{"report_id":"7158fdba-729d-400e-9f8c-eb041309f2b8","version":0,"status":"done","tags":[],"date":"2026-07-22T10:12:08Z","url":{"schema":"http","addr":"rainbetswitzerland.ch","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"rainbetswitzerland.ch/","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"title":"Rainbet Schweiz – Offizielle Website für Casino und Sportwetten","dom":{"size":174815,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"d7ebee1cf6cde7cdb5e356f74771b14a","sha1":"8cb49717f545d5fcfc051d17692cebbf14e6986a","sha256":"38db72f6114c50dd4b082a82cac0a26187646afab3891234a41953e55ee9847e","sha512":"32a5a3d141d953bb621862530c65daadd315a558db63298b3d1dcd28889e557c37acbcfac6a023a6a5c9b084b250e55815171c341b7f5d6cf471e66159059a17","ssdeep":"1536:zjSopPmypeNoO9hnn3wfPqz9/dewofgnJLPr25R20zsWwh0VzFeF:zj3pPffW39/ooJ/qQh0XeF","tlshash":"a3042b6742d560a9322bf37d86adb748663ce003ce4659d9bdded0888fc6e900977b0d","dom_hash":"domhash4e16adba54075e8d1c978ee7a8bc8351","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetswitzerland.ch","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:12:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetswitzerland.ch","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-22T10:04:28.206081Z","last_seen":"2026-07-22T10:04:28.206082Z","alert_count":162,"request_count":81,"received_data":1287554,"sent_data":46657,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":1,"received_data":26013,"sent_data":616,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetswitzerland.ch/","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff21218738c991f5db98d244f1134967","sha1":"453f0cee0b2bd1d159fe38a3baf8f87e5f6a177c","sha256":"f4ae3142f0141a8266debfa59327dbd859a7c60c9c1fb1d510df2e8e5b0e09a0","sha512":"b9dc06fd099212e2273e9b1ebb3a9ebced454dcfccbcfa14d5e872ab8dc5fb5c9acb925a2955275c572e5bd5a475b8c1ddb99fdb58fd4650a53a29da5a627d79","ssdeep":"","tlshash":"29f0e25812f33176017771798b9f5584bb2b5493604bdc6a3eadc6898fe44640472ecf","size":506,"data":"","first_seen":"2026-06-26T20:50:38.984626Z","last_seen":"2026-07-22T10:12:11.546519Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"79e3988a3ec12edf99816caa5006223c","sha1":"5fe144ae90375ed2f2f323d64d93450f101e0366","sha256":"8ce75977a19eec627c14f37e77ae3858fec6de0e8e844b237ea6c3c625f396ff","sha512":"6d8e1b030360b88a210d815d27f0de577c8980b6bde84cb7da9843a5ae99aa515c44401bb8cacdf00ea39cf190b127edcf37631f57be747b65017dd80b1130ad","ssdeep":"","tlshash":"3a31bc1931a1203240aff53e67cba24a7279e04378468e293d0ccb461f52eb199a5edd","size":1571,"data":"","first_seen":"2026-07-17T09:18:25.980282Z","last_seen":"2026-07-22T10:12:11.547124Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e65ff90af6af95c210de7add634edd23","sha1":"d22ad241fc3301b3665a7c0aea8dff01e8659beb","sha256":"aacc333143e0930875a94beab9c823021fe684d60429a3e0d7bfd442623fa468","sha512":"296b2babdb9208db63d11fc7db6f024b4a48d8ad91d681874eaccd082c75384a4d32ff60bf0195c09ab4ee9abcfdca654b8511432d2f8fc40b5a3d192cd6cb30","ssdeep":"","tlshash":"1201762835e64558432376390aaf43141c38e0933246c88dbe5cdba00fc243a94665fe","size":817,"data":"","first_seen":"2026-07-22T10:04:33.2143Z","last_seen":"2026-07-22T10:12:11.547646Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bfa40ae8703642802d5dcc08c8cb346","sha1":"5f518882e068578eafada71085043ce6bda2e1f7","sha256":"906771fbdde8c15dd281044f4832f6d20b2161302080da4ca77f9dccf0ce58fc","sha512":"7eb45a0c5aa2dd980eea650a6703025a2b3284c7fda5c928186dc86eaaa97573dbf194b8d6e7853e00a8c52211281730b777d5918b128af42ec99801bf3684e3","ssdeep":"","tlshash":"e121fe6ba9bd84b887c4a3ec03448c4f65cc511ae1da669dd546ac3802b821b1f8c723","size":1158,"data":"","first_seen":"2026-07-22T10:04:33.216292Z","last_seen":"2026-07-22T10:12:11.548257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-22T20:25:57.810001Z","times_seen":493040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/js/main.js?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f95c5aab8c0665043a1ffa80c7734cc","sha1":"3e1cacacce30bf047a69756ab92b27a381950c26","sha256":"549b2b15c3b618b063b3d7bae50ee1df806f972e758f4de82599180c185bb3d5","sha512":"3a78335e377f36aede85f2c2c3f59cef5cc4e3bb8a48a08759256d0902cc6656f8047f3490888f79e835be24b5d24c975b4048ddc6f1e8c26e93a2336ae815d7","ssdeep":"192:RRUIukGxzIqX1llGfINn8vbV10K5oJYWGoWaaF45nlzgcxh2xHuukTAe:4FPxtUfq8v51ToTOiIpkT9","tlshash":"49f1545992b13c7c40b35e589e7fab09797880a72887c912394fb4894fb64f083f16ed","size":8027,"data":"","first_seen":"2026-06-07T17:44:23.788146Z","last_seen":"2026-07-22T10:12:11.525622Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","size":68253,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-22T19:59:00.800873Z","times_seen":27631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/cmplz-cookiebanner-js-extra","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c20ee0a217a69f250225ae3a6d8fd83","sha1":"8cb0f360ddca412fa27fd0079164c1651ac26627","sha256":"a849f3f0e634cd26a5a0528fddbe534b0b485b12dc66b65d215ab02e281df294","sha512":"f45c5b102c419d5e56f6a0846a4afa984ad639a989f76ec7748792b218f150aa97e9e7a5b07cd4454532f4d5b8e62556e0b8378a37c5ddd32d0e5787c225cddc","ssdeep":"48:XRW5HeGhPXGPqRf0crPAyJTjo9FSpceO2:BW5H1hP2Pqf0crPA4UGcA","tlshash":"8691fe6be9bd84b887c4a3fc03448c4f65cc511ae1da669dd546ec3802b821b1f8c723","size":4257,"data":"","first_seen":"2026-07-22T10:04:33.207179Z","last_seen":"2026-07-22T10:12:11.54892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/plugins/simpletoc/assets/accordion.js?ver=6.4.3","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-22T10:52:12.444015Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1784646061","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6864ebeb6e3ced2462393fa20791ae4","sha1":"f3b3609777c917bea592f447d8c935ef39eade6e","sha256":"230b3557e1953ab8f1f81e4ee6fe82931fae3b5e562893014d44ceaf914859cd","sha512":"75ab24a0daf502b88345aeb149a2b679fde20271d7fb87fde5f530e6c7dd2c212035896d180956ca0d4d7c83c046c07e77ca1fe0d522a653d45c27ad87f04010","ssdeep":"768:0h4p4cj/WZaGSJjv+YfzwLpstNvuWBxurxesKNVhIkYJO2ybEXoHgFC1aRHC5kiX:YZanLBmHC5kVQ0KRmDECIr","tlshash":"2513d9b93adcd0b511ee47ed37abab48e4303962d80fc8609565dc542268dc70f9bfa1","size":43043,"data":"","first_seen":"2026-06-15T22:38:25.845012Z","last_seen":"2026-07-22T20:20:37.834894Z","times_seen":1634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"global privacy control or do not track detected: no banner.","filename":"https://rainbetswitzerland.ch/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1784646061","line_number":1,"column_number":22786}]},"http":[{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/06/sas.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.288Z","timestamp":1784715100288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/sas.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5814\r\nlast-modified: Wed, 17 Jun 2026 12:55:02 GMT\r\netag: \"6a329926-16b6\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5814,"size_decoded":6158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6b55dd0f9b3ee8ebfb521f726e6a43d","sha1":"af31bb2b5f14eedf0a5d92afe7fce36a3b67f941","sha256":"65f35f4a2ba0ffbe6e81ab84521e1fbbc6f4c6c1476dae0bd02825d0969b10f8","sha512":"fc9028c8b7a46afeb2a095a6f3fe746a6aeb61767bf3ce073797ef07e495d4014dd7c29067db686114e8872e9e465bd168b43da7c2be567ac65d6f1ce6d0fdd5","ssdeep":"96:mElbw+iEqGccCWEMpft3L16GUwxpq9IkicYywfbwPM8OgFtb55:jwjtWEMhdoeq6pywcEbWT","tlshash":"adc15c201b38875ee6a55cf42286a797c8b83669f09037370f7427941a1d7f8386f45b","first_seen":"2026-07-22T10:04:33.160987Z","last_seen":"2026-07-22T10:12:11.478461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.886Z","timestamp":1784715100886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetswitzerland.ch\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25200\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 11:16:14 GMT\r\nexpires: Fri, 16 Jul 2027 11:16:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 30 May 2023 20:21:35 GMT\r\ncontent-type: font/woff2\r\nage: 514526\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25200,"size_decoded":26013,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25200, version 1.0","md5":"351540371bc840ffc95e0b3e670d727b","sha1":"ac66c6c30243c81b820efe5732770273d24537d4","sha256":"62429575b7d315b6ad0c016109842a5e4a0532d06eadc973132dbec61169dd86","sha512":"616a8d1d068b41d6c56e604bf7da8b589090fe00400f3676806b1bc914d043f7a1c3c46b8636433b2c43b2e825dfa884124a2ab03ab5f94660b213732c5da930","ssdeep":"384:RQA8Qmg6JMNFG8NuPLHnqDGj+/+UNQ5MykXq/UT8f3m3W+u+jvcmmF2IWr:RpgWNA8NeHqDN+UN1mcTRjE14r","tlshash":"bbb2e1515097fb2619285f26c93b102035e872b42929f992315ce4b1c6adfe8d8fcadf","first_seen":"2023-10-28T08:32:32Z","last_seen":"2026-07-22T10:12:11.479117Z","times_seen":288,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":3,"connect":38,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/06/rainbet-casino-36x36.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.992Z","timestamp":1784715100992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/rainbet-casino-36x36.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de; cf_popup_unique_name=GVgRBVsdH0oPAk0CDksUClccRVoQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1082\r\nlast-modified: Wed, 17 Jun 2026 13:03:32 GMT\r\netag: \"6a329b24-43a\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1082,"size_decoded":1425,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4311629dd9d0a9fa4881ecf40151917b","sha1":"315fe410b38b410743f0d62aea253e6338e5b41f","sha256":"9ea8101c4d87a6dba994d90196c08bbc0c0efd3ec3f721b25452978754ec6eb6","sha512":"691fe174342f98860334bd7a7181e9ac5016be5ed21aef8534a913d671762f15a7643ba0fba352386164b8e90602fb7b4d3691afbe2d98ea92952c62ba6ef569","ssdeep":"","tlshash":"2e118879539433def455357410d10343f7e97e3287c29f2582c496164b15c884cae305","first_seen":"2026-07-08T12:11:29.168468Z","last_seen":"2026-07-22T10:12:11.47971Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/screen.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.136Z","timestamp":1784715100136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/screen.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-7645\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30277,"size_decoded":4522,"mime_type":"text/css","magic":"ASCII text, with very long lines (30277), with no line terminators","md5":"40d9a6048c9cdcf34493c481af007216","sha1":"840f3313f083b02dd5ed750bbc5ec2d78875a883","sha256":"f95b7220fbe7c80dabbcf843b487e1058974257576dc2fdd8b5926623f032c95","sha512":"ea3bbdfe88d9bd32dbfb7bded61e7c2530ca53fdd80df910612c467593d45d2159209dcf1a601f4d91dacda9ca7a5d3d8909de8b074a2369eaa3d82dee986994","ssdeep":"768:FfCCUF2Z2ks++z5tuwLghFUCzoO4i9KyueFUgMb:9ds++zfLgZe","tlshash":"4dd2edf3a0831369f00b8e2753d4f2a9b278a41eb6063bfb9851b73197c77d206b1549","first_seen":"2025-11-01T17:37:40.413818Z","last_seen":"2026-07-22T10:12:11.480342Z","times_seen":9,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/f87cb9f1-78b0-44e8-b68c-9f6406200cf7.