{"report_id":"69a0acad-8cc9-4767-9afd-19a38d0fa76a","version":0,"status":"done","tags":[],"date":"2026-07-08T12:06:13Z","url":{"schema":"https","addr":"rainbet-site.com","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"title":"Rainbet Casino™: crypto gaming, fast payouts and cash rewards in Australia","dom":{"size":257527,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5936)","md5":"3e6c58c8564f6d427313305d7a23760e","sha1":"ab78321ebfff9afe8577ff9d7386b7c19024ebed","sha256":"b5d93168ad6b52128bf23afc48de5a4702ac2901662c7122da1a474fe45a6700","sha512":"6e7e602a84484234e4853d830b19eb91747586015e824b0f2000c7386fdebfecb62bbf4544df7e497a9a4e95c93f7eb0c541cab197f5b0816758b37692c07427","ssdeep":"1536:KdAQKajyppnBpPWShbQpMelstZUQGjYQ1CRy3N6mv+MWWLffGILcg3nJ6TtV:faOlpPWAQphPjYQgG6mv5rffGI4g3J6T","tlshash":"e444fa5b57a72099352bb1785faa7349223cd003c905cde87eded1488fcae9589b2f4c","dom_hash":"domhashe8552eec8503afe4a7173d7bfb67ec06","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbet-site.com","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T12:06:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-site.com","ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2026-07-08T12:06:14.33182Z","last_seen":"2026-07-08T12:06:14.33182Z","alert_count":48,"request_count":48,"received_data":684375,"sent_data":25678,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-18T08:42:29.905589Z","times_seen":217087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-17T09:19:36.588429Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f03de8ac1515f8ff3b8f628571f987a2","sha1":"a36ff79226a8ee08f38fd278fed4f75487a7ba2d","sha256":"fa96d3eaa67dc35be31803ea24b61766fea0c1a630f0c1674b7c75757861715e","sha512":"3a7ddc47bceae88f8444a0c9fac2815fe1af8c5b124a5cd20d7d1d24479f8b2a54c4cffd7bea56918f051f22f2119c565b02c9f50262d03d62e538c0655d55ca","ssdeep":"","tlshash":"481165de0ea70a3c4c6bc7b25f1840a02d5a81ab4842459eb5cd10e03763cde57d4df9","size":1021,"data":"","first_seen":"2026-07-08T12:06:19.270144Z","last_seen":"2026-07-08T12:06:19.270144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b75ffcdf480589f19cbf78ce373dea","sha1":"316b05245c99c1420895c28a0383802e6c5d74ea","sha256":"3cb8441193a5962c3af7a83eb1a4418970173e7a7f89bb085de078e3ac16fc0f","sha512":"10af5558f1abf25dbb1f03fe16b20efea15aaa4db054488e516bc625ee6fd0b36194fe7241573aa29f91513eab613c3a5cc0f423f1c8851b3aff77a84c56ac78","ssdeep":"","tlshash":"ab410768dbaeb662432ea0b62bfe12de143e147e7a414ebb7c38405048e48093715c7d","size":1934,"data":"","first_seen":"2026-06-07T17:05:58.287593Z","last_seen":"2026-07-09T02:17:44.838838Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b0e46a41074c0bf1d900f98abb9bd9","sha1":"39c9191565e4f41cee4791ebf9d1e7d8c414d21c","sha256":"8f5cd5bcca81ad073797be8cb76584b707e7efcc9fa956ef749cfdcec4203e44","sha512":"99cf7c0f76087717c8dfad8168c8d47d49aaed3b1b7c63816eb94aa604669532b131df835cc9c5048e1d6a371967173e6d1180f047429545c32ef455234d33a8","ssdeep":"","tlshash":"23410d35b3bd243147bf20b529e5669e2a39508239838ca7cc9c9c0624c0e9d4875cfe","size":1921,"data":"","first_seen":"2026-07-08T12:06:19.271524Z","last_seen":"2026-07-08T12:06:19.271524Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-18T08:43:40.406381Z","times_seen":28596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9591fee89b1be61a6c67888014220c93","sha1":"ee4a2d07c676e2c7cf4236c294f55c5d1dd0bcea","sha256":"cef00fb93beb208f7cdafdc045d5c249a61e2b31ac63507a658dc426f8efca31","sha512":"113115ecaa050997a2e58cb7b697b9d3ef2f6a7a73261bf2d089366f3bd1547f3945447abfab0929b1892044d47b2c20802c207ecbee737da7bd2108d8a229fb","ssdeep":"","tlshash":"4dc0129aa9a82d4914e9c15801781225b1149527cb2b5f65b24e404c5fa8079a5245ca","size":190,"data":"","first_seen":"2026-07-08T12:06:19.272974Z","last_seen":"2026-07-08T12:06:19.272974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"387733e2e3cc4276fa53bd9a8bc04e56","sha1":"bfed93f399adc70918f23d8f19b31e5a83b3314a","sha256":"9f24ff6d934d0f1035191c4eee8072e318eefca330758f756645b9b7dbfca654","sha512":"aff01c56aba77dd6deda05319c40f2f519d4ccc5c75818de124dd4f2b867b06e2e59a96d2dd4e77b6acc7d656e0c77b38c426038a7ea3b241d06be615cfb1df9","ssdeep":"","tlshash":"68b02be90cc01fd211800ed40820b23611982c31cca098004682c4a000246c64d88004","size":122,"data":"","first_seen":"2026-07-08T12:06:19.273882Z","last_seen":"2026-07-08T12:06:19.273882Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8188552f4b3165689d154ca8584982b","sha1":"b962a3910231951e091f2c50158034691465469e","sha256":"edd24643a5b691bcd8b27120184687719669b99dc780086b2ccf668097fa37a2","sha512":"42fbe19de342ce5da5973a6b40760491a78e912c64bb4c86241706226f508e8d8e010451ac8b03c7f8314f8b73f66348575f0ea3afa51bf6dcef4d7ae76570d4","ssdeep":"","tlshash":"cef059db6b5c0432c25f305e105eb3cd3d7d803269412d67fc78c45248f0d98966289d","size":544,"data":"","first_seen":"2026-06-10T08:18:22.009293Z","last_seen":"2026-07-17T09:19:36.595508Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a85ad5ad6b7dc5739c536ead402ece9","sha1":"4f0bad18af7987df0ba4d003059b1229bf542b4b","sha256":"9bced38b31e02c72ccf4ab291b5cf6383aa18fc295986e66f14aaae8c684257a","sha512":"b5fcc29d39b6101604d6ff9bf50b8f74e98074175a795ed6ac5e77cd34267a203a827c23f9f7cc35b7195a7cb960243f4fe6224fa1d29bc8267ecf67b8bb86e7","ssdeep":"","tlshash":"842147c2f70c2432d5fe343f694a52cc252da071ac1014ba7d1c672c0572f9d46aa6ac","size":1366,"data":"","first_seen":"2026-06-10T08:18:22.012949Z","last_seen":"2026-07-17T09:19:36.596124Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T08:42:33.616506Z","times_seen":399381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-i18n-js-after","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90648d90500c3459e206a2a246f6c7a2","sha1":"f38e01e120c7cb62d8ef15a56e22002c1e2c7bb9","sha256":"4dd0f53c0989abe5451fd944f333a3a739c57780e2cdc82f3ba9f7fbf5d52efe","sha512":"1de5cc16d192bf516a7327770e12385cc6c175cbdcf03362983c09880ec556c9f38f5569a2d50479578b008558c51b8d0f4d3a06f00894504e081f1394bb7d41","ssdeep":"3:HCaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:iBLxTqtGmVOiFM/KGNMJ2","tlshash":"67d112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6468,"data":"","first_seen":"2026-04-09T23:40:12.949411Z","last_seen":"2026-07-08T12:06:19.