.908Z","timestamp":1783512316908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 03:03:45 GMT\r\nexpires: Fri, 02 Jul 2027 03:03:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550891\r\nlast-modified: Mon, 08 Sep 2025 17:58:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29292,"size_decoded":30105,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29292, version 1.0","md5":"bc34823f42d59bf550e99604c4a1cb08","sha1":"cfaf56855c8113d9e461e154d1e225e09b8a258d","sha256":"52e605852c72cc2df1473df1fb7f26a3a0be58e31835bc8f33f29b1918c82cbd","sha512":"ea2cde28aa5332697b4538e0a67bdcb61afa2c0603f302268cc3ffb6866409916539c919b1f1d4a05b480072c417d70e73c060198325e8730b7a54483e8c2b5d","ssdeep":"384:xRWnMC/6Y9cLA6b8+K2Wn2iMJmtaHqkmBJ4SYe2KOeugFKnGgWz/kUN2zWppbt9U:uMTpA0AimtaHoLYe2KfKGP/5NYsp5jdO","tlshash":"dbd2f1578470a5c488452db4922ccdc9c7d89ff1a9bc0a0a1cd274b9cbf05ddd1cabc9","first_seen":"2025-09-09T00:23:24.758315Z","last_seen":"2026-07-18T07:45:16.540956Z","times_seen":6331,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":35,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-4I-FV0U1.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.913Z","timestamp":1783512316913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/rubik/v31/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-4I-FV0U1.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19112\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 06:13:09 GMT\r\nexpires: Fri, 02 Jul 2027 06:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 539527\r\nlast-modified: Tue, 09 Sep 2025 18:39:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19112,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19112, version 1.0","md5":"74855ea68c9521b49d79795e213ef8f5","sha1":"a0c4fcf2b75419ea03fbc030397c0ce3ee8c346e","sha256":"e423f8ae1668156addf5e32f1056d5b22b5b113a9a23afd364df84a6fa88602d","sha512":"32a8357ee4ba724fa5e8fb8db0a64c457d41eee55c3474909662ed417151ab43a91ae3f1587522bc882dafbb18e31ec64f3c1e4708327d6197e38db4f3e55171","ssdeep":"384:W90LXA9/uTlj8Z0COzkOGG21IyvIAf0wO3qq0kO:W90LXA9mJj8yBGGNyvN0wO1q","tlshash":"0982dfb4d9cb39acd1843a3072921f6742198801ef43a02cdea38df7ee972466d61b52","first_seen":"2025-06-13T05:11:39.473075Z","last_seen":"2026-07-18T08:14:30.106451Z","times_seen":1650,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":51,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/2025/03/rainbet-.png","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.918Z","timestamp":1783512316918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/rainbet-.png HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 250119\r\nlast-modified: Sun, 09 Mar 2025 13:59:13 GMT\r\netag: \"67cd9eb1-3d107\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250119,"size_decoded":250493,"mime_type":"image/png","magic":"PNG image data, 677 x 270, 8-bit/color RGBA, non-interlaced","md5":"bc47be9a61ca3ac6ed4cbbaa41533b34","sha1":"f644ff87ff0aea798da41a83a89bbffd30e1a7cd","sha256":"fd88bf77aaeca5dd6442950c3244050a711d8688c78e131ac8dcac28368f71ec","sha512":"5fd8fbafc73ce7b9a5bb0e9eb11bcd26fbc8fa8f5f46cafc047473ac5b7c1f7e16353ea56227fc0851f2f0d629b33c1d3967f1ddd4c73ba0d33a366c030cc0e0","ssdeep":"6144:kDoTX+X7Axr86HfoE7TAvIrFSI05EHpTTjix9Zz0TwLlYQW+QdU:jj+8r86AUTS4bqnSsLlYn+Q+","tlshash":"f33423ed54308e08299a31b31c4bbc7b60d2fbd69b9e039695bde6050de2f14646cfd2","first_seen":"2026-07-08T12:05:50.748975Z","last_seen":"2026-07-08T12:05:50.748975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/uag-plugin/assets/0/uag-css-31.css?ver=1781693518","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.703Z","timestamp":1783512316703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/uag-plugin/assets/0/uag-css-31.css?ver=1781693518 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Jun 2026 20:56:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3309fd-19c76\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105590,"size_decoded":6018,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"20e7baafb9eba88d8e78f3de2ee15ad0","sha1":"f8583a08dac983782b920067186c6a380a9474bf","sha256":"89321d7b708c93f9d40d55f7ea86d0035081b1c5d20f7436f27dc38f28a3dcdb","sha512":"9547f2e02b7fb01bf392703af53cda410cff67dae0f4c1766e0e7b68b58c3e71d309626d3b8038490c82a59618cd715eb6577d27897919b348d994b6169f3579","ssdeep":"384:3cUCkdg0jqV+9J2429Ehqh9R3FBbe7seb69I19/9OHQ+djMRPAf264APIVSBqIX6:aBbe7LqwJku","tlshash":"5ba3b8812b700bfca17a6b9d6917a655660aeb43df4238edf452c083f5cf2d048e578b","first_seen":"2026-07-08T12:05:50.750109Z","last_seen":"2026-07-08T12:05:50.750109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/coupon-reveal-button/js/spbcta-nm.js?ver=1.3.