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.235Z","timestamp":1784715100235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/f87cb9f1-78b0-44e8-b68c-9f6406200cf7.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8146\r\nlast-modified: Wed, 29 Apr 2026 09:45:43 GMT\r\netag: \"69f1d347-1fd2\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8146,"size_decoded":8490,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1798f05dc1f149b0fb1333a921709fa2","sha1":"3301bbfef6333947783bdb9eb55dbb9c3ef3d22f","sha256":"92fbb1d3c47b3ac7eebbe4274893d37794df086e18271c4787f79c05faff0cb4","sha512":"26873e04d86ff0bec0db5fad937623b4b532dadab84dd2f6ccdc101d6776013270259e3b18c7ae48b2203939a0d8d6d60c8fafa470b46a186148f40211d3715d","ssdeep":"96:aElbw+iZd8n2cJ5tBy1f0bYHv5GQhEPNOxMhFoFs3Xbas5H6DtpVEpLdxd04Tsg1:/won2cJ5tBq0grhHqYFUms5HwE5XZEs","tlshash":"6ef1b5e743e47396e510e1bc2a34767ae9de2a63cf3e21822472579b1f498f0190973d","first_seen":"2026-07-12T22:10:25.121798Z","last_seen":"2026-07-22T10:12:11.480868Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/x-twiter.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.284Z","timestamp":1784715100284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/x-twiter.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4010\r\nlast-modified: Wed, 08 Apr 2026 11:17:00 GMT\r\netag: \"69d6392c-faa\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4010,"size_decoded":4353,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98c227dc794b41261c55aff2122708ff","sha1":"b1286f1c3930633fc484b813c84e9f96b69fdacc","sha256":"d53bfb043f4b379759c22e77babd348e9ac470f91150208d5380f562e25b2931","sha512":"e9740c4a314f448673e60972a0ebc070968e087f36efaae79cadc159e3a0de8ca87eb4a0246da9f91e71e3dba5d3059aeda43b33f444ff46d43e466e4fba78db","ssdeep":"","tlshash":"e8817e2433522711f96956be00cd372393af5e0985a147b646ed52710127dd4f81d5ea","first_seen":"2026-07-22T10:04:33.135909Z","last_seen":"2026-07-22T10:12:11.481446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/06/gespa.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.290Z","timestamp":1784715100290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/gespa.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6198\r\nlast-modified: Wed, 17 Jun 2026 12:55:06 GMT\r\netag: \"6a32992a-1836\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6198,"size_decoded":6542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c913ef493911c5a5e9901ced7d61db7f","sha1":"16b3cb9851f9dd38aad447206d31a60511c9d773","sha256":"2a8b58e5212355c481664f30ebadd04962ea09cbaa9008126e5ffa424c8a1278","sha512":"ed80b00b7c5ec3d274828cd1a3f0826c50e059016697c773a01ea5d5109bc18717995309d53d4d3e6ba38f721cb3f946e7407750d4beed12a6ae25171a2f282e","ssdeep":"192:lwT7fEAHxlbvA6UXHOMm/MLVm2sRojBX8:lwT7fEARlLUXHOM8yQatX8","tlshash":"38d1ad9153790a88e83eb73870b6f3235b9d9511cd0af3a9c3b7215e4585beb29b10cd","first_seen":"2026-07-22T10:04:33.12386Z","last_seen":"2026-07-22T10:12:11.482024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/pros.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.128Z","timestamp":1784715100128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/pros.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-efe\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3838,"size_decoded":1401,"mime_type":"text/css","magic":"ASCII text, with very long lines (3838), with no line terminators","md5":"5af496299aee6059a6687001a99149f7","sha1":"df0ae8357939657efaae1583f49356637d3d97c5","sha256":"2258580c9c5f9cb25da88a189d17a48fb67cab59150b395bae3ffff16a57c991","sha512":"3128fae8b08a80eccc4cc8aaefb4b8604a2c46dcfdd5f526e1de19a9550cbe7595473ab39c1a7a5aef207098d38a4e9553a6b55de59e00641cf14d27931c2725","ssdeep":"","tlshash":"3f814235e1f12c8ef32fe54c91e0a6b5a21c830ee81f5f9c9915b5a265c6584803f64d","first_seen":"2025-11-01T17:37:40.393924Z","last_seen":"2026-07-22T10:12:11.482595Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.170Z","timestamp":1784715100170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-10a9d\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68253,"size_decoded":22389,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31972)","md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-22T19:59:00.800873Z","times_seen":27631,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/images-removebg-preview-.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.223Z","timestamp":1784715100223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/images-removebg-preview-.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4908\r\nlast-modified: Wed, 29 Apr 2026 09:45:43 GMT\r\netag: \"69f1d347-132c\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4908,"size_decoded":5252,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36f7a5f135849dd876d84f0546c96ca7","sha1":"8f8e67a83aa5063e76a8421094d6623a12757dfc","sha256":"5d3df0d22d629885bee584aef9c675f6cd64abaf50a5d1e2b0373d4d7ae1c945","sha512":"4b1c862305b3ee9fefa8a04271260350ec9ee4e06dcce14851f36a495d639be94876b6545381a3114d22cb3fa634a37b227ae32f92d07e7f072335b9c0a41541","ssdeep":"96:JElbw+iXktmziXg/BSNledpbQRNn+P/sdlDehwc2xF2NDi6:kwTktmYHedpbNalDmwc2xFci6","tlshash":"0aa17d54a3345ee4ee646abc6f0063c8ba637f1a0292bb5b58410a01db645c207bfa47","first_seen":"2026-07-08T11:54:26.599908Z","last_seen":"2026-07-22T10:12:11.483586Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/footer.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.115Z","timestamp":1784715100115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/footer.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-184a\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6218,"size_decoded":1711,"mime_type":"text/css","magic":"ASCII text, with very long lines (6218), with no line terminators","md5":"e816bbdf90d3281925f5ef063826029a","sha1":"db2521f47213c84f65bac09a9fffb9095f8b0ef9","sha256":"1c0af84d92f7b2a5124340180960ed98ed53a8a34a1385459677884c70f088a6","sha512":"d614024aa1db24a5267421b7a29b297c36ce45be2f3938fbcc864a14bf9fd7c8e6c95abcc3f5cb653e836413a018b989214b9e3c31b6a55cc205b9cb4b361488","ssdeep":"96:RYHpc03DpWR826vBNDpWlVgqGF3bByJLWlZ:gFTpFpcGF3bGy7","tlshash":"0ad1f17361311f3ca013d921a7a613eea178d426d61766ffac5a5712c7cb2820ef22cd","first_seen":"2025-11-01T17:37:40.402031Z","last_seen":"2026-07-22T10:12:11.484188Z","times_seen":11,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/rating.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.134Z","timestamp":1784715100134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/rating.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-3a4e\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14926,"size_decoded":2800,"mime_type":"text/css","magic":"ASCII text, with very long lines (14926), with no line terminators","md5":"9e4571fcd0166476d5bc2ab7a4f6d8fb","sha1":"18d64c425d6e6899ecbc27bcda685c4e0f63ba84","sha256":"67032ba8ac7e8129904fb9d89dbe192e7645026b768620692a9ad0f3e9271f65","sha512":"058ae0e536257f702e5a129541a814320fc55b5952537be3eb9cc56dc90b7c95f2155a572b26b40af7102c27f8ae67ce78a69aeb4aa60e1607b02fe7848189bb","ssdeep":"384:/LvdJXFIxWolT00UYkU1JLK2A8Qj4qjHkx01AfxKfwXEFFzljEWvsV+ysXTgD:/LvnXFIQolT00UYkU1JLK2A8Qj4qjHkh","tlshash":"916222235058721cb517f43067a8b29af13dd5a79a132afdd8df51118bcbe8503e1e8e","first_seen":"2025-11-01T17:37:40.369881Z","last_seen":"2026-07-22T10:12:11.48468Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/table.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.139Z","timestamp":1784715100139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/table.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-213f\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8511,"size_decoded":1891,"mime_type":"text/css","magic":"ASCII text, with very long lines (8511), with no line terminators","md5":"c30cfc9aef326cb22fac45478a7f21f4","sha1":"b0e96f388478f19a1775ab6d8f7a8880fdc7d3b0","sha256":"f036ff84165ea8e2adc23e10db7f2c7663588b837d77e70dfe16360c10c505c6","sha512":"e48106f3916e33685d29e306c3b5bb9e7b1c3cd72c4d6be228c06a449693e93a48f01642bbf001c84d133b12e7bbd05f0fc3861302020976757a97eecd4abf12","ssdeep":"192:HseoMih3kYNKYpDCl0kOsgvEE9NGxELnV/3H3TL7373BEDrlOlr5N+WgwXWxwblB:Mt/Qdrl4V+AHp5/C9tm","tlshash":"0d02b92b933331fb305bcc69d599e55d7223f31221b726f4a780269cef8069e074796a","first_seen":"2025-11-01T17:37:40.379574Z","last_seen":"2026-07-22T10:12:11.485177Z","times_seen":11,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/images/header/gift.svg","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.219Z","timestamp":1784715100219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/header/gift.svg HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-689\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1673,"size_decoded":1029,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea3cb6ddc0e5387404a1ae105a823b83","sha1":"b5c3e4e0f2d2aa534a6f0358e85e26aa803868ed","sha256":"c542c748e09fd54d085939feabad78841d1bdc2c0153de00655ea4f63a1faab1","sha512":"7ed9a9d892883b5c035118a6f44c4a55b98653a21b21af541ba8f293fde0ef06454b7fab27cfb9ac2aff5155ce1ad947c9e183bb942e61166033631740185faf","ssdeep":"","tlshash":"57314cf4d5a863d2e4072729fc25f939a55724f09bf8cec4c110ae432eb5899ce9d0e2","first_seen":"2025-11-01T17:37:40.407574Z","last_seen":"2026-07-22T10:12:11.487224Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/06/sucht-schweiz.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.297Z","timestamp":1784715100297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/sucht-schweiz.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3022\r\nlast-modified: Wed, 17 Jun 2026 12:55:13 GMT\r\netag: \"6a329931-bce\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3022,"size_decoded":3365,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e345ab0f2c13c00f8a0548287b38689","sha1":"b86d37e2853f088277921ef9b6ee5ef0bd6fa7f0","sha256":"776867c0f5a8d057337d4488173bb90e394d818eb2c12afacd495c5d703f1291","sha512":"695adcdedba5ab17f8045345475ed8b9ffd6dfc11ffaf959393e9848cd7aeb7f5968a1db15f52bf8fbfba24e27655d29eb7f8c408fb15bebd05f4ff8434e520e","ssdeep":"","tlshash":"ed514bbc9789cb54c261bb74b1b43f85dbd173679f990c1dd0831c324301ac2168ea8d","first_seen":"2026-07-22T10:04:33.112376Z","last_seen":"2026-07-22T10:12:11.487843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/18.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.315Z","timestamp":1784715100315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/18.