276401Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/contact-form-7-js-before","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d83992222c239deeeb8aee6a39e05f55","sha1":"5d98ca1c4dda182939b3a397a2d0bf104454b691","sha256":"650808e96993f177dc0466473dc5420d5279080430fe55829bc1f6808d8da23e","sha512":"bbe6590d1379211a6cb97d5641667a485e4607b42cf0a8ced069dac22f57b34eea0f8d588c733b04bad77b8ec56751210ebc78de1834e92c646b7f52e3c5c575","ssdeep":"3:H76SVGDSiCmbFFlHrSuG1xBF/FFhhzVEGUHsR5pHdFQhN9GEawUWKLlUFrQAv:fLiRhDSuin1ulgpwLkuKZ4rQAv","tlshash":"49d1129ae9a82d4914e9c178057c1225b114952bcb2b5f65b24e404c5fe8079a5285ca","size":6566,"data":"","first_seen":"2026-07-08T12:06:19.277727Z","last_seen":"2026-07-08T12:06:19.277727Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-18T08:42:29.92035Z","times_seen":224732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-18T08:35:06.289501Z","times_seen":36869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-18T08:35:06.184641Z","times_seen":36062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/scripts-js-extra","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe7ce8493f883c1ee3720e429d7bcbde","sha1":"3b59e131b27e5fda916b38de03f2cef4acb99bab","sha256":"b3699bc87dd8eb9dd4b45dce94ec99be6dbd868df14039601288c09f6e174ee5","sha512":"729dfd5b5cd40d1dd6a212ae6dc0082e1024e05066426c88259a8e06273e5820d374b35714870df676015680c28b21ad0c20191b1ec9d1f3af00fca670daa069","ssdeep":"3:HD6EDew5vNVSuGFVgrTHnJH+LX/2RTsWvGY3r:/9xyu0VgrTQLXss+GY7","tlshash":"16d12be9ccc01fd251800ef40c20b23711d82c31cce0d8004686c4a000646c64d88004","size":6509,"data":"","first_seen":"2026-07-08T12:06:19.279565Z","last_seen":"2026-07-08T12:06:19.279565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","size":8564,"data":"","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-17T09:19:36.574842Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/golisimo.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.375Z","timestamp":1783512349375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/golisimo.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Jun 2026 13:33:14 GMT\r\netag: \"6a26c49a-179a\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggZVSeTsTtjBhJRnCqhszwJAMoQdg1vLMo85KXq7lggjLL04Ol%2Bml7Y9ulCKQPXSGUuWRjJuhmDvvsvh%2BeUAF4hf4%2B1vToSkp%2FA3jhZP1k38svgrr6faxWQaV4f3C7wE6VvS\"}]}\r\ncf-ray: a17ef5979990569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6042,"size_decoded":6819,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac59cf1dc11e70a9ba17900e72121b09","sha1":"55702cec441603723d5145e7e8b947c80eb55f81","sha256":"7c4626bf4342c5215572a75dfb87d00cf2fcc74bbfdd8d24cd7a9854f415a57f","sha512":"ba8a91cb9dc292414d6ba555bb8a624cfdd4dae52be21e2d2310dec34fcbdb08b4aa54e05f9b2eb53bf176a2889abdc6c53bba955f13e0922b83f58eff71d084","ssdeep":"96:kElbw+iTyeUqcLtEWHWtW1thiE/0BdW0xFd3U6CXF7N9jG2GxKw6n/p:hwPkphZnmFjq77K2Gxqp","tlshash":"96c19fbd42e72f4be9a14afc84c0a732c0767e648f6017a0294944517eaf0cf5fb1949","first_seen":"2026-07-03T10:53:35.719348Z","last_seen":"2026-07-08T12:06:19.236956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.561Z","timestamp":1783512349561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egnv1%2BLdAanLTSteSxN6J36MjYv3adluXU4kIDn7PXtOBO%2FG0BZzS4Pe%2F1aPxLabmmEOnUJElUAb9mUOEQrMAlaNJ2jcQFtD8UZRWipYPcqdAnDEuDWCLzrXOS93VFMrQO5c\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"68ff49ca-11a\"\r\ncf-ray: a17ef598c9ac569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":965,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-17T09:19:36.583551Z","times_seen":104,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/bitcasino-1.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.369Z","timestamp":1783512349369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/bitcasino-1.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 08:57:14 GMT\r\netag: \"6a18036a-2492\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPQKaO2lNVG3pCch%2BkG4vVVrhXOg2H%2BB8GnXIDyieZYDm%2BobqsSPC%2F08NH%2BlBa5aJWdgwHJg0DZWFCxjZt5ZHAxWMDH0mG3jDpbVKGM31z0Ymvp%2FFW2eWJiNMPhFJows7oOZ\"}]}\r\ncf-ray: a17ef597998c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9362,"size_decoded":10145,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-07-17T09:19:36.554611Z","times_seen":10,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/casea.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.379Z","timestamp":1783512349379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casea.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 08:57:14 GMT\r\netag: \"6a18036a-1212\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbrOEaxHUCV5JRGNGn1gBLZDncZMgjfuRrFpr9lhIdVOX%2BjrmIvuE%2FNJZ38YCd6UC2onnsAx6Q8Xmcs3HlktXAi8jvLx3mHvwQ7LwzKEb4XW%2FuKYOMI%2FNYtrmGjsFwuI7sKM\"}]}\r\ncf-ray: a17ef597a993569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4626,"size_decoded":5403,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99854d0a11a9071b5bd0c7b524240ec4","sha1":"cf6a6a259afdadcfe429374ad3a0d51e30c9262d","sha256":"333b32661434cb1ae472903224465055af7f02193ac37189529020f6204276d6","sha512":"017b2a49e749a74b0f8b61217bbffe0a88b766d7441410b96d0672b3b4826b3edb71c4e139206dc9d734b68fd1593e91b9030969ee93b0824ab027a7943110a1","ssdeep":"96:gElbw+iZT9OliRStMUZedQGjvTOIimJV8endhCPllse5DHFmEF:FwjGiRStlopj7OIisVNdAPbxF1","tlshash":"45918d712f4653bdc1180af80b69f18b83ddb03cc1ee466b54940023be614e6acd1ec7","first_seen":"2026-07-03T10:53:35.713042Z","last_seen":"2026-07-17T09:19:36.55851Z","times_seen":8,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/bg.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.557Z","timestamp":1783512349557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/bg.