{"report_id":"746f6b7b-5a91-4fa6-95b5-214178be23f0","version":0,"status":"done","tags":[],"date":"2026-08-28T14:25:38Z","url":{"schema":"http","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"title":"Rainbet™ – Oficjalne Kasyno w Polsce","dom":{"size":220370,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"4127e71c25bd0bca7792202ae4424120","sha1":"65bd3dc47d55568e1332e23b5a4137c880a798db","sha256":"ddf2d9e2261492934aab6e73d4b6fe8c5a2c21210947be8af9eb2b24ac30fc29","sha512":"a88e163b0279d8771e3f316487ba07f9893e4e8f66acbcbcd41f840ece39833d28e3a6641d5960299a11f5559c018c18c4b8c37963a58c5b4fc4b57d825e09aa","ssdeep":"3072:miozzqSkiPorpUk+0yFfYvXJBogAmaGEWmOTA3:rTSki1RCXJBogc3","tlshash":"92243a7b42d0657d213ba3689d427a0c6b2dd443db0245e8b8eec164bfc6fe14876b8d","dom_hash":"domhash880efc62811124d9fedc7b43c4b1c6ce","first_seen":"2026-08-28T14:25:40.739517Z","last_seen":"2026-08-28T14:25:40.739517Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:25:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-casino.pl","ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2026-08-28T13:34:45.416853Z","last_seen":"2026-08-28T13:34:45.416853Z","alert_count":94,"request_count":47,"received_data":1219927,"sent_data":25308,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contact Form 7:6.1.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":4092,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":8,"received_data":381160,"sent_data":4512,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-07T16:34:01.171858Z","times_seen":6714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/contact-form-7-js-before","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e82bdd55508ba23d5eeb64c40aedc6f","sha1":"24b2fcef819b7120c94442c320961e1e9666bce8","sha256":"c49a93b0df90ff79c972b4207f5c59f4e8ad4a4f6ab16c3e9e14fab4bd6829fe","sha512":"2c7e8a9de9508937263a11d72bc780f77db4a1b9d30a95ea25cf3313409f0ce2a3af131db98f0dd47242e532f93a011e7a32c2455852cbdb7f0be18c0887780e","ssdeep":"","tlshash":"6041129ed598295914eac178097c1210b5149417ca1b5e55b64d004c6fa44b869282c9","size":2399,"data":"","first_seen":"2026-08-28T13:34:49.521548Z","last_seen":"2026-08-28T14:25:40.872409Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-07T16:22:53.123084Z","times_seen":242175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-09-05T09:49:21.474446Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"08c6e41bffe0832c31810c3ff4ed2023","sha1":"5e5abe5267cbddcf8ed59cc05e9d07f53234d66c","sha256":"1a4db9d7304ad46bdacb61f939622acbc6a577b2a8975ac7e6797dfc8383d878","sha512":"cf4c17c417021182eeae934f4625dc1c55bb09b1223722c3e0cd9d65aac41dea3a61305ccfb6a52c61c97ddbed9601d2a9fd78a8a278443e141dcc8ca6727e26","ssdeep":"","tlshash":"0a01bd5a21f21078c827128bbf1acea8f4f4050339829806facd84599fd2c025a30dd9","size":758,"data":"","first_seen":"2026-08-28T13:34:49.504763Z","last_seen":"2026-08-28T14:25:40.878401Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"60b79109a2d322e5a2f007635ad73e8f","sha1":"1b9887387fac124a850fba084da29d38c4ac9669","sha256":"425bd31d1e077c9a04a90a07e1bceea7def015535f326c3a5d9be2d1505ca31e","sha512":"319a6d7101d529fe5a62a2d60ef2d9d7787ad829c93eaa6b0913b96401ce5c8b8e60d7e6deeacd01a948bce2e4569c3deac4dc0e693228fbde2a1b281fca802c","ssdeep":"","tlshash":"0001261661225a0936bf29b74b43de915004e2177ac7c4da3dceca194fcef0da2279dc","size":794,"data":"","first_seen":"2026-08-28T13:34:49.50635Z","last_seen":"2026-08-28T14:25:40.87961Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"464353a89cfee76dab9c51ae8c529ac0","sha1":"84346eecae625ad245b0b0f76ca116eff13254e7","sha256":"311376a63f33c48cae80acb8d00b1364591b7665a727d685415a059dc2599b0d","sha512":"3ddda6d4eb71d02b233d76d807c252672b916cc32c75336179067f4df9da7398d84e12b4c6779fd474dd764cec6073fa54536538f36a33bd6dab8a493f897b4a","ssdeep":"","tlshash":"be61aafe9ab710124867745bdfcb46487274402f12449d4e7e3e17b12fe1a285be0bb4","size":3272,"data":"","first_seen":"2026-08-28T13:34:49.509386Z","last_seen":"2026-08-28T14:25:40.881044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b75ffcdf480589f19cbf78