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1884\r\nlast-modified: Wed, 08 Apr 2026 11:55:35 GMT\r\netag: \"69d64237-75c\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1884,"size_decoded":2227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98632606bfe2f930f2562fbe75cfc984","sha1":"4b8c72279b354bac4027e6f47ec2b517890af5f4","sha256":"ed62fc05472adca7e5589ed3d1e670eb2d53b3771af1366a09a320b01069d455","sha512":"4619ef3739a7a42c6d8744fd5fabab9e68a0a80a49dd2b00c2eb3a54447897f0b196178d90fe72f44fdfe08f24e674bb6d02fac268c8399f2896fb369a8095c9","ssdeep":"","tlshash":"76410b2a1320af0cf0103678a01627b5e72f1a24d396efa1874185c7cbe57d825bd7aa","first_seen":"2026-07-22T10:04:33.094181Z","last_seen":"2026-07-22T10:12:11.488412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-includes/css/dashicons.min.css?ver=7.0.2","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.098Z","timestamp":1784715100098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.0.2 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 06:52:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606899-e67c\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59004,"size_decoded":36087,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-22T20:46:06.774633Z","times_seen":63263,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/cards.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.124Z","timestamp":1784715100124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/cards.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-221f\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8735,"size_decoded":2346,"mime_type":"text/css","magic":"ASCII text, with very long lines (8735), with no line terminators","md5":"3e30683268da9d9237d359c1cbba52a9","sha1":"b4961a86e77b5c03feab8afe2c0c639fc7ad6b97","sha256":"7bed67f793c8eadebe74b344706b615ab13ae48db87615b61b85796f8523b2df","sha512":"430274ea944fe0e8ee11f82c4d263d49d472bedef33ff871e9689386e64233b460d9df3b39e5f53ff19fd2cc3e9ab8fc3ef638432f7e5d663d40bbdaef0eec71","ssdeep":"96:b/XtxMaCOcH6vsXtaXOFP0PONGWK1tYS9+Fdf4vgo0JkRr/u/e/xgXtxMaCOcHMb:bPAaMHwWwc0dVWmGLAaMH2AaMHhAaMHp","tlshash":"510254b2b1632269f14bdb27e960312d3034f076bb831bf7c8935716d39528b0a651ed","first_seen":"2025-11-01T17:37:40.385906Z","last_seen":"2026-07-22T10:12:11.489834Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2025/07/bitcasino-1.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.225Z","timestamp":1784715100225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/bitcasino-1.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9362\r\nlast-modified: Thu, 28 May 2026 08:57:30 GMT\r\netag: \"6a18037a-2492\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9362,"size_decoded":9706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-07-22T10:12:11.490417Z","times_seen":12,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/screenshot-of-the-window-with-the-betting-coupon_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.274Z","timestamp":1784715100274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/screenshot-of-the-window-with-the-betting-coupon_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14054\r\nlast-modified: Wed, 29 Apr 2026 09:04:29 GMT\r\netag: \"69f1c99d-36e6\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14054,"size_decoded":14399,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c53b7788da4fdb3dd9398350a3b2b460","sha1":"4105dd457b69cb05cdc9e5ac9a74d68efb749d82","sha256":"0f534886b73c3028a0b44697fd53cf6b116f6bfa23fcca4f53171e9309c1ec0c","sha512":"a94835146fdb4e3583a0d7f63afe9c56be8eb506b05d52d99732cacd9bd03a89c114184334d4a76634a1c580d9a2d4d2ff1ee833d405fea1dddf536aed3df052","ssdeep":"384:pO/K1bGZVjRIqEJGjwU6WDEOs+qj72ZCgIL2eecqg8ev6Y2:p7bGZVjRIlQjwU6TO9qP2QRL2e5qPb","tlshash":"5852cf3981e19641c5aa27a6cce9bfb15773af10aec043e20cdc40254e97fe6cd5f245","first_seen":"2026-07-22T10:04:33.134337Z","last_seen":"2026-07-22T10:12:11.490998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/bitcoin-payments-logo_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.299Z","timestamp":1784715100299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/bitcoin-payments-logo_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8274\r\nlast-modified: Wed, 29 Apr 2026 09:04:16 GMT\r\netag: \"69f1c990-2052\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8274,"size_decoded":8618,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb2b1fe26626fc014cbd371c92e97755","sha1":"4630e18147e136a883e9583ce59c241d53bc64e7","sha256":"0f53b2054220563bd4684f5577846a675a11de1445411e748342e2c498493a06","sha512":"e31d91f4d4165b039392376ebe7b87ef951df4c7446a6337c4501b21747d58482b3cfd5a23863ff438f6d490851ca61adab0b2b4df614f23518a269aad7095a5","ssdeep":"192:pIJRhE/13q3IeSepz6CoGKt3q5NtnxmCeGZnIO:pFpq3IeFp7S6x0CeInN","tlshash":"9302af112c7207d7c6af71b64ee13b4ae9236a40854d8a8f62a18cb7cd658015b3328b","first_seen":"2026-07-22T10:04:33.092296Z","last_seen":"2026-07-22T10:12:11.491631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/06/rainbet-casino-300x300.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.990Z","timestamp":1784715100990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/rainbet-casino-300x300.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de; cf_popup_unique_name=GVgRBVsdH0oPAk0CDksUClccRVoQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6306\r\nlast-modified: Wed, 17 Jun 2026 13:03:32 GMT\r\netag: \"6a329b24-18a2\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6306,"size_decoded":6650,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1c9957dd8ce57bb5b6bd3a6de6eb4f0","sha1":"0df76161e9cbd5127a3c179de56e549e459b376c","sha256":"4b6292bc5fcbf0dbdd0328af93154b69525aa40b67d007af88941e62c83952a9","sha512":"a066ea9127bed0a75f56801208cd877b265afe842947e18e27038f16e8e10259d087a193a6ba1f8688fc33b1c56e392555974cf025d43badc2f3a7ea14dcc233","ssdeep":"96:kaElbw+iXZolZt5UK9g7suc0SdaI/QwnWj01XjQcze2k3NxNsU4GCS0hltbMxw6L:UwTSZVas/1/Qw95zeZ3fNyGCSKlcpvT","tlshash":"0ad19db8874f261dff746b3c2c5f2be2f3a0aecb010e6f106a8d461105889e4604938f","first_seen":"2026-07-08T12:11:29.205204Z","last_seen":"2026-07-22T10:12:11.492236Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/plugins/simpletoc/assets/accordion.css?ver=6.4.3","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.151Z","timestamp":1784715100151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css?ver=6.4.3 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 21 Jun 2026 13:02:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a37e0f3-403\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1027,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-22T10:52:12.475709Z","times_seen":45,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/available-sports_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.244Z","timestamp":1784715100244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/available-sports_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20998\r\nlast-modified: Wed, 29 Apr 2026 09:04:15 GMT\r\netag: \"69f1c98f-5206\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20998,"size_decoded":21343,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ca2b51e9213955264c1a4b03fca6b2a","sha1":"83eda8a8469559f5b25230a137d970082a1978e0","sha256":"1e9a2cf7ce9d1105bb889418fcfbd6e5e8113305f10c0c091ed671f48f86d461","sha512":"34768e1d8becab049d0c2e6129104a43d9babc02cd6b7c57498b74c8699afd008264733cbedb3fc18968ced1987106781b0d8a0a3c38cd3cd9a6136faae8a7a9","ssdeep":"384:mHGvfkLKjE4MohyAXAUTG0AcUIWlPYoTUIjZ5Sfxejza:m8TyAXh6BIWlPHU4Z5T2","tlshash":"0592d18648d22171d64a3525bcfc7b4ccc33a302568896d1fa9e58b24d24904beaf2fb","first_seen":"2026-07-22T10:04:33.150966Z","last_seen":"2026-07-22T10:12:11.49335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/confirm-the-bet_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.261Z","timestamp":1784715100261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/confirm-the-bet_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18264\r\nlast-modified: Wed, 29 Apr 2026 09:04:19 GMT\r\netag: \"69f1c993-4758\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18264,"size_decoded":18609,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52d9911151cae6f33e0fb099e43a3823","sha1":"31dac3f540b27544f2da17842c0d773527ff354d","sha256":"519abf2cf13ec5ea9626a503c16ba1a54d640badc863f2322a3de8ecdae9e2a9","sha512":"863a0fd16fb1d3688d179e51d9590b30831023c19b57dfbd01b12676e9ca873db0cce2d2220c316d1aa52488ab371f2e17f0e02d8a7a39c5d5874352d2e7ac29","ssdeep":"384:ozm2QWSMX2Fmc/ZHV+ER5IyDWNk369utYssnpl9beIlyy:o6bhMX2scHVHfZDW68sspl1J","tlshash":"bc82c019ddbdce41c20f3cf93acee260c22b6ad25056b2209ec5ec930c999d3e5ab554","first_seen":"2026-07-22T10:04:33.119149Z","last_seen":"2026-07-22T10:12:11.493926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:11:38.828Z","timestamp":1784715098828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: pll_language=de; expires=Thu, 22-Jul-2027 10:11:39 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://rainbetswitzerland.ch/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetswitzerland.ch/wp-json/wp/v2/pages/9\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetswitzerland.ch/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]}],"data":{"size":177463,"size_decoded":35130,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"1e7656d315dcbc97d4fa460f0821dfbb","sha1":"963a467cace2f2c28e9bd75a8aa756e65220b30f","sha256":"e1fcf2360cf43ac622433a482f8ad02a147b8714ac282fb22857a442e512d4af","sha512":"f7f4af9a52bae4c84ca015700fb1f1fe69c3bc5369e429f274769413dd7cdc6fa8e4611267931778414caf626497ae1fcaabf82761a81fa40980cf5f588a0ab3","ssdeep":"1536:RRSopPmyp17ioO9hnnewmPqa9Wdew1fgUJbZOLl320zsidh0VzFLn:RR3pPfzWedm1okgJfh0XLn","tlshash":"c5041b6742d560a9323ba37d86adb348b63ce003ce4699d97dded0898fc5e900977b0d","first_seen":"2026-07-22T10:12:11.494594Z","last_seen":"2026-07-22T10:12:11.494594Z","times_seen":1,"resource_available":true,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":7,"connect":22,"send":0,"wait":887,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1784646061","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.100Z","timestamp":1784715100100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1784646061 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 15:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f89ad-ade\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-22T20:10:29.916159Z","times_seen":30805,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/06/rainbet.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.211Z","timestamp":1784715100211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/rainbet.