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:00:16 GMT\r\netag: \"68ff7af0-e88\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Evu58Qu8zebJkHKKXR9CNylaW1p7SrJGLbFZoK%2BT36F9%2FGF9V5m8y%2FFZ2nPZSkFr5XdxwmxJSqZUlmz%2FcVCAWQ5zzaUhJynxZacj3gf5dyRTd194xf65sj%2FjXw9DQigWTFY\"}]}\r\ncf-ray: a17ef598b9a9569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3720,"size_decoded":4498,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b95a47e97bb88b206eee8304f541f61b","sha1":"ef29daa0ed039135e3f31ae732bba035aaf1840d","sha256":"fae57d8d5f0589cbcde5288e71221df468d0e6b73b394bcbac8d26eddcb8fd37","sha512":"77725116a55962b3a00b19e66c5f94c80613d18037c02e684d4a358ea59fdca6f76be2f7fe5b071378dad62fb98d2814c30560f6410fe4b0619af34e502c713e","ssdeep":"","tlshash":"15713f48c3235aecd3269b7469b01aaef5f53d885d3800265bcd63fe8683321503dcba","first_seen":"2026-07-08T11:54:42.227502Z","last_seen":"2026-07-15T08:01:48.942614Z","times_seen":4,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.622Z","timestamp":1783512349622,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T08:43:08.114451Z","times_seen":17333644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.354Z","timestamp":1783512349354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 20 Apr 2026 14:30:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e63891-2174\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZ93RCFsMDXkahqrX0HRq462rqbJwyK9bdY67LAIa7Dswy6w3sLZO8PgZBq7IOrr14eRhPQ8WFjZgJ5gKaeXJvB9ApFXF203DccG9Xh1MngNskAAtD4DyLGhTcZdx548BLHH\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ef5977983569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8564,"size_decoded":3492,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-17T09:19:36.574842Z","times_seen":11,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.370Z","timestamp":1783512349370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff49ca-5fe\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEOwXRiuMMroO90VnxxIqkTDuRdGLO4L54RVeqKb%2BAp79Ijxe9ig3xuE7a%2BuhcUJ5NFLhNWPtU4RsuDOUyapFuyCTKxm2BDa6LUy2LigcDwTRevNaQhRmP5qrcW%2FdiQJYq4w\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ef597998d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1530,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-17T09:19:29.581557Z","times_seen":38,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/casinolab_logo-13.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.377Z","timestamp":1783512349377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casinolab_logo-13.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Nov 2025 07:25:25 GMT\r\netag: \"691c1f65-75b0\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCDiM5BSDYzkkzbt4KPLouLn7YbOz8kY9w9lX%2FvFeyK2U%2FlLZvf56ZFNlmNiaM9d%2Bj%2FZ2PHA475ReFH1uIBGHtEB15o1BXgv9hS%2BbzYPhEk8vHobf9zOpsLzpcKJ%2FdUQnBm8\"}]}\r\ncf-ray: a17ef5979991569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30128\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30128,"size_decoded":30910,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f96f3d28d31c4cfd5521879427fede45","sha1":"dd1bc6fcf4b27472349d0c9637e0b2b696d24c55","sha256":"a9324ce9d167e8e77c331afe020c97bea593e51f0fe1ac9220e43b053878b30a","sha512":"ed165fc2c53ce01f5b6654bb7523f33903d8d21d2a680dd5137e84f1709a1296197baf6027ec53d5af104cad52d560ebe1b1330c9877cbab89dddc5b91f553b2","ssdeep":"768:yT7djYZUOfDc2+6VAtID6XtOlp38Ti3RoiK:GylDM8AtI2dWH3T","tlshash":"a3d2d09676b500bff23c013cda198ef2b5303a896c0274a6e1937399527d8ce973127b","first_seen":"2025-11-13T03:52:08.190132Z","last_seen":"2026-07-17T09:18:25.84986Z","times_seen":7,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/be_gamble_aware.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.384Z","timestamp":1783512349384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/be_gamble_aware.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:29 GMT\r\netag: \"68ff83a9-1d1e\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FIPioqpc8OhFHUtUDEtSw2uIL13lSrtTgGq%2FOerUvmCYmWhoETeoHSw4axFZiMkqC%2Fv6cBQnQDmNNvIabYz9d06ZN4ouqVQf%2FmW1xB2L%2B4t5q4m66fuWomcV8Nq7rKHRa9J\"}]}\r\ncf-ray: a17ef597a998569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7454,"size_decoded":8231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"011912f410f3857fb6c343c637182731","sha1":"5b692d9fe9026bf861565d194d35ef8eaa7f4330","sha256":"9459b0482b097fd7351b8738034d7fe594b2c6562699038452c52b1379e96587","sha512":"de2d161d5b7d952c9087e9acc3f85a0bb04c15361aea7991ef1105d62ea6174f7761ee6da736c09712fbef50a76c80541fae99f9834f598b5d90a295f124d019","ssdeep":"192:6wTh6QhkBDEGrbjR4N9Wyhlll0HTEr+zxjumO3Z:6wTBIDPfjILfD0IrkwmO3Z","tlshash":"6cf19d2ac36d3210f8d95770185bbb26588ebc67136ee30e449831161999ff58b2de0b","first_seen":"2026-07-08T12:06:19.242946Z","last_seen":"2026-07-08T12:06:19.242946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/11/bgaming_dark-1.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.385Z","timestamp":1783512349385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/bgaming_dark-1.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 10:03:53 GMT\r\netag: \"69087e09-a0e\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GjrezwtPKV6ocJP5vPV6tjrpt62e7jJodYKUivv%2FkAYc3DmH7jUKNJ66mtanEUdzvMRGw1JfK5vPCEb%2FzFdQkfy%2BCxHDuNlb%2BXtQjmu3OmysjaegzBh90ixy5mNtp1l8m7Jo\"}]}\r\ncf-ray: a17ef597a999569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":3350,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c005db32bd84510fac65b93b71ad969c","sha1":"92cc23d097b6bc30b8c9d779d2679bbe01cf43a6","sha256":"6451a65030e5a440daeb99557aef0838cfac0cd86a001c182549c983378bec33","sha512":"065bd208fced2dee7f88ac11eb454a93953f582eea3e610152925e29184fdd43181ed4e7d3dbb2315348245d75761ce3bc78bd35a6aa525621cd5bfec7a9c3c3","ssdeep":"","tlshash":"88513954fe72a389804dc5c2284b3dfb9dd1b44aa0e22d6670a4467294f6d1aaea21c6","first_seen":"2026-07-08T12:06:19.243985Z","last_seen":"2026-07-08T12:06:19.243985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T12:05:48.552Z","timestamp":1783512348552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbet-site.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbet-site.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbet-site.