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.715Z","timestamp":1783512316715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/coupon-reveal-button/js/spbcta-nm.js?ver=1.3.0 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Apr 2026 20:42:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d56c38-cec\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3308,"size_decoded":1247,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"02b3a0914d7b0ab3591fdf4b0d3a6f7c","sha1":"2dac30fb15528fd49c1b2126bf44f4837d74450c","sha256":"14021f27771e6aa2a55884f5bcf49e5983e88671c147dccf3ce3b99b61ebef73","sha512":"4f4a5556d1abcc78dc10950f430b202f8bda0f0ad13e876a3c80d60122834a2f92a189816931355ee66e2a3c43dfcd2948fa656b647e665bbc8d8ee195c529c5","ssdeep":"","tlshash":"9961ab5e710815a8923b7b6acbabb10df8b5806f52018211fe6cdae04fb051967d3fcd","first_seen":"2025-12-20T15:23:45.366886Z","last_seen":"2026-07-16T11:10:35.108969Z","times_seen":7,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css?ver=2.1.14","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.708Z","timestamp":1783512316708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css?ver=2.1.14 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Apr 2025 20:14:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68000fa1-bd5\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3029,"size_decoded":1011,"mime_type":"text/css","magic":"ASCII text, with very long lines (3029), with no line terminators","md5":"828a9fe6e0d92027ef15bf1c6699f672","sha1":"e8f7d3afeae0498bfd05e780129202111d32961a","sha256":"5978d7eee4b0fb37c9409a3315f1ca722ebd7dfd476a42e9efa8cb016c076414","sha512":"623758277f3baaa54920d955eaea49f2c7c5d96ec0b5a956cde3cad5abf0fe0d940ed1311b1c67b52c13661ab6815795843e6d7addb87bfe9a3c1e3da2771233","ssdeep":"","tlshash":"cd519b51af56707390e2b92ef25ca12bf22c5d39c30bc72eb896e313e5415562922f17","first_seen":"2023-04-05T11:13:21Z","last_seen":"2026-07-18T05:48:16.494561Z","times_seen":1183,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-animations.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.719Z","timestamp":1783512316719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-animations.min.js?ver=2.19.27 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 03:50:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fd28e-51\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81,"size_decoded":446,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"49921b48ed8ee3337588d0c77afda916","sha1":"e572c5e4310c02f1c8caf3d22accc6faab0b781d","sha256":"31f6c2ca0dc704b351fce45632e0df70302f52858b12e1862e27a5d1d41589fd","sha512":"583247f11d6c3c03cccdd84a33b892d0068fec0b9c22dbe34c008b8191b14dd44c68471b8d89ecb4433d33c4ff54beadb6681a52a265e4d8376fdd4942862c21","ssdeep":"","tlshash":"86a02208fa233c3200e2f03202bf3b082a3b3faa08000a80282000c08f30ecb3002ccc","first_seen":"2024-06-14T22:14:49Z","last_seen":"2026-07-17T19:30:48.940177Z","times_seen":880,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.910Z","timestamp":1783512316910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 03:03:45 GMT\r\nexpires: Fri, 02 Jul 2027 03:03:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 550891\r\nlast-modified: Mon, 08 Sep 2025 17:58:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29292,"size_decoded":30105,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29292, version 