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61124\r\nlast-modified: Wed, 17 Jun 2026 13:03:30 GMT\r\netag: \"6a329b22-eec4\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61124,"size_decoded":61469,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c28719e52879a64075437d8160272145","sha1":"a8b8358d8d78c6a4f2bbcab7627e99eb1b7b5245","sha256":"ba467fe181696fc97773f7549a6b340794bba1836057176929fa373d5aa3df74","sha512":"bff9f40822de7e5341650b22df08b4ecd8f45eccb71a1b0af4a67b075d0893e1f1f8b4e5c12fc7aa8b792c134b98afe2a1b83cd2a42f40589fcb2a7bb0c8a26f","ssdeep":"768:7T25gUhrSbqtgTyhN9x94n5a5JqJrVZYd5yNJVmXvXxoWcYOrRUzwZsUomxrQG13:kgOrensN/9445J5yNjmlk+zwllk5","tlshash":"2b5302c802601d0cf653b93806c08b4b758a3f46fb996fd36794635543f5eca94fe18a","first_seen":"2026-07-22T10:04:33.146983Z","last_seen":"2026-07-22T10:12:11.496075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/images/icons/menu-button.svg","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.220Z","timestamp":1784715100220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/icons/menu-button.svg HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 228\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\netag: \"6a606a94-e4\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ab1d55e55b7e86a3c817d8892d6b584","sha1":"5f069d522bea52e2782797a10f47a83895349682","sha256":"ef70e23d1c9179aec2b49e0afe79521bfdd051abeabf220b3ab19977ca285e6c","sha512":"717be6268baea441f60d4df0221a7cb6181040f438e3a0d5f7d7d314b5517a04e1530f5894b0bdc9a8e5e7f1761ddaa0f85690ec3865a4f63732bed9697ddb4c","ssdeep":"","tlshash":"afd0a99f524c0e2cfa228520e35932b5007b2143034c526ec8636534aa0919fa83faec","first_seen":"2025-11-01T17:37:40.348381Z","last_seen":"2026-07-22T10:12:11.49689Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/dota-2-betting-section-in-the-sports-section-screenshot_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.276Z","timestamp":1784715100276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/dota-2-betting-section-in-the-sports-section-screenshot_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12150\r\nlast-modified: Wed, 29 Apr 2026 09:04:23 GMT\r\netag: \"69f1c997-2f76\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12150,"size_decoded":12495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9b04eb3726670aae6ba5400b82d66c1","sha1":"17d8913d2398521fbcf4c0394c4e5e83ffbe0ec0","sha256":"92db6d770c4b5a7d922ee0b3ee22903f1e316eb8c2d2a6492126fdd45c67f9ff","sha512":"a804a4ff626da1dd6b8105faed59a9d933119feaf26373cb8ea7c198c636e7ff6e86de62add7094281ec4e7234065bd6b464de6d0174f3826b6ac546a113f32c","ssdeep":"192:tqozeyXLIIAMJl8DJweDpQxjJXOKOu3Xr5IShqIUl0ncvEuKtYELDjfwHJEQpzep:2yXHl89wUpQNOwLUBl0ncvEusLD0HJET","tlshash":"5142b0c754b09a32817c33255de763e9f3124a8a965147d37994eef70d808e61d4b3c7","first_seen":"2026-07-22T10:04:33.090273Z","last_seen":"2026-07-22T10:12:11.497901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/evolution.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.296Z","timestamp":1784715100296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/evolution.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3202\r\nlast-modified: Wed, 08 Apr 2026 11:55:35 GMT\r\netag: \"69d64237-c82\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3202,"size_decoded":3545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5d7e7e45ccf2645f8b03b1fbc730d78","sha1":"4f826ba1064ced3411ada805633ae7214ae719de","sha256":"815e35c5349c3ccf18d56ccabc3501ed97a7bf3cf00311440d3dc7677e308539","sha512":"e2e745b4ac76326e349d270a0df43d689a11647082e3b833481ee3dc6bf6089dbfca44cec76e5f5b075f98a5bb0f71e65d5f4746b6896745b2f8a7e3000120b8","ssdeep":"","tlshash":"57615c9967087727d610efb894c44f1cd7ebfd12ce52bc3b8600168829ec2cca15f28a","first_seen":"2026-07-22T10:04:33.12516Z","last_seen":"2026-07-22T10:12:11.499078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/g-pay.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.311Z","timestamp":1784715100311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/g-pay.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2092\r\nlast-modified: Wed, 08 Apr 2026 11:55:36 GMT\r\netag: \"69d64238-82c\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2092,"size_decoded":2435,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86837469674d3912ed68c4bc82545eea","sha1":"4e91abab73fb9114f48548b17addc20c3137debc","sha256":"a5e675e7df258bfa5a1175705570619e0de7721bf8fc82d71ee0b41f85dd31cf","sha512":"ca95c9fabc103bbc903239a3f35f5167bb64fe4021da59cc142e641d374b177cbad0f395a7f688d6b886e178b4741d86eff2114a463bf345a6d4617c3c019403","ssdeep":"","tlshash":"76413bbd6778837cdc091a72b09837b7b7b62d0fd7eeb2158489810a0b5584d9ded282","first_seen":"2026-07-22T10:04:33.143528Z","last_seen":"2026-07-22T10:12:11.501611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/preset.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.103Z","timestamp":1784715100103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/preset.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-206d\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8301,"size_decoded":1706,"mime_type":"text/css","magic":"ASCII text, with very long lines (8301), with no line terminators","md5":"667afa9c8becbcc4eb72ac7640632f42","sha1":"963014f9ab2e78d22be382ce9fa863f75d9ea73a","sha256":"afe84229b5038550a10b99da3b43906043eaf40616befc3a87fb05e109088bc9","sha512":"30d2adf0e78344d02095735666477d313d823188168d0062e82c917cae3b12d7fc3a1e1c92c2360cd0df0d48644e05c1dd3701545cf52c811e74aac92b31ed8e","ssdeep":"96:sRQr2NvADkzwQXcl6CPO85TmgHFqfws4HCxi:sRQr20+wQslvFqfwVCY","tlshash":"1a02dc62f4c2523d702f917c52f1b73c7d3d9852da022f3ca4a6b7b523871db1662685","first_seen":"2025-11-01T17:37:40.406132Z","last_seen":"2026-07-22T10:12:11.504069Z","times_seen":11,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/header.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.108Z","timestamp":1784715100108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/header.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-3a93\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14995,"size_decoded":3102,"mime_type":"text/css","magic":"ASCII text, with very long lines (14995), with no line terminators","md5":"03a883d119396e93f7972e1d98cc67f7","sha1":"2fcbcee2c4114fba44c065eef7440e4c82d35709","sha256":"645b1c7739b6f6a3e0baa2638e30b765d0f6a42eb818138b0b2b85fde91836e5","sha512":"f17b836c56fb96eaaec34cc9cee1bf8748358ac389b0a6dba3154291ec1ac7914326c55c8473122455f8cdebf6a57ab43add5b32892ecfbc7b4a2597d5772fd5","ssdeep":"192:WkluZlFhYP2NcAtAt/avtOikaLSFbX2GXM:rluvnWJc/","tlshash":"956223a246543318b023ca53c3d96e6d713cd0225a121ebe6b556a1bcfc37a6c3f9747","first_seen":"2025-12-22T05:17:51.184337Z","last_seen":"2026-07-22T10:12:11.505549Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/steps.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.137Z","timestamp":1784715100137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/steps.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-3325\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13093,"size_decoded":2456,"mime_type":"text/css","magic":"ASCII text, with very long lines (13093), with no line terminators","md5":"2bb5e01a8ceef17de0973b1d2457d467","sha1":"6624bafe007bda76ff559baf0e5695cc414c34f6","sha256":"2f0ae51e3499b782e0b800101e65f96c8912a5e5633ddbe52520d67cb5851eee","sha512":"29203f07561709da9b06c307c5145b229e52bc57ad29d1074a605869bb5d4163a5bbbfba718f4d9350c727054d6caa8288aa045aad9613c3c8fe91a2b19cf05a","ssdeep":"192:KN4hj1g9f/S5GyQfLeHHCHYNsOl1AVrFV5rBz:Pj1gJsZKal1WbrBz","tlshash":"594273f261e742adb217cb2a83d4733c722cc0026b461ffff946b6a552553a1c6562ce","first_seen":"2025-11-01T17:37:40.395209Z","last_seen":"2026-07-22T10:12:11.507209Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/style.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.142Z","timestamp":1784715100142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/style.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-1bce\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7118,"size_decoded":2164,"mime_type":"text/css","magic":"ASCII text, with very long lines (7118), with no line terminators","md5":"e888c9868943300570f7c516065bafd8","sha1":"307a6438d29609e9fb9e8c71784fb3f9165bafd1","sha256":"dd165b87604ccc2be88a1587cf7296f94f0bfccbf5e72256a6d3df78e43aba1e","sha512":"3ebb180335ce885b7082b5d5fc1042b0cc4b0d74f4a27048aa90d90d91ba648e07efe164eb29e5a4ab9f8ecf4b15d4e4b1244d1e7b8040b36b0ad87b4ac207ef","ssdeep":"192:5YDo3Km2Omtm7mbmFmcEmDm1mHmhm0m0m0mFmamxm5Emcmsm4CEm1mXmZmZmhm1x:Jd2poySwczqgGkjjjwt05z7LHzgWssk7","tlshash":"29e1b83e0235e2b059524c1535ce2a052307f72287f1b6efd6fc89dacfc652b2669b15","first_seen":"2026-03-28T20:05:45.617056Z","last_seen":"2026-07-22T10:12:11.508119Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/images/rating/badge-1.svg","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.222Z","timestamp":1784715100222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-5ef\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1519,"size_decoded":1096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0884de274bae3d6ec31ccd5d9be8c3d8","sha1":"3b63951346a68139406a7cdf2d248b9abd4b0e1d","sha256":"2245fd540f2a4bc8fd960f88a97777333b930813c26101cd633eb6f32c4f7e24","sha512":"dee333a4091183b7aab0b5951e0ac754136698d907f79021201a0b720754e963adc8ee9c09cb081a637bb9787f9d60f418225c975c298eba29f28fa99d1a99ba","ssdeep":"","tlshash":"d731656ab21d6835f01845bc9e62c43d14767cf70cc1500156e1fea9e0b74c61cbaadf","first_seen":"2026-06-15T04:41:24.080103Z","last_seen":"2026-07-22T10:12:11.508731Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/5337293547809929544-1.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.237Z","timestamp":1784715100237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/5337293547809929544-1.