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQmXPyvEzwj0InGqksTfdetC1cZw31n%2Be7%2Bj3orlLMuH0QcdaAqCsJAuOvxxqVHwF3IIWVmyp9LybBqbe8KQFQJ9iJwH40ZFxmYEWv8eg3sIGC7%2BnXed6RtW7vff66WqnWS6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17ef592b954569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262357,"size_decoded":47497,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5936)","md5":"425f72d1c6cfdb1f07fbceced3fae4bc","sha1":"279ae0fb30fdc978b9037557ba06ee4a612b6ff5","sha256":"c9fac5aefcbb56f70106bd7d4f62f2a7490b0df54dcb735e3c483d38cf74974c","sha512":"2c36e46d56c98ce0808f469a15f061110fc80e8eec6bd44390b12090033be8b6ea8d161f562ca3001cf1863ed46669153631449f10627fe7f86666d51abcaee0","ssdeep":"1536:EdhQrajyp8ZBpPDShbQpMelsEcUxyZbi1utyMyV+TmNpnWLffGILcg3nJ6TtY:8vOKpPDAQp/kZbiM9TmN4ffGI4g3J6+","tlshash":"9844d85b57962099253bb2785faa6348723cd003da05cde87eded1488fcae5189b3f4c","first_seen":"2026-07-08T12:06:19.244837Z","last_seen":"2026-07-08T12:06:19.244837Z","times_seen":1,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":12,"connect":22,"send":0,"wait":520,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.336Z","timestamp":1783512349336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MadFG2bEAj0PTPquRQchuZayjYQm3kTnowvYhz3Aw2NYz3mkl3br%2Blrh4V%2FvHHI2Teb553vkU0rN0lcIISN2CCmBgXfdDGxHLDhu%2FHBGC4v4P3hpXP2BrNACx2tezi1RglUT\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17ef597597c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1027,"size_decoded":1243,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-17T09:19:36.556937Z","times_seen":34,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.368Z","timestamp":1783512349368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff49ca-5fe\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zO0ePimldAXZYtIRYuaRjr3Q%2FNqoZPGzfd6V%2B4NTwFU27T02xhH9QB7CcedZPtiVbpVqZ4D1TnCANWNgE08JKs2DtP5lZIYEGJ4rZ2pyL52ruNiK1P2dpRbNuRwUDmnpn%2F4Z\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ef597898b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1529,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-17T09:19:36.560105Z","times_seen":44,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.759Z","timestamp":1783512349759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxQLAk0dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\netag: \"68ff49ca-4c7c\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iamz%2FQGQhfbSWfgj1V7XgwFx5SNI1KmYJd8F0pW0OT5k7HXS3KcACknaTCMwPpYT5Fp5fmBB17jS3SEzIrUtjvRSZmcYrT10HBWqu5b%2B7JHQewetfHGKAJoZXFYvslgOnbC4\"}]}\r\ncf-ray: a17ef59a09b7569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20364,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/699d769a41462e7a0920163c-198x149-2x.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.374Z","timestamp":1783512349374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/699d769a41462e7a0920163c-198x149-2x.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 09 Jun 2026 13:49:14 GMT\r\netag: \"6a2819da-25c0\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0VC3jTc%2B43gCQ6cgHPob2QCRfKiXABUt0LW%2B7qRD%2FranZAhyn1IehOQmNuaefy9qZ%2B6wAz%2B%2Bol4Yf7SuIecKqyAuqEKUrEMzyMxs38aK5IP1OM%2FvtO2avC8TNoxrBBuAue0\"}]}\r\ncf-ray: a17ef597998f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9664\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9664,"size_decoded":10447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71d528779ba02c782a4d8401049a421c","sha1":"d3b7c70af34bc818d58714c802303cdba32e1303","sha256":"3634fce6587c0877e6ec2c506ed1acc7bf3c064af67628c13515d54738123c30","sha512":"9544c8fb8a6ae8255c19b1f346877b2d945470045bf769be80ece162bb977dc062a1eb635ec892fe6d3e6b7da4a29ef9104924e008f36ccac53c4213f77c2f62","ssdeep":"192:mwanpuoD3/NX1vfNx/6uTrg2HfVorcbBDADlVEFGCmPVzaOWLO:mwapNDPJlNVgcVBDARVEFGNPpaOMO","tlshash":"0012bfb6273e0214e1c67cf0939c2ec9f878fe4b43da4639595885af820d9fe225d647","first_seen":"2026-07-03T10:53:35.705405Z","last_seen":"2026-07-08T12:06:19.247365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/syndicate-1-1.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.380Z","timestamp":1783512349380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/syndicate-1-1.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Dec 2025 09:31:45 GMT\r\netag: \"69315501-45e0\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxbdshXVBU33E1YXnTu62DkyTPV%2FoPQCuOkEFbZ3ToSBGlZWehDbnL%2BuE%2FB%2FuQ5mZKa5T4DtAWj6vz1c5V23H3p8oIBVrGmzBElve3IgiC6%2BW2z1d17lnT%2FZSal%2FId8ovNv8\"}]}\r\ncf-ray: a17ef597a994569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17888,"size_decoded":18672,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2622ed3b2a575096eda5502c321f7458","sha1":"c6d6378ee0f731c7da1a23f99bc48f2fce075747","sha256":"7dd9e89794b71fd70ddca552fa1efe17f476f1fb557af752b4eebfe821e1e554","sha512":"4d7ff453731ea37fe6848f9ac8e05f8ea141334f8a99ff1f48873379bf4e54ea0d974bde7d096920cf3b4ff20891c64f70329d02ce88af9c5fe69d0fabfe6a9b","ssdeep":"384:nwTLGab0CSO8fi7EVKqQVJT9QWC8laB6pEt3wW5Mg1gNK0RFpdV:wTeCe6I45JTjl4wTcgRRvd","tlshash":"6882d0224f138778d4f1853152d5c7f0d681475a9ec5092ec92fa530afe40ebef98a2e","first_seen":"2026-07-03T10:53:35.713934Z","last_seen":"2026-07-08T12:06:19.248754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/gordon_moody.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.383Z","timestamp":1783512349383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/gordon_moody.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:28 GMT\r\netag: \"68ff83a8-193a\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRADwZoiDi1Yo%2FEYXHiCAW%2F9wPWua%2BhivKc4UbvShTrndxjqAw%2Bhopq%2FyMPHVI%2BLs6qYZbG8YMrjKXdvy8sSzGw5bdc6rcsNCqiSkxb1HB7O2C9JBihForG0N5HtFDhwMRGF\"}]}\r\ncf-ray: a17ef597a997569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6458\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6458,"size_decoded":7239,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c63f61f997ec0f123d65510981056c83","sha1":"71a795a41cac71ecf3370730cac60bdcec45e6b9","sha256":"6f694d6e14fa6f540ce5fe922c6405e4e2e1c86e4b3c7089daeec700414c7a84","sha512":"d594c431dc2772ab72bd69b47a19d3333e320bb995f45f998c3198010f2a2c5a29100d49e3dc2d4327cdcc4796a529fa4aaef672bc11ae884f079628074683c4","ssdeep":"96:zElbw+iXfrKNojkb6gM3s0ENISM2aDIM5Mw73v15ertwTfG7lSuFGljIzSC2R3ow:uwTkSm67BeJMXe2ulXF7zGow","tlshash":"ead19db0937ad754e721367005b77bc39dbba4bb876dab3ec440110869919ce25cc4e6","first_seen":"2026-07-08T12:06:19.249896Z","last_seen":"2026-07-08T12:06:19.249896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.626Z","timestamp":1783512349626,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T08:43:08.114451Z","times_seen":17333644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.757Z","timestamp":1783512349757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxQLAk0dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\netag: \"68ff49ca-4bc4\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKHLSgB7eUeUQgUj5YZA6X4nhlvPlzAqn2DnYlrgG1rIWEpPu2d6G8PPmx7rkQ6zcRFM%2FA3h5WIQKdTnbigrApj9KJOG9fbHCp0Nauy0E3d%2BeIeKESsznBpyWwjyJSgkZtEB\"}]}\r\ncf-ray: a17ef599f9b6569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20180,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-17T09:19:36.575522Z","times_seen":137,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.348Z","timestamp":1783512349348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:01:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e9fb3-1397\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FKBr2QAezgipf9BEs41GL%2FlcFv8M1%2FOV6nCi3qcMbhR2dUxVj%2FwUO6MsG1%2FANK5BfISfL%2FH1nRMwN%2FFsNtgUGAtOrU7HEaH6si9k1GXEn4KrsMzzWHgXQ1rX9py%2BkAipYbN\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ef597697e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5015,"size_decoded":2617,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-18T08:35:06.289501Z","times_seen":36869,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.349Z","timestamp":1783512349349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:01:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0e9fb3-1641\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWgwy6YddJ9fQfVAKZeOThtp2eopRW9tvYXCVyrVX%2B19UfM%2FW6BSdWvoa7pgyons4Zj8M3yKoCERobDJ4BjAM8Owkju8zUjllVJoZbT%2BRmcwjw4hMdvgY60PZlw5Igzb152N\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ef5977980569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5697,"size_decoded":3248,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-18T08:35:06.184641Z","times_seen":36062,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-includes/css/dashicons.min.css","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.334Z","timestamp":1783512349334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 07:02:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fe09a-e67c\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RwsT37Ibsfi1JomV5ilVP5LDeg9JRdkTTqHC4SC8zUWK8Cv0ODslQGUlE167PNm6ZqlbCo%2BsWFcTLrqpb%2BsMqETJVzUetEl0oDgNBaYChWiI5a50KaQFiRs7MfNkufdR2qj\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17ef597597b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59004,"size_decoded":36519,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-18T08:43:06.917097Z","times_seen":62084,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.762Z","timestamp":1783512349762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxQLAk0dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\netag: \"68ff49ca-4c08\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BHFX%2BlItTO0MlnOPso6wHsUVtNt%2BE7RM3YOPLVDwf1GpJ9bJwqK07Eictf2u38RhN1oopkr8tb6IBBQdPeJUzjDXUsfD9gimkz9syB0i4izYpVxRUAbE2jYR4kHNXvoEo3L\"}]}\r\ncf-ray: a17ef59a09b9569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20250,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.345Z","timestamp":1783512349345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 10 Jul 2026 12:05:49 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8YtdNPLXLE9Zfu8WqOeQ8s0B3d3YuVvAIYcHC4lTxAzeCOvn1r3sB3qMlfsMMRaPj0EjP4xvb3qw6S5KJmUl%2BUZItlAWC53bRM0mz4o92TjcalBiM7IGI6TV%2Bw31aQaY88G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\nserver: cloudflare\r\ncf-ray: a17ef597697d569c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T08:42:33.616506Z","times_seen":399381,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.559Z","timestamp":1783512349559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mky5cij%2BwsZ1ODD%2FdcD%2FuQOmSZA9ctdTwrMglHBJOJz0IGcmYrrj5ouiO2z1xX2B4KDW6qG7E6PmrgUV7vxsDCioq6HWiZdsuzq9M1uFowrN3tNhlf%2Fhh4GmH1Fs0ZMD9vwb\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"68ff49ca-df\"\r\ncf-ray: a17ef598c9aa569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":929,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-17T09:19:36.586377Z","times_seen":37,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.356Z","timestamp":1783512349356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wn257Zc6K%2FIVTT7A4vPGCmDq9EP0lViNFHhIFEMyC1Lqqf0AgjUXtDPiFfX0OvgsntS47DXZQ%2Fq3TkIqIoitGGU2200pcxpdhbCcbhAtv0HLeKzcicvKFFEeVsFbBP7eNSG7\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"68ff49ca-3d8\"\r\ncf-ray: a17ef5977984569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984,"size_decoded":1074,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/rainbet_logo.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.363Z","timestamp":1783512349363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet_logo.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:05:29 GMT\r\netag: \"68ff7c29-22d0\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPLeC%2FWLV0UHJROlsewbGZyrEYiXsPCGcKsa7mboXTaVPuana8h68%2Fe6OU8EuDhEKYJACGHrmNBvYuzVIS3IGGmHixRiLhSUwqGWUGyyBm6hdWYGU4LoKEGR4AdhsTZ3zl42\"}]}\r\ncf-ray: a17ef5978988569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8912,"size_decoded":9685,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50a986f01111363eeba08778a4ff586a","sha1":"196a47bb332ef16b51b2bb864dcd15b0b0469931","sha256":"25324b8dd37c42c54be379505840c7fbd684c4d43787b9cfdd24730b68518423","sha512":"890ec5531364a25d795c933ea81b8543cf353a6fda5cbdae8f5f388a21e1c245fd4bb71d4723642605863ebe2a0335155232e5f73153263ecda4e4b5477b5ab6","ssdeep":"192:7jOJyHnVDDyfxsPsatWS5IJ1/l4vrWxpNk2paUvelwAJ6S7TFIqU:7aA9yJqc/8ripXptvelwAJ/W","tlshash":"4a029ed2956f28c2fdad9d39de2052e5723c6ac445f20f510368a9b28dd22c8aacd553","first_seen":"2026-07-08T12:06:19.255246Z","last_seen":"2026-07-08T12:06:19.255246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.628Z","timestamp":1783512349628,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T08:43:08.114451Z","times_seen":17333644,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/cropped-0x0-1-32x32.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.736Z","timestamp":1783512349736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-0x0-1-32x32.