ce373dea","sha1":"316b05245c99c1420895c28a0383802e6c5d74ea","sha256":"3cb8441193a5962c3af7a83eb1a4418970173e7a7f89bb085de078e3ac16fc0f","sha512":"10af5558f1abf25dbb1f03fe16b20efea15aaa4db054488e516bc625ee6fd0b36194fe7241573aa29f91513eab613c3a5cc0f423f1c8851b3aff77a84c56ac78","ssdeep":"","tlshash":"ab410768dbaeb662432ea0b62bfe12de143e147e7a414ebb7c38405048e48093715c7d","size":1934,"data":"","first_seen":"2026-06-07T17:05:58.287593Z","last_seen":"2026-08-28T14:25:40.885004Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"c35a67191117e90174938f756c5cd7dc","sha1":"d3fddce91e3b0f150d8c66587ab8130cfdcb438a","sha256":"f867304aa06b5218124f4cb784e97840c4f374c50292265931881b8254e973d7","sha512":"dcea992f859908c7f817992ddc6590b1a76d80e0c2c8fcacb6407aa668064a026741ef63dec19434bf41a64ed15e4ba9b3b7c24bda3f5b7b1f547e43c97eadec","ssdeep":"","tlshash":"15e0221263f0333100bf861422ca8a8e3ba04407be428f76696cc4061f84e94c8f48fe","size":367,"data":"","first_seen":"2026-06-07T17:05:58.289775Z","last_seen":"2026-09-05T09:49:21.475954Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"579c2e546bc374c10017ee4ff6821e0e","sha1":"adb8a1cc5ebc9a0593d32fe89b66aae48ae6bec4","sha256":"79163e137f153cb134f3b0c1ed80a76cc4ed5541a3f503a4947aa8c6c41ea392","sha512":"767f8673abc52ed046dd7381111913986f9f1c4abdcf8ce1660eaee196429427f476d97d601bcbcc65961fb9f12e90e3b94717bb0d15a52af243673e36555f58","ssdeep":"","tlshash":"b841eb25f37d243147bf64a929e622de2a3d80823a478cb7cc9c9d0514c0e5d4a75dfe","size":1956,"data":"","first_seen":"2026-08-28T13:34:49.515577Z","last_seen":"2026-08-28T14:25:40.904008Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-09-07T16:22:53.212224Z","times_seen":54665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"4caf55213ee033253780dbbe1a80b1e6","sha1":"f3e0cdfafae7f84cce3bde5dcb8c5ca9babee8ef","sha256":"f8381879538f083c21ac7f5dddf05aea55b935a9ea350050ccc74c17ac412487","sha512":"98363f7b7c578b94595a9fe44db9066c3082edc2a5da678b3551ad61abe22cd992b11a8347f0a3f13e673ac1b2d582dca818950fa9503cf548bbffc777c513ed","ssdeep":"","tlshash":"05c0809e94982d5914fac148057c13107514d413cf1f1e55f74d004c7fb44b869283cd","size":174,"data":"","first_seen":"2026-08-28T13:34:49.517296Z","last_seen":"2026-08-28T14:25:40.906985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"b890a333b0d5f514f758c18b0a572849","sha1":"8e45de52346855cde37252b03928c14b6564e3b8","sha256":"ed08360ecc4004059d4fdeb5b8c85bd7402d1e68e7a8658ce3630e34cc921608","sha512":"61bb554ab95bcaa6acdcce7f529afb9a28f1c2053e4ebccceec2b488a7448969458f1e83e613555946cb2ef2d7d25e35772a972c3d0f43fd7977eef05b0bbce2","ssdeep":"","tlshash":"7741f1c25ece3cef1e2615c574ccde0357e18294fe604c0bd619546a73cac83d25aea8","size":1968,"data":"","first_seen":"2026-08-28T13:34:49.518322Z","last_seen":"2026-08-28T14:25:40.911206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"966eee900d7086888c6bd24e345ef1ac","sha1":"491665f686c464cd80b35807c865dd9ba9586c44","sha256":"bc595c8641415c3d16715855939a7a0edfc323acca2a3c6869effa7548e05156","sha512":"5d7152d312ca977277ad81dc638c392fe60616e426dd3867bce3d001dfb541689374d17ce16d39ea3a126ff84b1e2059ec8c028afde62a69481988846792dfa1","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQa:LDESVre/zP1vV95t9SWgLt27W35LP5zH","tlshash":"7a13d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","size":42592,"data":"","first_seen":"2025-03-01T11:52:27.461641Z","last_seen":"2026-09-07T14:20:25.446571Z","times_seen":2312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-07T16:34:01.227596Z","times_seen":6796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-i18n-js-after","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ce2e2f3e48f1695e19bea2159ddb4a7","sha1":"3b84072d0d248c4aa3cacaf2b11eee886adcf27d","sha256":"b16011a3c66decf8e7e7bc1e9124dd99bb845dd3463c995099b9fba3c40c9c97","sha512":"db7be7e22f2ad8709665452d477b8470f81a3d2ee5f14e106a8f72ce9a29d9bdcde06e681061dc91e5757a0f72cab78be91925ad737b0294f5a542adb2b51c12","ssdeep":"","tlshash":"6e4112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":2317,"data":"","first_seen":"2025-12-03T03:01:46.589877Z","last