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4518\r\nlast-modified: Wed, 29 Apr 2026 09:45:44 GMT\r\netag: \"69f1d348-11a6\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4518,"size_decoded":4862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b73c911d0358ab5ff5ca0ae102922cb6","sha1":"06048e9ea1a32eb1f0f22f42d9b4d22dd40c80dc","sha256":"a316245a0572c45d633aa48b55ed230f3e18f237478a43b23579194b25f36a51","sha512":"04fcdc15df3c301c7425e38af97dd9d2edd9dd19e07cf94f50c416b5cb2558396107d3e3b82acd716e008be445a5e7f247aad3bc5aaa4cc57ed61c7ed0c27b48","ssdeep":"96:sElbw+i5iwug/nkbQXtGznffHhbapo89/1ETsN4qbj5Lrn:5w1iwuH6czffHhbT8B1Eu4q/5Lz","tlshash":"30914b2aa7bcdfc8ef54257528565304c35e382486dc350676ed42960e6cacbb9be883","first_seen":"2026-01-04T17:17:18.882378Z","last_seen":"2026-07-22T10:12:11.511117Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/overview-of-betting-options-at-rainbet_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.241Z","timestamp":1784715100241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/overview-of-betting-options-at-rainbet_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23540\r\nlast-modified: Wed, 29 Apr 2026 09:04:27 GMT\r\netag: \"69f1c99b-5bf4\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23540,"size_decoded":23885,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"878b6120a1cc96d4d82e65b2ac8e3cef","sha1":"850a62aaa531ef5bde36489872d79aa5b33b292e","sha256":"b6231c7f4d49ff5b8cf4e7c1f898df5254d3d0fc36a63192a5e3632f365cdc5f","sha512":"fb720eb0a9a46a2c206fa0c4049911d27c997c46bbbf853d4840c540642ab499c0a9f4431bd494a3d9fc31ebc6dba9750119cca93077ae482f19be74d60e9e28","ssdeep":"384:G1t7YP3DvlBYevahtdismmANo+SZ1zkuXGB+yfmBD7K+HcvOBjsKIKT7KA3TVYPN:yt7YP3DdadoPo+mlYs1HcO1NIKT7KAy1","tlshash":"bfb2d08615467a921132be5c0dcf2ba8c2f37bc940a6411a248ed6d79f63150edbf7d2","first_seen":"2026-07-22T10:04:33.204988Z","last_seen":"2026-07-22T10:12:11.513391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/the-casinos-main-screen-and-the-sports-section-button_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.257Z","timestamp":1784715100257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/the-casinos-main-screen-and-the-sports-section-button_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22748\r\nlast-modified: Wed, 29 Apr 2026 09:04:33 GMT\r\netag: \"69f1c9a1-58dc\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22748,"size_decoded":23093,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22c106af55531e85b85029496e82b67d","sha1":"92cee4714c3f3859a8a377c9bc33dd218a3fa9f1","sha256":"d568d4416ce55dd769ca86d9ab4acddf731d0f4b2293ae52df853500f7673889","sha512":"9f6c0c6195a274373d2c52ba455b1e388be8bacb36f5701ca4ecfb7fba0d42df006c54ca1d32c9308a8ff718df6cee03fd548d54ddb85b775e600591ff485bd6","ssdeep":"384:6V6uxzQPWMdUYi4JSM7lHKInUYZDnIvW3OWx7aWh1MRlZ0uiMyXjDjIwey8Picc7:OpQPW2UYi4JSSZjfeq7n1iL5sXjDjIwl","tlshash":"46a2d053ad673292eecdfa7a119823511446374533a940e73ae1dd7a8f01841eff342e","first_seen":"2026-07-22T10:04:33.19311Z","last_seen":"2026-07-22T10:12:11.514396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/jquery.fancybox.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.106Z","timestamp":1784715100106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/jquery.fancybox.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-31fb\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12795,"size_decoded":3443,"mime_type":"text/css","magic":"ASCII text, with very long lines (12795), with no line terminators","md5":"a2d42584292f64c5827e8b67b1b38726","sha1":"1be9b79be02a1cfc5d96c4a5e0feb8f472babd95","sha256":"5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0","sha512":"1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb","ssdeep":"192:kJ6DcTZ6oCCkC/wEvcqtZ02/Aw1vGgjnUQcw:kJKwll/wEvcV2/vvGkjf","tlshash":"af425173a140312c407bce22d7cfe948e13a9555aa2216fbe95cfd64cbc7be811d62c5","first_seen":"2023-04-05T04:45:32Z","last_seen":"2026-07-22T20:56:12.936896Z","times_seen":50330,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/breadcrumbs.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.121Z","timestamp":1784715100121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/breadcrumbs.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-7b4\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1972,"size_decoded":1098,"mime_type":"text/css","magic":"ASCII text, with very long lines (1972), with no line terminators","md5":"c5d669253477fe521303f6ad9483d097","sha1":"3ccbc26db4ac1e3fb31c62fd6453dc221a46e96a","sha256":"a4b5335f492830d366d4aebbcf181a52b5d1c34da97ffb0e945fd1eaeb5046b1","sha512":"d0cd6b65dacba1eae70c63053e340ccfff6d8eebe05873ee203494af19e9b4866ce7e1b638307731f37c8b8d886414de89da8e0a25afe07744d09dec5184eaee","ssdeep":"","tlshash":"47410071d061263164338a29cb89723c9739be22261b5bfbec01ef01b646b8f55f1a5c","first_seen":"2025-11-01T17:37:40.341391Z","last_seen":"2026-07-22T10:12:11.515666Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.169Z","timestamp":1784715100169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-15d9d\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89501,"size_decoded":31324,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-22T20:25:57.810001Z","times_seen":493040,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/images/rating/badge-2.svg","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.224Z","timestamp":1784715100224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-5ef\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1519,"size_decoded":1096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99370bc04703f888842327de74e9150d","sha1":"e5e3c9937949313b24053f6e861a27054aafcdcf","sha256":"c1e562d4bc6ad51f92da18b3bdb8ae9f0c9d1517fb82a39382ff31d6be3612c3","sha512":"c3bdfc451961f425ea03a6cc5460f2f6d9842c4b50399584ecb8af646c4c3cdb2b20897f7da64cc5c8379c028c2aea35878673e8ea76571fed8f69b299d075f6","ssdeep":"","tlshash":"bc31626af21d6935f02846bc9e66c43d147a7cfa0cc2540101e1faaad0a54c61cbaedb","first_seen":"2026-06-15T04:41:24.118809Z","last_seen":"2026-07-22T10:12:11.516758Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/slot-lounge-7.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.232Z","timestamp":1784715100232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/slot-lounge-7.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13266\r\nlast-modified: Wed, 29 Apr 2026 09:45:43 GMT\r\netag: \"69f1d347-33d2\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13266,"size_decoded":13611,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f30213034b31686a3adc629d51986ae","sha1":"956ec123dce965ad0c2595a778f008d35c96a9c1","sha256":"acdb00df830cfcb63a95e467c95b5a6e67e0b99b9909a529f906c58523e1c2fd","sha512":"5563c298b0511de3eaafce02549bddd360c99c826f2228c31e03d74959a60e1cb12bbff02346ac4e5c8a2d9266b685b06c6883ae1e80595c18b16ff6ba313385","ssdeep":"384:lwTgxAPhB/+YkuGVuA9IMjFauZ3RrG5kiK3q:6TgE7q9pvtin","tlshash":"bd52afdda7e24be8e86192374741694533f2814f5dd9cbb80128139922bf2e1068cfa7","first_seen":"2026-01-04T17:17:18.873927Z","last_seen":"2026-07-22T10:12:11.51723Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/casinolab_logo-18.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.233Z","timestamp":1784715100233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/casinolab_logo-18.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30120\r\nlast-modified: Wed, 29 Apr 2026 09:45:43 GMT\r\netag: \"69f1d347-75a8\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30120,"size_decoded":30465,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5e11fe2d9db344c4d29f41a6d70c8c8","sha1":"e95148bc3da1f0286f4bcbf57b4f34c07d733ebd","sha256":"b924d6c1c8050b5c2eed44cca42103c7094bb70635445d0aaea6708fdaa63058","sha512":"bf3669c64976f353d85c330918e66101ddcdf059a67f5dac6ca2f196f444b04ba103ed0707c4a729acd40fee324f1a3ac66a84892939806ee680d3bc72f0acb9","ssdeep":"768:6T7djYZUOfDc2+6VAtIDNY/Y3gc+AJD7OQh:uylDM8AtIQYwc+6Dq","tlshash":"ebd2e15e5567a0ede628067c9747cf873d32be3c570e80e4c54379eaab5089c97138ca","first_seen":"2026-01-04T17:17:18.865715Z","last_seen":"2026-07-22T10:12:11.517701Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/deposit-form_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.253Z","timestamp":1784715100253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/deposit-form_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12128\r\nlast-modified: Wed, 29 Apr 2026 09:04:22 GMT\r\netag: \"69f1c996-2f60\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12128,"size_decoded":12473,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f4f99dd2f4afe2f87203e20b3e20344","sha1":"2a75a873e49905099ab7b1f2a235b61e9355acde","sha256":"d42ec977a23dc276ae77bd60570d7f187963077a71742f9fe54c75f13a986781","sha512":"00b7b53195ddd3f15f69e390f7b35d60a3e7b31971fa1bd8fa91ac583ba139c4851b868fe3f24e11329246b4f6885a81228a8871910ad8f4341bd3b10eb43b12","ssdeep":"192:JE0B5DyAnxlyQxGQt11hnL1OAlfnFCqzpDRFbuXvrVtYJ/s3PdjaAepGkI5:C0BUAxQCp1XL1OAPtlwjHYJuQAeMk2","tlshash":"fb42af9b99933123a1cf2b3feef29f15a1038b52680903faf15adc175d496619f36142","first_seen":"2026-07-22T10:04:33.138668Z","last_seen":"2026-07-22T10:12:11.518239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/choosing-a-sport-to-bet-on-screenshot_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.270Z","timestamp":1784715100270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/choosing-a-sport-to-bet-on-screenshot_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10026\r\nlast-modified: Wed, 29 Apr 2026 09:04:18 GMT\r\netag: \"69f1c992-272a\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10026,"size_decoded":10371,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"466aac9a725ff6bd4e3589468984e44d","sha1":"0f472213c65cd4f665fa21c10245f33bbd186469","sha256":"bbcfdcfcef084b7ad64a5395c0dff05a2b2a172084d2929b81053890a2599bec","sha512":"0aa77126f742b04aa78a7bf630f6755812bfa84dee7c0ffc3d5b69f70b59c99bea0f33d884c3252864a30819f59f10e59eca00cb1b04cf266786898d74603883","ssdeep":"192:RqoPfLsBlAAHnczUYB14HWLx2G7NbB0ejS+7tRJedwID:rc7HlYB142gG7NbB0cRJedwy","tlshash":"97229eaab0661332ed5a33735daeb7dcd3a38a59d58503d1b482c4234f80da19b63885","first_seen":"2026-07-22T10:04:33.169725Z","last_seen":"2026-07-22T10:12:11.518869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.13","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.096Z","timestamp":1784715100096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.13 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Sep 2025 08:36:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c3db79-d0f\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-22T17:19:59.828653Z","times_seen":4518,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/faq.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.126Z","timestamp":1784715100126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/faq.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-124d\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4685,"size_decoded":1693,"mime_type":"text/css","magic":"ASCII text, with very long lines (4685), with no line terminators","md5":"cf883145742fa2e7149d53fc9b87ca5c","sha1":"b96c32d296450b0f37a2fbcf8dcf9d99eaf7ceb4","sha256":"a546f4c12258c7608989eef7f2c60f925c4d67d7e332dd565c0b2005cdaa5061","sha512":"1b13cb5e65c4bce3b152c272102facfc3bc89c7c2cdbf56e07138d337789e61714b2876b27cf7bf98b6bd535000c5c57344d63fff83ef79385582681be7c9f84","ssdeep":"96:p2Gh/Af2sKhmlGizCRCbeGMfbsKYbsFvJ:p2Gh4f2sKd+C46GMfYKYbsFh","tlshash":"51a1526731412268b11bd8a696e1697ca539d8239b163eefec33be20c7062d7c61384d","first_seen":"2025-11-01T17:37:40.373628Z","last_seen":"2026-07-22T10:12:11.523925Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/registration-form_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.249Z","timestamp":1784715100249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/registration-form_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8580\r\nlast-modified: Wed, 29 Apr 2026 09:04:28 GMT\r\netag: \"69f1c99c-2184\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8580,"size_decoded":8924,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f517c59b96bf5c4ae4c09bf87e46608","sha1":"cea7eb5acd649c63ec743bb26ad5a45ad0998eb3","sha256":"324c7e9c15bed11e49f09a67f66cffa130b90cb6a63c126919197974285fe325","sha512":"4f3465bfb4a9c3e7fa691c3c538860ec02ecc935916988909a7cf40790eb22576e0ac4ccae3fca14d366581a62666a72e066cbc84ed62bc627fe6635aa430832","ssdeep":"96:1G7owHlvZxlHgzYOORR3X1O/yLtkcKhw1Qc5FCNh77ZNaeIROdtIsx6t4VpO3xJZ:1SHlVH4YOknMYtfdheIaeKixJddeddID","tlshash":"8a029eac1ce163a1da19b63a3cee8f5185738e86848192ee675f4fc34d405501f6b1ab","first_seen":"2026-07-22T10:04:33.180755Z","last_seen":"2026-07-22T10:12:11.524498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/style.