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxQLAk0dRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Oct 2025 16:35:41 GMT\r\netag: \"6904e55d-15c\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzPADsm%2F9YiAER0bJ3Hr71A7kXCcdLQDGIgp%2FCbwZD17DWD%2BT6JMer9VQvXvStgul3c%2BT5e%2B1fE6M2nox%2BRsu%2B331rKLWtWWpbdRGB7%2B85EPLuzOGW8zNcyJiDTpGqY1lKBk\"}]}\r\ncf-ray: a17ef599d9b5569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":1134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d859220647bab57706164305d5a4e81d","sha1":"29f8228557a88c22a8a3771fd421cbab406fac45","sha256":"c14e1535f2c2feb238ca304c80e9dd94a75816622ee6c6672a2199b920a44df4","sha512":"077d9a49bbc423204054c0955ed0355d7f7e782aae666f91d1fd429fb4507b9e50d1225bf7e369a6005eadd1ac7a6caeaa44320f3b5f97aed0e20728c7a2f7ee","ssdeep":"","tlshash":"22e0c0ce33118d59fde29c2a1b163f22457406dace951381e4f011f510e67121035e08","first_seen":"2025-11-01T17:37:40.368317Z","last_seen":"2026-07-08T12:06:19.256064Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.358Z","timestamp":1783512349358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rzpSOI6rsI3HyzLGLzrxuSY4laSBd297v4OUH4pu6%2Bsl3kEahcY1ISUWC0dyhcCB%2FVpdmWL1bFQ13InB0FpdbYraFlQSJBb4Xm9OxHEvkkFc4J6I85Yb3p8jJe87AJNERRT\"}]}\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"660dd398-256\"\r\ncf-ray: a17ef5977986569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1120,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.373Z","timestamp":1783512349373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 09 Jun 2026 13:49:14 GMT\r\netag: \"6a2819da-3b60\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q78%2BPeDW4X%2FQD8ue32rGCrcGm3KlQ0gmOvmNnUUeU0U2skrwQnV5RHDQizBVJ%2FxH2AQKGlVU%2F1rEBkon2%2BI7TeuMK90DBwDt1FTju4n0hU57w3WxHi8Kt1Z32xBqhgCZ5%2B7u\"}]}\r\ncf-ray: a17ef597998e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15200,"size_decoded":15982,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a29908cb688d388f9d676f2df3005a","sha1":"08fd835f8877b50dfa0bf86c7c7289bf80bceb19","sha256":"e5387df49b389f37e9edeb9f2ad57bf1a905bde34505abd4b53abe7484104207","sha512":"5e8b9b2aaf1e4add5ab7d7fd51938b68f06bedbcc2fb14e60ab325e939b7ceb515d979ab18de9e276618df0be209cb4408b775264c1c0cb74d7da5acd852abaf","ssdeep":"384:VwT6fMoelWQoVm1B91IqkeutDRdzIww132gLcpznBGrJOov:KT6cWQoIWeMDzTw1voBOOo","tlshash":"f962d162361e5d30f093797ab2c3716f2329dd21a3794780624e54ef1bc8de20e885f8","first_seen":"2026-07-03T10:53:35.712019Z","last_seen":"2026-07-17T09:19:36.555317Z","times_seen":8,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/11/abhasa_result.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.388Z","timestamp":1783512349388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/abhasa_result.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 09:50:00 GMT\r\netag: \"69087ac8-bc2\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BPdHpZ%2FWsQPl89OM4owlkUFzdIAVb2MCddV2WkK9N70iD1BHcHP8erjMWQWVQ9WGT8%2FOFyok%2B3dQ3ARkZtj6HGR%2BJDcYJgRpsQZ132gBVNmBIGz5GpJ3pdE6shlNej4TCFZ\"}]}\r\ncf-ray: a17ef597a99c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3010,"size_decoded":3786,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0c81a03d53a5ffde6b89924986bf992","sha1":"27f89a315adf2e6907827d38e92fc39b9afd0e69","sha256":"0d04c971c223694c615baad5e6a464f605aef71631036413cd1358e2cb981950","sha512":"daf731eaef417fe4af6aaed40a7eab85437c140fb3111ecacb2ad1e2d485e6e73ce7ae9d005bff3d0d1e331aec2f170c5dd0f6bbf837a8b715748d1f89d4007a","ssdeep":"","tlshash":"f9512c04bd026611ebba74187e855bd35bb1408f5f601d22eed108f6d8ae7289b3bce1","first_seen":"2025-11-01T17:37:40.399909Z","last_seen":"2026-07-08T12:06:19.258158Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.351Z","timestamp":1783512349351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-30e0\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkMfD9M0kQx9PFhReUhhdbJ0UoOGZjoxJPQohWDC74dKQvBz3mVqcAVg8FNdHj6lpOCqR2DNvHIvKfWXwvW1H%2FDELp5p6xLvwRKbShw%2F511hYD%2B7eWb9N5cdalUu5%2B9BL7ge\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ef5977981569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":4315,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-18T08:42:29.905589Z","times_seen":217087,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.353Z","timestamp":1783512349353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-348c\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUL09aGzEuanZ6pKWHwhU0mutv7UUqO%2BiRmF8ZjkGHapBRq%2FYzV8T6fdlMGUB5siOOTl8hqvG0LElTv21mGN2Pgn8GIOnfGkvBxvyjxBDUwFA5fcc5lKZH6hhb9%2FAe661D4E\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ef5977982569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5075,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-18T08:42:29.92035Z","times_seen":224732,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/11/gamcare-logo_result-1.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.389Z","timestamp":1783512349389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/gamcare-logo_result-1.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 09:52:14 GMT\r\netag: \"69087b4e-7ea\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyUWzJp0IwQBE6UmOlXJ1rR6058ZIUGFJUvu7nen6vsg3q8ZDy3rzsg15RpVN%2Fwlaplhba82gb8Gd8hljj1VXPecIIb0cxqKkTkKY%2Fui2xtOdfQOGAYS2fze8KgFCx3jVuh3\"}]}\r\ncf-ray: a17ef597b99d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2026,"size_decoded":2798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b176b276bcf2bac90af93097fc46ef8","sha1":"e86b9e247e65de20a2072a396fe82a9bf6995122","sha256":"abe35ce78bcae04416e60c6f868c8489d34261b6406824fb8687ab8976df0617","sha512":"5d7a739bd6849246eb31079e5f08e2d121bb4a29ac2bcfbf5e7f9a9ff2146dc5de7baba9108e3f94ee0c196e5a3cdf0a9b9d5053ebfb30debd7daecad8baad14","ssdeep":"","tlshash":"47410af7afdc4205662d351d97ba125045275485c464047c0b257b88bd145acecf2ecf","first_seen":"2026-07-08T12:06:19.260212Z","last_seen":"2026-07-08T12:06:19.260212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.333Z","timestamp":1783512349333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:13:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c0b5-d0f\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MmbZLDqIEjKuX0R7SZ4fri6bYj49q0BF%2BdxhCHqarspmat95AMasV4xKQPYiR24psNubwz0KVHkhzNpGIblkCMk0YsNhjMus1uzjysEumGbQZCar%2F4PS1F6QhCqxuA%2BtClAX\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17ef597597a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3343,"size_decoded":1605,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-18T07:57:36.438301Z","times_seen":4463,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/logo_text_black.