{"report_id":"6f43d5db-0b4c-4ac9-80f8-e00d8dfecae3","version":0,"status":"done","tags":[],"date":"2026-07-22T10:10:10Z","url":{"schema":"http","addr":"rainbetcasino.sk","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"title":"Rainbet Casino","dom":{"size":4385,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (410)","md5":"e3a2c2ab8c4b4433987c3be4a1d20b37","sha1":"bf9762d5f97ffc21485371fb04d40a0ed37cc740","sha256":"0ab247b8c437e639a7afaa4d9525f1922dcfaeff477e1f9b6dfabd889cbc21bc","sha512":"c08bef1e444e55c021c58b8ec35cc81be5d1f79d147989f67058cca9f132aeee3d4155ca7ba9ac12688ce618c59066b5ed8ed5c0d730380ab4d0dda78ec8489b","ssdeep":"48:7FUfpjVW2pLn0e/XNlVjDenQGtANgHTGraJ/JaYEtR+cSwbbbV/i9Id9rD:q/NlIAEkPPh","tlshash":"2b91965380182d3f2312eaf58999e504a68ecc13ce1f549576fec6985ff3f92042aa4f","dom_hash":"domhash8c1ca266099311b0b1ce1f9077271de3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasino.sk","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:10:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasino.sk","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"2026-05-12","domain_rank":0,"first_seen":"2026-07-22T10:08:25.616086Z","last_seen":"2026-07-22T10:08:25.616086Z","alert_count":30,"request_count":10,"received_data":97562,"sent_data":6211,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cddcefd57d1f6d3005706e238c220cc3","sha1":"c4c4ee867a8b0ea7db8d097e6c8f6b9291cbfbe8","sha256":"1d42f20e756df7e150c4587c84b848e01d34b35e31f4f7f47adfa7b021563288","sha512":"59babecf571a5aa5f8519b5893ba196a2b2886304c1b52da9577557344c86ec39f275bc0778713736f898d503555775e899479ce752647b94252188c77770673","ssdeep":"","tlshash":"4af02bb3a7512c32029fd7eb7089cf6970625643ed05004045758a286a32dc35166e6b","size":528,"data":"","first_seen":"2026-06-07T19:47:51.460148Z","last_seen":"2026-07-22T10:10:11.257513Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-content/uploads/2026/06/cropped-favicon-192x192.webp","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.619Z","timestamp":1784714984619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-favicon-192x192.webp HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9074\r\nlast-modified: Tue, 16 Jun 2026 14:56:36 GMT\r\netag: \"6a316424-2372\"\r\nexpires: Fri, 21 Aug 2026 10:09:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9074,"size_decoded":9418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cade65f3aaa88e88581d0739b2e4ea6","sha1":"fbe474f56427376173c725bde058c06c53cbbc40","sha256":"6b1ff21bea21d9df37e29a6ba62d388cd4bc7352f48476550723eec0911b3438","sha512":"9800e4d2c7e5e982ff62fa16d745e91d06cafdbad9ee9571b3cee700543514b88b012c4526fb5130d7646b151bc1c026cb8eacdbac272bdc0d57e84da8c459ac","ssdeep":"192:p3ZxLkMTOTcNS65FipaR6gZxKmJMWIg4vH1BMiUl6oZ0:ppGiMcNS6/damJM7T2s","tlshash":"0a12d070b6e12025a6ce71a23012d008309a9e4a19cc4ff490adfad2b6dbb47e6d007d","first_seen":"2026-07-22T10:05:46.286973Z","last_seen":"2026-07-22T10:11:03.205307Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:09:42.836Z","timestamp":1784714982836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nset-cookie: pll_language=sk; expires=Thu, 22-Jul-2027 10:09:43 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T13:24:20.356579Z","times_seen":17450888,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":0,"dns":90,"connect":16,"send":0,"wait":638,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-includes/css/dashicons.min.css?ver=7.0.2","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.531Z","timestamp":1784714984531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.0.2 HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 08:51:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6084af-e67c\"\r\nexpires: Fri, 21 Aug 2026 10:09:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59004,"size_decoded":36087,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-22T13:42:31.638351Z","times_seen":63173,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-includes/css/dist/base-styles/admin-schemes.min.css?ver=7.0.2","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.539Z","timestamp":1784714984539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-includes/css/dist/base-styles/admin-schemes.min.css?ver=7.0.2 HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 08:51:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6084af-e48\"\r\nexpires: Fri, 21 Aug 2026 10:09:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3656,"size_decoded":1175,"mime_type":"text/css","magic":"ASCII text, with very long lines (3656), with no line terminators","md5":"b9e1caf53e3c3b2d1a375b3b4016ae69","sha1":"12bbe0fce795ea2c7782f976282eb5a11bac6042","sha256":"932033b8cfc5596f639dbd9fe39a3600e3c18b6020e9151aac76336f28e9f376","sha512":"7db938f9efbc62569be8a82a35f01e3602d7c76b35c272af8e971f795f6c1a6c54776ddec3c8ab08152451089d7f17610b8e3c8a76f82647593b6f790c89e367","ssdeep":"","tlshash":"a371b212fc201327302303ee5aa5bfbd07d82764774b7b94f89b2a88f8465925c0e793","first_seen":"2026-04-13T14:02:39.025578Z","last_seen":"2026-07-22T13:22:30.030423Z","times_seen":753,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-content/uploads/2026/06/cropped-favicon-32x32.webp","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.620Z","timestamp":1784714984620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-favicon-32x32.webp HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 698\r\nlast-modified: Tue, 16 Jun 2026 14:56:36 GMT\r\netag: \"6a316424-2ba\"\r\nexpires: Fri, 21 Aug 2026 10:09:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698,"size_decoded":1040,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e60d1cc4faa7952eabddcfb5731d1496","sha1":"8acfa3ad6c2ebdea922da6c238dee0aae464c48f","sha256":"58b37350fecb75838accf010f918ffcf4e33d35ba2701c86657df39ab5a9620a","sha512":"9607ddc8fddae46b52d09348353e7affe9125169786c07fa3cd6c06ca0d51496eea52dd8b9bf9dc11c74da3e373d268f66ccce662cc6f81ea66175936ccb6699","ssdeep":"","tlshash":"e40199fe439a5456defe6d105354374698ae2e203578052b350771b946d7fdf7844820","first_seen":"2026-07-18T17:28:24.598785Z","last_seen":"2026-07-22T10:11:03.210486Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:09:43.615Z","timestamp":1784714983615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pll_language=sk\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nset-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4896,"size_decoded":1912,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (410)","md5":"08ecd92f43d561eb62cd50cd19213bfc","sha1":"af16a2a9f5e4636d716886dd08d8f7efe081c3f7","sha256":"d43ce849a546eb88ea8cc646e0ebc5f6ace0f81586e548d7ff4389762b1a6931","sha512":"fc6b4180f0066d157f8bd3c7cf5326c29cbc256419fbf7fc3962af74def8a652eb97abac16641ed4ac33f222e22bd9b3f1024c0b3fdfb2921593ea12c49fe481","ssdeep":"48:HdbVQ2e0Nm0DpnB6ANgHVGraJ/WO0+jL66tXycqEws7V/i9Id9rn:a0NQAEFTrJ","tlshash":"aca19553d0182d3b220a96b68d85a908fa8ecc138f0f505179fdc5585fb2f52453bb8f","first_seen":"2026-07-22T10:10:11.253775Z","last_seen":"2026-07-22T10:10:11.253775Z","times_seen":1,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-includes/css/buttons.min.css?ver=7.0.2","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.533Z","timestamp":1784714984533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-includes/css/buttons.min.css?ver=7.0.2 HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 08:51:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6084af-1fd8\"\r\nexpires: Fri, 21 Aug 2026 10:09:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8152,"size_decoded":1989,"mime_type":"text/css","magic":"ASCII text, with very long lines (8117)","md5":"35233f445abd6d39ff61ac35f7417676","sha1":"d3c7e85666c4d129d1e9ae99b4f8ff3a976435b1","sha256":"dd8f0d50298e6c2498535cc891a7b5459971471eab331700af766c2f5ead2e7f","sha512":"fa11c2025cf109ef5dbc7a0d076d9f44dcaf63aebf583dfeaadc14884af79a435153d608c2b402ccd31094d9f3ab585f126663fb25a5a3b38787b5fc63e52a8c","ssdeep":"96:lBIi3eNQxABppWOzyLTODCRHuNWXvtzF3HohBmjSlOI126n7Te7koDBXHd/6O7o9:bc/j8iVpky9dLd","tlshash":"4ff1ccebe411d32a3e1263d887626eb9b36bfb01646537d1fc4462e881c50b13c1da9b","first_seen":"2026-05-16T04:32:24.621665Z","last_seen":"2026-07-22T13:22:30.029367Z","times_seen":1344,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-admin/css/forms.min.css?ver=7.0.2","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.535Z","timestamp":1784714984535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-admin/css/forms.min.css?ver=7.0.2 HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\netag: W/\"6a608497-b52\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1582,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-07-22T12:36:15.650892Z","times_seen":7262,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-admin/css/l10n.min.css?ver=7.0.2","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.537Z","timestamp":1784714984537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-admin/css/l10n.min.css?ver=7.0.2 HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\netag: W/\"6a608497-b52\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1582,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-07-22T12:36:15.650892Z","times_seen":7262,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasino.sk/wp-admin/css/login.min.css?ver=7.0.2","fqdn":"rainbetcasino.sk","domain":"rainbetcasino.sk","tld":"sk"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F","date":"2026-07-22T10:09:44.540Z","timestamp":1784714984540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasino.sk","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 08:16:50 GMT","end":"Tue, 20 Oct 2026 08:16:49 GMT"},"fingerprint":{"sha1":"BB:E2:C8:C7:91:DC:67:8A:94:C0:CA:F2:AD:5B:E8:B7:84:0A:D7:F9","sha256":"79:F4:39:E4:E6:82:49:8D:F3:31:3E:66:01:9B:C4:4F:8C:12:EB:67:F3:AB:9E:EC:CA:61:77:69:D0:00:39:55"}}},"request":{"raw":"GET /wp-admin/css/login.min.css?ver=7.0.2 HTTP/1.1\r\nHost: rainbetcasino.sk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasino.sk/?password-protected=login\u0026redirect_to=https%3A%2F%2Frainbetcasino.sk%2F\r\nCookie: pll_language=sk; wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:09:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\netag: W/\"6a608497-b52\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1582,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-07-22T12:36:15.650892Z","times_seen":7262,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasino.sk","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}