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.149Z","timestamp":1784715100149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/style.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-340a\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13322,"size_decoded":3523,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (582)","md5":"8d90f9ae6483d327ad939b04d41135f8","sha1":"8bd7407152df6af30f2476dc62ec4a4110c6aad7","sha256":"6f08c0a41b77faa2abbd2ec8fbb630665446828356be8166014d142777a834ec","sha512":"11427472fd2e2a3a381f95cd25728ba8686c399c0e58ad8a32d9565642aa6ff1522ea1693620081679bfb34290039aff0394d72268ed58fed96be70907934267","ssdeep":"192:WEod9OfcZ0aJqUy3rh4dLsqYFa1QuxlAo8:W5MfcZ0wqUy3VeNYF9d","tlshash":"485295a1abb356f1b53ac1362243fa647b7c4043170ea5b4e6d0b1887e04be819b3f5d","first_seen":"2026-03-28T20:05:45.600499Z","last_seen":"2026-07-22T10:12:11.525091Z","times_seen":7,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/js/main.js?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.172Z","timestamp":1784715100172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/main.js?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-1f5b\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8027,"size_decoded":3020,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3428)","md5":"9f95c5aab8c0665043a1ffa80c7734cc","sha1":"3e1cacacce30bf047a69756ab92b27a381950c26","sha256":"549b2b15c3b618b063b3d7bae50ee1df806f972e758f4de82599180c185bb3d5","sha512":"3a78335e377f36aede85f2c2c3f59cef5cc4e3bb8a48a08759256d0902cc6656f8047f3490888f79e835be24b5d24c975b4048ddc6f1e8c26e93a2336ae815d7","ssdeep":"192:RRUIukGxzIqX1llGfINn8vbV10K5oJYWGoWaaF45nlzgcxh2xHuukTAe:4FPxtUfq8v51ToTOiIpkT9","tlshash":"49f1545992b13c7c40b35e589e7fab09797880a72887c912394fb4894fb64f083f16ed","first_seen":"2026-06-07T17:44:23.788146Z","last_seen":"2026-07-22T10:12:11.525622Z","times_seen":7,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/plugins/simpletoc/assets/accordion.js?ver=6.4.3","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.175Z","timestamp":1784715100175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js?ver=6.4.3 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 598\r\nlast-modified: Sun, 21 Jun 2026 13:02:43 GMT\r\netag: \"6a37e0f3-256\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598,"size_decoded":967,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-22T10:52:12.444015Z","times_seen":43,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/images/rating/badge-3.svg","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.227Z","timestamp":1784715100227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-5ef\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1519,"size_decoded":1097,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a03905e08b3814ea391d982b21b62a3","sha1":"7519fc2404245e09e2611c52f2c26b2ff8d48e6b","sha256":"313c6821314204583c776446a3ec134791f39aa4a2542b3086a5be896622a1ea","sha512":"72091a2e34536fcc05e4a9a0e8413e1d66a07ca2be58fe02ebbb02452187555e3eead0c2991dd108bddd6321982df7d4a1e9c23169ed0bb5c43978e7c231ea38","ssdeep":"","tlshash":"1931626ab21d6c75f01846bc9e23d42d147a7cfa0cc2400141e2fea9d4a54c62cbaedb","first_seen":"2026-06-15T04:41:24.068077Z","last_seen":"2026-07-22T10:12:11.526702Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/fat-pirate-logo-16.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.238Z","timestamp":1784715100238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/fat-pirate-logo-16.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10134\r\nlast-modified: Wed, 29 Apr 2026 09:45:44 GMT\r\netag: \"69f1d348-2796\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10134,"size_decoded":10479,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e64db6b0ec91a8953fcbfd36901cccd5","sha1":"cc56e5c74fa7cf244555bb284441ca0ae4651f59","sha256":"4423df2573864504ad521d7ffac196a815a00b5dd13e847ea067f1062291c63b","sha512":"2a5a6fcf9c451a97e46247065f09d5e8b297b49ffc7a8c80c0d7b99df880812c26981ff441aa57a1aff92eb109bdf47c987409555d3b1f1dc40f10c6c6d430cd","ssdeep":"192:ZwT9cKAJo9hSHQf5H4Q+uKTCf954yqGTQuS33v5uFJ:ZwTTVoGYQkC3Qj","tlshash":"e022cfb796fc69c8f253f0b3f0da375eefac6983036a0122104663370b13d86611669e","first_seen":"2026-01-04T17:17:18.887391Z","last_seen":"2026-07-22T10:12:11.527293Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/successful-registration_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.255Z","timestamp":1784715100255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/successful-registration_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25062\r\nlast-modified: Wed, 29 Apr 2026 09:04:32 GMT\r\netag: \"69f1c9a0-61e6\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25062,"size_decoded":25407,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d8a0eb917628d9d78b1fcd1540b11b3","sha1":"81dde8d98c9dafb86423f866f42e6c468708bdf4","sha256":"7f42e6cdbf701e5b966eed524bba9ec8bbeaefe85f6c455a73886f58b824608d","sha512":"aedcf51be806347f9a5f2bea7620d901e7c8e439fc3c4fc805777a3e01fa8d0b71f98aa3e8e293cf330d2a83b9e408360b8e1b0382b0b313bd466631e2cb6175","ssdeep":"384:X/vmvFG5bFWRuEnmAq8kTdS6fACy3pDhpXtQLlkL810AumTeaby:HVuFnm7pTdBJuXWL6L8yABO","tlshash":"7db2d1701e7a52e1c4e9b33c4dbb165cc3f31f880aa5bad6f9d1dc114d18228adb72a4","first_seen":"2026-07-22T10:04:33.171341Z","last_seen":"2026-07-22T10:12:11.52788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/customer-service-and-support_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.264Z","timestamp":1784715100264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/customer-service-and-support_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40836\r\nlast-modified: Wed, 29 Apr 2026 09:04:21 GMT\r\netag: \"69f1c995-9f84\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40836,"size_decoded":41181,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9445a365446cad03b55c6ded12858e9f","sha1":"497ea5377f12fcce63bd4d5e5f299aa92481a744","sha256":"dac6cc36c13c33c0ec1e6ae4f2640bec3a714e42920fed58ac3c17e5e29a6db5","sha512":"f617c98ffba54bd6aa22ecbc4082a5d81bb0cac6c3c3fc23b787fc0c450b5121161624e3044223ef4655e0801b88e56b54df6668ab6a734ba3dd0a4c37bc0f4d","ssdeep":"768:1pkMh8GhlH6tiYTpon7g093+M+e4WPM2slNe2lAzpUwU7N9T7f1MV/tyeRKg9:1pttDHCiYy00tt4WEzlNe2SV8T7EtyeR","tlshash":"5103e10e3d6ad659c38e73328dfb733e03ebac0144c097de6681951a6ee9092ed7d106","first_seen":"2026-07-22T10:04:33.132941Z","last_seen":"2026-07-22T10:12:11.528404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/screenshot-of-a-specific-event-window-for-betting_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.273Z","timestamp":1784715100273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/screenshot-of-a-specific-event-window-for-betting_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14160\r\nlast-modified: Wed, 29 Apr 2026 09:04:29 GMT\r\netag: \"69f1c99d-3750\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14160,"size_decoded":14505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7479a07a1d0efc0e0614c1ab9921b2aa","sha1":"4fd7df894ba80ac5eb08e3a7c23163841417f08d","sha256":"1a671664e514cc79f554b7678c8a10abf4209c56bdf38f7eca2553cd29419ab4","sha512":"d43c2d8046b079cdd08ecd72a5b303088a8c2be20ba54093d7aed2d180053985421cb7ba1f8513b34dcee064a24c7bac4466ef997b84b3230af6c6a7af49bef3","ssdeep":"384:WR6xW8BcnJumvDAEHUVo77uTsNx/mHgJn4q9eQSy:86xW8WJu0VnqINhxJn4KL","tlshash":"0952b045edf209f38409bb36bcd93284cf1356845b481391e694cc6b4e02bd628b756a","first_seen":"2026-07-22T10:04:33.120923Z","last_seen":"2026-07-22T10:12:11.52902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/tour.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.141Z","timestamp":1784715100141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/tour.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-5a8\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1448,"size_decoded":862,"mime_type":"text/css","magic":"ASCII text, with very long lines (1448), with no line terminators","md5":"4bd777296c725c48e6b6e1791c635152","sha1":"0b4e71c8c715a3b429792e963c5b42aeb9d6b40b","sha256":"968201979d57a6dc6d9657c4381e1e2d34c61eaaa38def66e3d9ff894af77fe0","sha512":"9c6a2067f14b6aecb9a8709ce6098baa59d92b0521847e005b8f16d70558deac6960f75db95895c672aa530e2d22d7dbe69abe906d748b8142dbcc7d186bd4f6","ssdeep":"","tlshash":"02318b331521bb2cf423a82507a10d59724dc026b35bf7f59d597a28c3cab9219721ce","first_seen":"2025-11-01T17:37:40.403423Z","last_seen":"2026-07-22T10:12:11.529624Z","times_seen":11,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/images/icons/menu-button-close.svg","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.217Z","timestamp":1784715100217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/icons/menu-button-close.svg HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 371\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\netag: \"6a606a94-173\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371,"size_decoded":716,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c74bffa53f2ad73d1f225ddad7cbb95e","sha1":"62bb13e1b2e972f7a3bbf390a664f87ce4ade0be","sha256":"f333ef7a6c03e39fcbebcd825cdd1751661a56a180dc9bb0ccdcc6fef3366554","sha512":"7e682b9fdfad974aaa0cad7359ce44b25ccf9dffa8099ad382ef6839c8d6d12711891a543d269b3546d1935c407e6941927eea3566be3aa2389924c4d1874f44","ssdeep":"","tlshash":"6ce0df49531d0c3cb5224620d34836b4202642a3a648f998cc331938312860fb87f6ee","first_seen":"2025-11-01T17:37:40.39679Z","last_seen":"2026-07-22T10:12:11.530582Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/e-sports-betting_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.245Z","timestamp":1784715100245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/e-sports-betting_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20566\r\nlast-modified: Wed, 29 Apr 2026 09:04:24 GMT\r\netag: \"69f1c998-5056\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20566,"size_decoded":20911,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d26dbcd1d24ed407bb0fc03a4553bc4","sha1":"1d697b0befc59e70de457d6de23ee8d83d175034","sha256":"acb66f02edbd3bc68ba188d4974386a51173f7aa22aa06793432f8a2736b821e","sha512":"b44f695141b550088e573d396c03597e050d4797296383627f998d8462af5a46c7a357bcd2a13f42a02b507bdb939fc9a27e221c9d5b7ff44a5a85bae883b204","ssdeep":"384:IcZefqEkgv5ReNf9Ba8pRiFBE3H56LrMxekTa:TEkgxRe9s8ZirgW","tlshash":"0092d0738d9013a2d66ff8833fe5baf8ed19884358685e94d9544c139f114cbaf27127","first_seen":"2026-07-22T10:04:33.129782Z","last_seen":"2026-07-22T10:12:11.531148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/select-an-event-to-bet-on_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.258Z","timestamp":1784715100258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/select-an-event-to-bet-on_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21516\r\nlast-modified: Wed, 29 Apr 2026 09:04:30 GMT\r\netag: \"69f1c99e-540c\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21516,"size_decoded":21861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a6f55c10fb12332da6e0b1cdb1d1715","sha1":"de1aacab33e6a1dca8340722fdb333fed5c9ac21","sha256":"07d91aa1cad63e5e236a1f4a8ed313ad01e91b677a79984613acba941e2b7ce4","sha512":"ebd45c0e66ab5ec962e39d107e16a5e65c6a14ea2b5bed419799e220c24db70260b5487b48236fc6018f125dba9d81ee7f721bccdde207a628a91f353d4eb327","ssdeep":"384:zpvY1xwdhAFksV/RAeSihI65QHI12XrjUMHKfy/z1eXMy:zpvqxNdFRAmpSoufrq6+V","tlshash":"3aa2d06aa4f33756f509bf7689fc5b8c84f3df2aa0c1507786909d435a1682517338c3","first_seen":"2026-07-22T10:04:33.099389Z","last_seen":"2026-07-22T10:12:11.532206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/select-an-outcome_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.260Z","timestamp":1784715100260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/select-an-outcome_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16666\r\nlast-modified: Wed, 29 Apr 2026 09:04:31 GMT\r\netag: \"69f1c99f-411a\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16666,"size_decoded":17011,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe6086f4a8ecc86ed5b7547aaff45775","sha1":"20a0ff32f0297aff4b9afa5f195e6cc79282fb9f","sha256":"a33a1232172baa39db9afad51599f34825affb30e0f69bf1a60475a73a9c0874","sha512":"682b14e5020f2586f685d9ffb7bb3ce5812844301c8d7c8cb4c424d9722c5d4d458511c097b2687fd3165964fa5917e5b243fbb139e8f842d91a5c66664c591c","ssdeep":"384:1DzdeojM0/qdPwULAVYQAl63LCJLsu5b0/9xMq/deJ7y:ZzfM0idxLoRmJFx0zMqEu","tlshash":"ca72cf65111138929309f5b6fcea3b00c8bbd449c8e68177e8d9b24b0f92ad2eb5f0d5","first_seen":"2026-07-22T10:04:33.167989Z","last_seen":"2026-07-22T10:12:11.532917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/crypto.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.301Z","timestamp":1784715100301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/crypto.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1988\r\nlast-modified: Wed, 08 Apr 2026 11:55:35 GMT\r\netag: \"69d64237-7c4\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1988,"size_decoded":2331,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"803f10f7eeb73d3ffea94f2352839523","sha1":"5483fcf6a5299256a2f5bd0763d8ff6bd13c9052","sha256":"5c44f603c876d4edb0843da503a33d2a898fcf63e62733422b5e476a80078817","sha512":"882e8002e058ffcf0b5fe7461463f71658a9682918ee9216015f56a66287eefd0ade443d36af7884fc6126c76b02d3e218c1ec773a8b3a8b5cba7d6b68502833","ssdeep":"","tlshash":"ea41193473d5af08f3126bfc20812b01f940e465cacd2a6cc0a5d7e64f1c7ca2d2e08a","first_seen":"2026-07-22T10:04:33.1151Z","last_seen":"2026-07-22T10:12:11.533537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/mastercard-pay.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.304Z","timestamp":1784715100304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/mastercard-pay.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2438\r\nlast-modified: Wed, 08 Apr 2026 11:57:08 GMT\r\netag: \"69d64294-986\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2438,"size_decoded":2781,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6968f39faae0d732d3d6d02730c48a08","sha1":"c98a785fd8f09f59155c7c710656f02900cba0d2","sha256":"97a26f2f138427716e4627473687b73aeb12cae8dcf8953f31afafccc83db38b","sha512":"48ce2333248945922b1bb7f6616b3efb1478e41895b90abf3a45792829ec693fbde1e5953153a3a2bd053f60340ecd555fd53cdd8bf0e6a97d2d8edcd13c2830","ssdeep":"","tlshash":"a9411ab13735872aece012ba50912725614319ba4be782aac04453b867529d67ded187","first_seen":"2026-06-22T07:10:50.43264Z","last_seen":"2026-07-22T10:12:11.534128Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/author.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.117Z","timestamp":1784715100117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/author.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-94a\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2378,"size_decoded":1052,"mime_type":"text/css","magic":"ASCII text, with very long lines (2378), with no line terminators","md5":"b584c3ce36132f4898ce6dec831a5af4","sha1":"76a32901b198fea26401c40c957f852c1871367e","sha256":"99483cc52f2cbc3f81b001641107156880b9a47c26b9cb4d3f92cf41d30d7b24","sha512":"f0a64241b3bf43cd85fb9318f3992c3305161cdcfb78c62e89f89836d537e070532b43c90081b71f970bf3bcd1a38a6ebcdb407f671bb2ac14af8edf7e19ac01","ssdeep":"","tlshash":"b541cf3361211b1cf813d53d179496dff299e056a21e33e99dc16a98c7c73860ab124b","first_seen":"2025-11-01T17:37:40.346297Z","last_seen":"2026-07-22T10:12:11.534654Z","times_seen":11,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2025/07/bet.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.229Z","timestamp":1784715100229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/bet.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2900\r\nlast-modified: Thu, 28 May 2026 09:13:30 GMT\r\netag: \"6a18073a-b54\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2900,"size_decoded":3243,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f617f52aae9979de4c834c69307ecd63","sha1":"4b9d51f4a48a5b7347d70eedaeecb461993734ff","sha256":"eb0c65aefb2e480997bbd4b0a7b97941a8af93a7cac98e858af3e17ff75995b9","sha512":"ac447dbce31aba06f6368d50b1cfefcdbbc7b00b2c88626767718a4fe6d7b7702c65327d6917c3fd50fd16f1e9d9dd6af7974c161d8bd6ad51015bff087e6436","ssdeep":"","tlshash":"19514e7a57185d7cd034be3c19990f1b9f71fe17564612a9554121730f728d4042e79b","first_seen":"2026-04-13T07:01:10.904608Z","last_seen":"2026-07-22T10:47:32.908266Z","times_seen":24,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/casino-navigation-window-screenshot_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.266Z","timestamp":1784715100266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/casino-navigation-window-screenshot_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10032\r\nlast-modified: Wed, 29 Apr 2026 09:04:17 GMT\r\netag: \"69f1c991-2730\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10032,"size_decoded":10377,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8408cdc921a90247b924dfa3ace3fcf","sha1":"76c8e7b98350d231d76f39e65b18ed27151272df","sha256":"c62c0aa950bfc37a56f3d81bc974d6de6a68902d2dac9e803d78b9df552fc2f3","sha512":"c74a9854795b2ddf98b3f3f2907469f5556fa6d4d61d71b483e7ad1534ebfbea28a16ed598381d9cb4d10b8f95c86fb01eb23999bd4ad1edc2d122c31e05c806","ssdeep":"192:7qoAjwzZfVIrpYODRJVB495hprMyer7L+DzfpOXe6XID:28N4pDVWh9efSnEXe6Xy","tlshash":"c1229e936cf28922c39f39b6aec579e5eb63bbc4050016c1b885c4574a605c49bb32d7","first_seen":"2026-07-22T10:04:33.159712Z","last_seen":"2026-07-22T10:12:11.536187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/apple-pay.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.313Z","timestamp":1784715100313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/apple-pay.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2118\r\nlast-modified: Wed, 08 Apr 2026 11:55:35 GMT\r\netag: \"69d64237-846\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2118,"size_decoded":2461,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b02f0c0b4407dd16ae8b81abb01105c","sha1":"26c215ef21ef42c05891f93e0521fc42031e0d20","sha256":"372e38b8988fc7d4a0db4773f406031f698a9ee58126039c525efab08f1edb69","sha512":"7c68157137cdc4b1a928da26bbef987e0e6845b008589b1835c4840a6c262016371ded1924df8aa3200d09e2f6c34d86a47f417a167bb4c7c132756fe5639eed","ssdeep":"","tlshash":"dd412af803b29f84e9b564b048f4231aea8937119161a719d08013f10f371e839885fb","first_seen":"2026-07-22T10:04:33.126283Z","last_seen":"2026-07-22T10:12:11.537432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/casino-main-screen-and-registration-button_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.158Z","timestamp":1784715100158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/casino-main-screen-and-registration-button_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23968\r\nlast-modified: Wed, 29 Apr 2026 09:04:16 GMT\r\netag: \"69f1c990-5da0\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23968,"size_decoded":24313,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8b8d139480525e5a553afe714ca3d80","sha1":"15f02cf8ceb5c40a241db4b8998e3258d966279c","sha256":"fba5dd59f20397482c39499536971e36ab97842c71b0fd4150c33745a4a0a177","sha512":"6e4328b65fad0eb2782b18146e9be9422c6c4617d3044ed730d7642722508ebd9ccee74720f3c88bb4c2fc36e5466c49d300ddc7a89c9b3af0f1c99cefc24fdc","ssdeep":"384:J0nK2Y9kqOGUEpaPL8HNkm7CYhnIm1mxNb3yrDMgyOBqumr65LCSyjKI+nviY0vA:6Y9vOGUeasNtC6IP3yrDM7OBdmG5hyTo","tlshash":"a5b2e10931712377e48b26751fc67b46e73348a6f540828ba2e8c163ede87e34f652b0","first_seen":"2026-07-22T10:04:33.156256Z","last_seen":"2026-07-22T10:12:11.538051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/images/rating/badge-4.svg","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.230Z","timestamp":1784715100230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-4.svg HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-5ef\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1519,"size_decoded":1091,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29f2a2ab79f5114bb28356e97a36edee","sha1":"477e35cba5ebc90ab4608662bc9003ea6d19d98c","sha256":"eebfe679d89508815562df7a571fd466b0d2353d35faf3ea2420e3ea63772862","sha512":"5e8ab31e46ccfe166330307f65193794369f45d095d6165c17bb5c542b5c91e72e5a06f04ff6b127901a1e958c7ef0692184b4197ac9263a4be055eab9b7b4e0","ssdeep":"","tlshash":"6f31926ab21c2835f01886bcae62d43c047a7dfb0cc1500144e1fea9d0a58c61cbbedb","first_seen":"2026-06-15T04:41:24.097257Z","last_seen":"2026-07-22T10:12:11.538821Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/facebook.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.279Z","timestamp":1784715100279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/facebook.