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.366Z","timestamp":1783512349366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/logo_text_black.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 06 Apr 2026 14:49:14 GMT\r\netag: \"69d3c7ea-d8c\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8REYv5%2FHuKuHb2zO88om8KTVU2Qt7vBB3yA9pd%2BAVv4%2BHDv8vazpXsWRJRb0JHRArsElcbcnrnoAPFMy%2FTjpgz8mM3NEZrVRuMwXxCHJFs93%2FejCKtWRxASSvKKHn6rIaYW\"}]}\r\ncf-ray: a17ef597898a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3468,"size_decoded":4246,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52e4c50897d4be09365267e932aa2c7c","sha1":"ed79047b639b5b156fb42fae09fd52cb88c460cf","sha256":"8ce49a702c40bef4886c2d2b63a27cb1c7c50ad221dd51344b54ba43270882f6","sha512":"14af1b534f185b9cbd6578ab5371508a49646536f9c3875256733a5725e7027333bfddc32e972262d8f0ccd65485c66ae330883b506912048914e02bfeafb107","ssdeep":"","tlshash":"74614cc293643b2cea566936f9c01f40df19ad27d96f464fe393137514895d02f1404e","first_seen":"2026-07-03T10:53:35.721851Z","last_seen":"2026-07-08T12:06:19.26159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/5d6f5860-54a9-473b-8fe4-04a4d10147ef-removebg-preview.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.378Z","timestamp":1783512349378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/5d6f5860-54a9-473b-8fe4-04a4d10147ef-removebg-preview.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 19 Mar 2026 14:53:14 GMT\r\netag: \"69bc0dda-3a24\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WskmeR%2BDP5ilMu181ajfFvK5DbfwKsvzHFAUaT6R45xmA9yCe%2FAz0zP%2BI9WJixdJZXwCEhWE9UBiC6NDAnBVgiXj7jo3rLMTt00gWGQbn7syOKmfa3IKX0vD42XJc7XXF%2Fqv\"}]}\r\ncf-ray: a17ef5979992569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14884,"size_decoded":15662,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09848b9086ae235109cd7a9f9d4afb9e","sha1":"fa0685a7eca11590d8a4dd011135a1ddd08e37ab","sha256":"0e26f0a5bd31dddac71004a08e3f03ff53130fa2c2af58d361f4eead9ea93553","sha512":"85d7a49f419050b6f5161cfabec2762c8b894aaccb363f3f1f3ca2f749a719c9e550bcef3528c230027816b154642071d7166d4417edeb0a37a2dd364e5d493b","ssdeep":"384:sCCwTchKBYuw9eKFY5iWWultjHHZ9+Crbkn/kJ3Hpsx0H6ZpGU3l:sCzTcIw3wiqtjnZ9+Crgn/kJ3Hix0aHr","tlshash":"7962be98a33cc2bbd3815b7c84225d78ebb16455067c0f34edace3f10bba56f0a591a4","first_seen":"2026-07-03T10:53:35.725469Z","last_seen":"2026-07-08T12:06:19.262551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/18.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.387Z","timestamp":1783512349387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/18.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:27 GMT\r\netag: \"68ff83a7-7a2\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K07sF5439ghFWdmJZibmAuRxzulSJ3fTLTABo1TdYg2CooKkiTVX5keMoXFKfrI%2FekpOIZA%2FBUgfoGRchbp7GkF7NUsnSNCjKuknIgGi8%2FDZ8%2FId386AmRjXkODpZA5jdOdc\"}]}\r\ncf-ray: a17ef597a99b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1954,"size_decoded":2730,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6479785833d2c0a74c79731a2959b0ad","sha1":"118b80713cd039cb9db98805d55acebdbbbd1625","sha256":"9fdd429bdd3331f700fc7458354f5c826192a9099dd3a865f84d28044f07c7be","sha512":"1258f7447950c457d36756d73678db5309bb97bdbeac91a4ce8e16727cbead44ea7cbf4fa0edbfe78fe71b617d020f433c5a4e4987fe4472fcc1de9cc5a7e2ed","ssdeep":"","tlshash":"1f41073aa7086b8cc111303424d17fa3ba7ef4f383821b2567c242301ea64c272ee583","first_seen":"2026-07-08T12:06:19.263519Z","last_seen":"2026-07-08T12:06:19.263519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.761Z","timestamp":1783512349761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxQLAk0dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\netag: \"68ff49ca-4d38\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsKbAOwdjVZUZy%2BY5JD9UZnZeZEmNDXou7LT42ffH6yAqO0G9pu4lDIzJ%2Bnb7%2B0Z4ZG%2Bma0%2FOZe3kgokrMDgIjp%2BELJAYexT6mhEvFr1YdEpGAcPV8j%2BCIJwUzF9j2qHqimi\"}]}\r\ncf-ray: a17ef59a09b8569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20562,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.625Z","timestamp":1783512349625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\netag: \"68ff49ca-4c7c\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7sJBVf6OtcG24DC0VR3aOmGIkVdfAR4hJOe1YcN3ZAzM9y0ZV2XdDZSk2RQbLE6UoLwB0%2BCS72%2Fn3o3o9ppyIpWQZhu0c%2BTMRW1FVw6lPAp2NcCCFrX17Ue7SOxCINVH28g\"}]}\r\ncf-ray: a17ef59929af569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20359,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/stone-vegas-casino-logo-12.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.381Z","timestamp":1783512349381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/stone-vegas-casino-logo-12.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Nov 2025 07:25:26 GMT\r\netag: \"691c1f66-1c66\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5R9HGkUdkAFYEfATMlywxuI0sX1G71Lxht5xdbH9yOjKtOLyk5V0djMtYEfTac6E1DgEDmIlJkl6ca7zbTdmxgBCBl7LdgnM3KTzJMT2gOxhXEWAg0xywXpAz3O3RJPd7jFi\"}]}\r\ncf-ray: a17ef597a995569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7270,"size_decoded":8039,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0c8d51b2e1500f278ba13c8c8c6392f","sha1":"4a380061af65a5471bdc309414d4b891b88556b4","sha256":"ad69030b9d6cee5826b5027921abb64f5acd3f1ed125d66c9cbb8ef7b1d90f7e","sha512":"924a6d5ae40a2a9142411f4d63919d3d260773622ea5071db24df9a833eb6f72af38ba04b1d653c19be3f6709b5d2b2e7be88e94a1efd99d045e271f57b3b48f","ssdeep":"192:ywTyaWLM6QT0vMyZ5GDo2lAzS2WX5FBC:ywT3WHEqUsjWN","tlshash":"d4e19d9f8be0f43be40070321610e78a332a397473627fe56180d39eae135b266a7424","first_seen":"2025-11-13T03:52:08.16274Z","last_seen":"2026-07-08T12:06:19.264929Z","times_seen":4,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2021/06/gransino-casino_logo-13.