1.0","md5":"bc34823f42d59bf550e99604c4a1cb08","sha1":"cfaf56855c8113d9e461e154d1e225e09b8a258d","sha256":"52e605852c72cc2df1473df1fb7f26a3a0be58e31835bc8f33f29b1918c82cbd","sha512":"ea2cde28aa5332697b4538e0a67bdcb61afa2c0603f302268cc3ffb6866409916539c919b1f1d4a05b480072c417d70e73c060198325e8730b7a54483e8c2b5d","ssdeep":"384:xRWnMC/6Y9cLA6b8+K2Wn2iMJmtaHqkmBJ4SYe2KOeugFKnGgWz/kUN2zWppbt9U:uMTpA0AimtaHoLYe2KfKGP/5NYsp5jdO","tlshash":"dbd2f1578470a5c488452db4922ccdc9c7d89ff1a9bc0a0a1cd274b9cbf05ddd1cabc9","first_seen":"2025-09-09T00:23:24.758315Z","last_seen":"2026-07-18T07:45:16.540956Z","times_seen":6331,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":31,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.9.0","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.714Z","timestamp":1783512316714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.9.0 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Mar 2025 13:04:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67cd91d4-5ef4\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24308,"size_decoded":5873,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24308), with no line terminators","md5":"89a7126b1123d0261a0371f7633f2059","sha1":"749c238914e5c1d320de6ed691bc437d0813f5ad","sha256":"8ebd90228f2ab8870aa03f29501910d879d2c2ea2197f1f113e4b16e1f489fd4","sha512":"f5a687f75ff517018449f5264e8882287e8c6d943390f8431b40a0f4f8d37525413b5f84f82b1d234425fe56c8fb8738ad68e8764d044f0db4415fc4ce9e792b","ssdeep":"384:uYE9Gy3GyPy0boEcFD4ryHjdD0QoDo3oEKAZknUyCdyGvy0cUyltNmx6Eq2VqKjS:uYEPx60boEcFDTHjGQoDo3oEK2AfR0ch","tlshash":"2fb271a623002a3604fe17e7f5daabc47671109ffe0944155878cc6e19a8fd352f1afa","first_seen":"2025-03-06T18:00:47.699633Z","last_seen":"2026-07-18T02:19:54.262221Z","times_seen":1008,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/aos.min.js?ver=2.19.27","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.717Z","timestamp":1783512316717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/aos.min.js?ver=2.19.27 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 May 2026 03:50:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fd28e-3547\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13639,"size_decoded":4438,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13639), with no line terminators","md5":"e861c3c7aa3ae1eb067bdd021849fbea","sha1":"c24de7e458fde71de63c35e8fab145ec767b1424","sha256":"3fe032d2f2113e4e7bf80d77a320caedfa6a741c571af727aa1d266675c2d0ba","sha512":"9d2b19088a56e870b0dc1b68e8bee156a8e2931f0aca542b6d4b6dfb9b5a13154a594489b9ec15da2ee10064509377d7f066d0c854774046c47c89c6605e0b7d","ssdeep":"192:3M4ps70fNaZdhh0BSu5HSL5J78yLupOIFtlomlApOIltlomldlWaU1h1m/k1Ay46:3RZfNaZdheS+SvoAYWZWa+h1mM1Ay59","tlshash":"d25208e83185f0d60393d4f7827f600bf2f19838605da061d669c4d27e758ee9663e6e","first_seen":"2023-06-05T10:35:47Z","last_seen":"2026-07-18T08:04:18.325307Z","times_seen":1353,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.casino/wp-content/uploads/uag-plugin/assets/0/uag-js-31.js?ver=1781693518","fqdn":"rainbet.casino","domain":"rainbet.casino","tld":"casino"},"ip":{"addr":"35.214.131.255","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.casino/","date":"2026-07-08T12:05:16.724Z","timestamp":1783512316724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rainbet.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 03:39:07 GMT","end":"Wed, 30 Sep 2026 03:39:06 GMT"},"fingerprint":{"sha1":"6F:A5:ED:78:5B:51:6E:2A:08:37:3A:AD:9D:42:24:B2:7E:9A:82:9F","sha256":"95:3C:DC:2B:45:E5:E5:33:08:5D:9D:7E:3C:7C:ED:4F:05:25:C1:FD:33:A2:D1:C3:DD:5E:43:F0:9A:83:37:51"}}},"request":{"raw":"GET /wp-content/uploads/uag-plugin/assets/0/uag-js-31.js?ver=1781693518 HTTP/1.1\r\nHost: rainbet.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:05:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Apr 2026 12:10:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d0ffbd-167\"\r\nexpires: Thu, 08 Jul 2027 12:05:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":359,"size_decoded":509,"mime_type":"application/javascript","magic":"ASCII text","md5":"839dc4702e3bf507851c9872ccfbb4bf","sha1":"039e8a78dc2ebe1e2e59ed68e39cf6fd0f1d15ea","sha256":"df2af89f46c59f0cd29aa5619cac88c6bca3af3bf1ea7a6036ad55a583692362","sha512":"9e45d3b368ed9bbd843d2e45a334dece7b0078a9727e449f913cb1dde5a213164e49170c3ee32b060767093aad2349ac346d34a4ffcdc322dceef2655eb02454","ssdeep":"","tlshash":"36e092b77a161e388471f135593ff7695c3f0012dc242884b1528cc6bd468cadce28c7","first_seen":"2026-07-08T12:05:50.7627Z","last_seen":"2026-07-08T12:05:50.7627Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}