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2496\r\nlast-modified: Wed, 08 Apr 2026 11:17:00 GMT\r\netag: \"69d6392c-9c0\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2496,"size_decoded":2839,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54134da66954b43361a1bbe922d9d10f","sha1":"c281a9733b846c79cc0ec66b2c3aec2a28e0e631","sha256":"c47957afc0372eb81ba560f8146187183f1d98dd2b05945c36f866c49000f605","sha512":"70c6a626c8ae3febc2756609ec95402fe4a68e65e82c6f95c74ca66b9893dd335f890d0315e392e887348788aae415b614c5f820b936bae73a4b05b3b612d394","ssdeep":"","tlshash":"58511bb683688715dbb1fa7890634b96eb777b1689daed22934600310f412df48dc2b6","first_seen":"2026-07-22T10:04:33.152337Z","last_seen":"2026-07-22T10:12:11.539413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1784646061","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.174Z","timestamp":1784715100174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1784646061 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Jul 2026 15:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f89ad-a823\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43043,"size_decoded":11602,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43043), with no line terminators","md5":"f6864ebeb6e3ced2462393fa20791ae4","sha1":"f3b3609777c917bea592f447d8c935ef39eade6e","sha256":"230b3557e1953ab8f1f81e4ee6fe82931fae3b5e562893014d44ceaf914859cd","sha512":"75ab24a0daf502b88345aeb149a2b679fde20271d7fb87fde5f530e6c7dd2c212035896d180956ca0d4d7c83c046c07e77ca1fe0d522a653d45c27ad87f04010","ssdeep":"768:0h4p4cj/WZaGSJjv+YfzwLpstNvuWBxurxesKNVhIkYJO2ybEXoHgFC1aRHC5kiX:YZanLBmHC5kVQ0KRmDECIr","tlshash":"2513d9b93adcd0b511ee47ed37abab48e4303962d80fc8609565dc542268dc70f9bfa1","first_seen":"2026-06-15T22:38:25.845012Z","last_seen":"2026-07-22T20:20:37.834894Z","times_seen":1634,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/sports-section-main-screen-screenshot_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.268Z","timestamp":1784715100268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/sports-section-main-screen-screenshot_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18152\r\nlast-modified: Wed, 29 Apr 2026 09:04:32 GMT\r\netag: \"69f1c9a0-46e8\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18152,"size_decoded":18497,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"036e9d453eab1f271415d47d0cf1ffae","sha1":"cbd49b58d0bb6e5fcf51e67750faf91383012a91","sha256":"948d4bc60561cf037b416b3b2ea4ffefb2c665743362df9413d8eda4ae9760f9","sha512":"d963de6fb2470deca64a6e66dd28611e78fc34c1c3d7c25e21c0e44635fffabac58096a5558b3f7b520894631a7ece7dc0f5da9f7fb8af48c239a0bdccf67afb","ssdeep":"384:KHNDjv1KNSutmtvhnOA6Z6bVwT5yX4n3Cm0cDLmH8xJeoBy:UDySPphddmlyXeNVc","tlshash":"db82e0877ed318b6078db5230ef02790ef2726108ec2728f5965f12b7591db862a35cb","first_seen":"2026-07-22T10:04:33.196127Z","last_seen":"2026-07-22T10:12:11.540628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/email.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.286Z","timestamp":1784715100286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/email.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3224\r\nlast-modified: Wed, 08 Apr 2026 11:17:00 GMT\r\netag: \"69d6392c-c98\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3224,"size_decoded":3567,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2fab7eea01f613d49ce6393d44b2ccb5","sha1":"e936415ce409f33de24918908661e0de14cc5aba","sha256":"c1fad6f68201bc21eaebaa0ac0fdef16a6d939f8cfb2e25521ece14849d300cc","sha512":"85d0c321558d6b71e777d9f7c4e348b0283a555b632a00049f31599eaf0e2742ce6783b20917e7181c2438f68a6e13805722af23de30c7fe6a7fa6f6d1e37d91","ssdeep":"","tlshash":"9c614af16f913e99f750a0b969f08b76f350bd76e752285cc4042a21a3d828460add5f","first_seen":"2026-07-22T10:04:33.111014Z","last_seen":"2026-07-22T10:12:11.541198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/06/safer-gambling-ch.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.293Z","timestamp":1784715100293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/safer-gambling-ch.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4754\r\nlast-modified: Wed, 17 Jun 2026 13:01:28 GMT\r\netag: \"6a329aa8-1292\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4754,"size_decoded":5098,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"047f73bfff56240278d8b24da7851881","sha1":"de691bb9edde766ef6735020baa77730b651a178","sha256":"bfd3609742f9500d20b8f7d46e46b09771d3208fb33064cabacef8c557ac735e","sha512":"7d83ea11f51eb09e8b5c16eea140950902b06f7bcc15be1181abf420caebebddfa9795143aafff6deb6fd95f02abe47f57a46b1b1b0e130dadc44ac3e4aea162","ssdeep":"96:WElbw+iX9hYMVSQQDCgnaeGfddK1HESKYZdSwRoh+GIL6j8LA74eJC6YfP5:TwT9aM8QwneiEqdSwx2A44e+P5","tlshash":"19a18d2517a4ab28f8b77134f08ab7c443113835876793f9b49ce75812c84c328d649a","first_seen":"2026-07-22T10:04:33.18358Z","last_seen":"2026-07-22T10:12:11.541896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/live-betting_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.247Z","timestamp":1784715100247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/live-betting_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25096\r\nlast-modified: Wed, 29 Apr 2026 09:04:26 GMT\r\netag: \"69f1c99a-6208\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25096,"size_decoded":25441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9d12f5e1c91b09e649f6eb26352a4d8","sha1":"166e924a8e7d5dd585248f7ae79e1ea99e49846d","sha256":"333bebdc6267c58eed1a190ae9d8bd97cf224dcd5bc7f0212706245b957d6986","sha512":"2fb47bc330c62394d53b71a0bed7fac1bff61dda73be30290cbab1a681b00e6475e8e94012eb3404eac488b9707fcd53641803f8e38dcd1068a964fe08d13149","ssdeep":"384:dva02FxDMQifNvEwEQZyLTmcJoTaGRcmuw8ebyovRPdlTN+Lu/7BWeqDQu:dGFxDKI5XmeoTaGqmuw8e2YdhNF/7GDD","tlshash":"7db2e004491225b3f24d514dedfb231ca4776d3c68acd3966b65cbb31cb98909fe1187","first_seen":"2026-07-22T10:04:33.131059Z","last_seen":"2026-07-22T10:12:11.542807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/popup.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.110Z","timestamp":1784715100110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/popup.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-51e\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1310,"size_decoded":892,"mime_type":"text/css","magic":"ASCII text, with very long lines (1310), with no line terminators","md5":"49511f8bc74a2e403b9a1111ae593156","sha1":"54d4ccd0e0c2b45fb2f5c86032bda2e4a039ed27","sha256":"e90754ef95eb9e4a22bb6ff12c57dd5d428b93f463b60e079801d9e48dfdb4d1","sha512":"6da7715ac374ea3f1fd99df45f0d00b04c19436505fc23fd7dbee0118f8c92c0ddb0d26ef9e7fb8b270cdec52c85ff1c56d44e24066a89af69370af8a0ded576","ssdeep":"","tlshash":"3c218777ea50f61da02ed568e242559db279d029b306aef7c845fdb583c62c300b11ac","first_seen":"2025-11-01T17:37:40.366875Z","last_seen":"2026-07-22T10:12:11.54349Z","times_seen":11,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/themes/casino-reviews/assets/css/quotes.min.css?ver=1784715099","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.129Z","timestamp":1784715100129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/quotes.min.css?ver=1784715099 HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 07:00:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606a94-65b\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1627,"size_decoded":938,"mime_type":"text/css","magic":"ASCII text, with very long lines (1627), with no line terminators","md5":"43fd47acd8c6b6b99ec00ace6271fb48","sha1":"4ac095168a9c622551dbba34ca00d0b0a021a4d5","sha256":"ea2a953a5031f7805c827cb77d94a9ed59fd84181dc6edf4fee43d2bf702a067","sha512":"db91e6bf34db0b96b8d67f01935a7f17117b625acf7033e034226f64ac0e06e956c1c6ae6ab0ea89e30b53f95cb2a9002ce46eb17376b95d0a60983ecd439ca7","ssdeep":"","tlshash":"843110335020032df07bc526b6c55eef71adf813967227adefd5f0229a81b561f51542","first_seen":"2025-11-01T17:37:40.358856Z","last_seen":"2026-07-22T10:12:11.54436Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/current-bonus-offers-and-promotions_ch_de.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.239Z","timestamp":1784715100239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/current-bonus-offers-and-promotions_ch_de.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34832\r\nlast-modified: Wed, 29 Apr 2026 09:04:20 GMT\r\netag: \"69f1c994-8810\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34832,"size_decoded":35177,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0116dfa2acaa09b86bfdc13aced7eef1","sha1":"0ba1a5c2aef8238d81c7400ef294c97c6c705180","sha256":"30e4eeb2be3758ad2f59f5628c8c6f5e3b5cfd6618ae64c43928140272de4c3a","sha512":"18ee9d92e78afd99d573a89aff48c452a5c71f1116e7ba059616f996e2acdbf498f6f550a35f2091cba732ba1c583f7a19261baccdc09813e75b72fe3c579e92","ssdeep":"768:DYF3tlEbMupxSJqu+1y7Z0hC0y72w3T4K4qU9N3ZJ3sJPHv3rLt+u:DIlQSqn4cC0yXuPKhku","tlshash":"f9f2e0a376211db2c539b4303ec07f0949335fc1dbd088db275b9219abba0e59a7358b","first_seen":"2026-07-22T10:04:33.16647Z","last_seen":"2026-07-22T10:12:11.545334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetswitzerland.ch/wp-content/uploads/2026/04/john.webp","fqdn":"rainbetswitzerland.ch","domain":"rainbetswitzerland.ch","tld":"ch"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetswitzerland.ch/","date":"2026-07-22T10:11:40.277Z","timestamp":1784715100277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetswitzerland.ch","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:18:04 GMT","end":"Tue, 20 Oct 2026 07:18:03 GMT"},"fingerprint":{"sha1":"D1:43:0E:3A:4D:FC:03:E1:56:4F:C4:8D:3E:B5:68:41:B5:8F:FA:FB","sha256":"52:FE:71:54:4D:A4:5A:95:AA:CF:50:1F:44:2C:3C:E0:73:53:CD:FF:6C:0C:C8:D7:E9:48:91:DB:B7:9D:CD:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/john.webp HTTP/1.1\r\nHost: rainbetswitzerland.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetswitzerland.ch/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:11:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45512\r\nlast-modified: Wed, 08 Apr 2026 10:54:59 GMT\r\netag: \"69d63403-b1c8\"\r\nexpires: Fri, 21 Aug 2026 10:11:40 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45512,"size_decoded":45857,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d87f3387f234d5e1c5a3d998e263baa","sha1":"ffef5d9474f9ceb9f1073eb15daa92c272198767","sha256":"f28330e73ebbda39e1c36131ad81ad458558488679c50db45f0744d00b78927b","sha512":"551fe1d2828ac680bbd21519d097c0f7023d98fa27daef37b9bac2ae2394317c9b1c0c3c02fb8346397edd02699aa7d87d6fcbc12f8503682ed25fc2a983778a","ssdeep":"768:1fCHmf0Rcgfuz77EXVJV3EU224CzZiYkZ5vTzuxWn9ATGpXTj4+MB/FKJDAK9YrG:1fCK0Rcgf8qOU0Cz7kZ5vTzuxW+SjjHd","tlshash":"4213f14775d301f80931f27cfba4b61097c31066a6f5ed2b25a02cb14da3e896f37a66","first_seen":"2026-07-22T10:04:33.122499Z","last_seen":"2026-07-22T10:12:11.545935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetswitzerland.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}