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.382Z","timestamp":1783512349382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/gransino-casino_logo-13.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Nov 2025 07:25:27 GMT\r\netag: \"691c1f67-2df4\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvPOcbyr2od6ddDj15WdkjR9KuST183CJFgXB3eB2Kfa4BR%2F0lR60Re%2BLQpedID%2Fst%2FYitEh97lNJV69W313jCat%2FiL9zZXbKrmM7l6IunQOw7RuFE1DyslM%2FIh3W12wW8uX\"}]}\r\ncf-ray: a17ef597a996569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11764,"size_decoded":12546,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de4423a831842a22de1885b71e228ab","sha1":"c9bed5a72e642a86a69087fd150cb6db0c0135cd","sha256":"457a0926d55c930b17bd92fe88049283a2f53f8b39136fcb5fbbcb23a0b8b176","sha512":"7ded7a6382ed74a24188b344dce13e47e154d4faecba1376498af60ddb1b4f84cd2a77214664807eff4639e1e6c0d9d8c75a252956611ecaf1ba88574abcb71d","ssdeep":"192:HwT88rZHYe3PDSIhmR/VSRVOUSsPvpGftFGIfX+6xGhZ1xASU2:HwTNF4e3mIa/nUtPvcfbGIW66D","tlshash":"0b32c057f730ca4ccb0943331d559f849b2a2d366227cddd9894e8d325173e8ae6aa33","first_seen":"2025-11-13T03:52:08.138651Z","last_seen":"2026-07-17T09:19:36.580705Z","times_seen":14,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.365Z","timestamp":1783512349365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 27 Oct 2025 10:30:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff49ca-5fe\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFWvSIDXvBqos2petYOgq6u%2Ft43%2F7L7tkTytpMeg2ZaNlXBbLPP%2BiJ6bv1DmfJQRtVYJfGdWIAoWxBPROHG8nnmhnhTR%2F51nfMPtyjjUrYe%2BkdVpzlL5mEJw%2BzNpEgLXNx3Y\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ef5978989569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1535,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-17T09:19:36.565344Z","times_seen":43,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/gamblers_anonimous.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.386Z","timestamp":1783512349386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/gamblers_anonimous.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:29 GMT\r\netag: \"68ff83a9-53c\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NULGoLs1jCWHlEi%2FPLaII64v3OmroY6kWpQ7lyucf6pfo%2BVe%2Fu0ZegbtgBM896ypIQ6ADWeg3DNrO5NTnEsYHj0VKPK9Ag7L3hdPtvBKLa7mDlZdoY%2FqGEohUhEntlbG%2BAwj\"}]}\r\ncf-ray: a17ef597a99a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":2118,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50ad7aa2a6244d35f371d54d3477a3ae","sha1":"cdd34bf73fcae8aa7ce6c16a5633a44e6d1812af","sha256":"1bfed5635fe383c1397d0c1a7c1b1e6b9645b9be74d7d0f55e38bd316263e8f5","sha512":"c54b64fb0f7432010cbfbad0a14bbd6bb45664379fdade280db06f1f395b876de28c58909fbf572759be27528dfab55a17963fe9d9ef5d84343efbd64a97aed8","ssdeep":"","tlshash":"7e21b735a35c4335f04837b820e01b02e3e87b15d3679f29834046755b484e7e4a9317","first_seen":"2026-07-08T12:06:19.26685Z","last_seen":"2026-07-08T12:06:19.26685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/11/niegram-e1721151658143_result-1.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.390Z","timestamp":1783512349390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/niegram-e1721151658143_result-1.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 09:50:36 GMT\r\netag: \"69087aec-9b0\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5R1pw1WCbYe06Hvnr4FmZlzM0gr8xdtSTP%2B7CZypjQAywDVx%2BsOkhg%2F5uzqmjzZsAnlP9X%2BAtGxXZpRMqQFvn%2B0nz4z%2BqoMKmmy%2FLxSPnt26bSuEpDCuzz6lGBNhnCNibkR\"}]}\r\ncf-ray: a17ef597b99e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2480,"size_decoded":3262,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"777c17ad4c4fbf2e756ab772118ac32b","sha1":"64df3aa3861e07416d837c5130c9e856dab650c7","sha256":"fc371a01ba55b6ec0f49a8fcce8e3d0e994073cb887d4bdf1ee2b389cf758aea","sha512":"8ee89f76fd679356ec65b4049759c8405b072e3270d704f679cbb8d4a3f5d3c4d6f068a6f1cd611c66ba0b92ac3e4777b8bd3a7b2cb82149dfcd505ae3b0beef","ssdeep":"","tlshash":"fd513d19b936d795b36b78e2015f3e5ccb11750679095aa50c0f97e1b4701c4b2ee20d","first_seen":"2026-07-08T12:06:19.267777Z","last_seen":"2026-07-08T12:06:19.267777Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-site.com/wp-content/uploads/2025/10/cropped-0x0-1-192x192.webp","fqdn":"rainbet-site.com","domain":"rainbet-site.com","tld":"com"},"ip":{"addr":"172.67.157.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-site.com/","date":"2026-07-08T12:05:49.735Z","timestamp":1783512349735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-site.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 00:18:02 GMT","end":"Sat, 19 Sep 2026 01:17:55 GMT"},"fingerprint":{"sha1":"89:24:28:AA:3F:03:7F:18:A7:4E:12:43:F4:8B:6E:F9:45:A7:A2:62","sha256":"C8:A2:5B:BB:78:C6:E0:E2:9F:CF:BD:46:91:20:D2:99:05:36:B9:F3:E0:FD:5E:E1:13:0F:6A:69:7C:88:D8:89"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-0x0-1-192x192.webp HTTP/1.1\r\nHost: rainbet-site.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-site.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxQLAk0dRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 12:05:49 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Oct 2025 16:35:41 GMT\r\netag: \"6904e55d-79a\"\r\nexpires: Fri, 07 Aug 2026 12:05:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8vZlwr%2BwHYVjPxU77jJRuW97XiRtlVyE%2BgZ2vCbNQgIAUhupcPkoFlVMt3D%2FbBRC6fLaO5rDxrdpBPy%2FMmO4%2BP6UE6cJMJ5Bd40hDDdiPjKoRtYz1rEAICxUUAXr%2Fy6yclI\"}]}\r\ncf-ray: a17ef599d9b3569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1946,"size_decoded":2729,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"307f3c369737347d7e5c88b4d78b7378","sha1":"66d787d553361db25c8063a09685d4550bfaa434","sha256":"e20ee22fca3c6c38c816630dbde7b6b352fa1b185610ab83d23266dd0672f3c9","sha512":"086afc507b1c6a0aede13694968fe6af45e2f3704211503971fdb14dd13afa9a6a49c76ebcd5636f49cd1b1fa824512828b5cf1d05cf5ab8b926de6031c9899e","ssdeep":"","tlshash":"5f412c9a51b44c64614ef52a9c26ff726f990021187009506f60bfec4510fe8fd02a3b","first_seen":"2025-11-01T17:37:40.35477Z","last_seen":"2026-07-08T12:06:19.26863Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet-site.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}