_seen":"2026-09-06T02:49:53.6985Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/site-reviews-js-before","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f32c30466819bd04cb66aad86d861ba","sha1":"51f6eb092717772112db9873bbab04315d42bccd","sha256":"db2de519adaf57e4c4acb8d4d4b140dd2dc1298e74669e55eb5f667653ed029a","sha512":"7eaabb6a0d1ca9cd4619f89f1e9e09e46de3cbf0cda40e8759cf41fb7c35bf8dfcd62ccf215241abd512d6f4b4df872ae3cd415501991c35e038303270065b07","ssdeep":"48:xV17T5680oTsZw0tJ/VF0qMpm0CR7JJUrQ3XJOTLjN:5796iL0tpVFEpm0CxZ3QTLjN","tlshash":"e381e0c2deca3cef1e2615f574ccda0357e18294fe604c0bd619546a73cac83d25aea8","size":4204,"data":"","first_seen":"2026-08-28T13:34:49.520398Z","last_seen":"2026-08-28T14:25:40.913931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-07T16:22:52.999046Z","times_seen":235322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"84b71e1835eb9020c7ca700d1aabbf37","sha1":"dc7dd60e16969e6df9d55ca14522ae8ac23707d0","sha256":"0a218b269cc8ae4a4c3b0367add047275973fbe05b152812268dd46bf9b7b82f","sha512":"e1bb3b4a7c978c8ab81c13fd907a9f59ee38d1959af69384c9f06cb4f94b6b3c24561caaa4283aa14177e63f9d3a2a68d97fb25c53174269ad10b6db66bbade6","ssdeep":"192:aB6Lk0IbL9op5vQo6PeoP0vpRJC7lxBFKJ6TQxTEvmgiE/mqjVdGg9sqU34ZOApw:140WLEIo7w3XtvF/mqRdGsgAzItj","tlshash":"e9423e6562712c3a46b26a224e371b05fb3850636542c26e3e1fb68c1ff08918792ffd","size":12119,"data":"","first_seen":"2026-06-07T17:05:58.096609Z","last_seen":"2026-08-28T14:25:40.838172Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2023/11/vox-casino-8.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.537Z","timestamp":1787927109537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/vox-casino-8.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8024\r\nlast-modified: Fri, 23 Jan 2026 07:37:45 GMT\r\netag: \"69732549-1f58\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8024,"size_decoded":8368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59ea71f61d32918a501a939f976a1db9","sha1":"f0a50a40f1e9ba58a00df69bb10038aa28a33308","sha256":"d7576a28536e1ce0c76610d7076fe9bed909d1e5856db74d23a030d91fb03534","sha512":"0b40ea54be729fe0f80d217273394df570017336541c91ef51c04cdb54fe34b75ef7c5bdc635e21d40bdd60fcf4983ddb387b54b1c12966bc3f4e6dba1f3efdb","ssdeep":"192:xwT6Ll945TdVgitXsnI1lxhS9zlAHKiiTYlZo+XG6ddGXqiFnK:xwT+liLVrXO0DC+HKlTYlZoC2XqiFnK","tlshash":"d4f1bf30ab76a7c4fc343bf9b48497817f293f914ee928379183108b6109591aae1b47","first_seen":"2026-08-28T13:34:49.472227Z","last_seen":"2026-08-28T14:25:40.741421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/offizielle_website_1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.550Z","timestamp":1787927109550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/offizielle_website_1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35044\r\nlast-modified: Tue, 20 Jan 2026 07:58:22 GMT\r\netag: \"696f359e-88e4\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35044,"size_decoded":35389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a67bf9f371f348159b125c5f47bf8f","sha1":"bd401f88d38fbc6c0785b30b2d5f4346b6a1acce","sha256":"52924dc0bf6c7af9a09f2afda0c29cd6ce5f012189f4de5684eddd48897f3e5f","sha512":"e1ddc84e340ef08a5384af0095b5323d11e9938637d151751e6390a8453d6b628ca39e8e7720f91d5a45c61597aee0f1d1d9f31a2994cc18254b78d30ff7cc14","ssdeep":"768:xTA/JVI3EfDwPiqNYjTUG8GOb99USUZyhQrcbok0xS7p:q/JVUEfYRE81DUSor4byU7p","tlshash":"8af2e124ec7573c8d0676d3767c7984abec27e5a0a18bc8bcf5289fb05ac584e6c1819","first_seen":"2026-08-28T13:34:49.465665Z","last_seen":"2026-08-28T14:25:40.74285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/spielauswahl_1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.553Z","timestamp":1787927109553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/spielauswahl_1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34810\r\nlast-modified: Tue, 20 Jan 2026 07:58:28 GMT\r\netag: \"696f35a4-87fa\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34810,"size_decoded":35155,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b47ae5672fba351d461d9488d0bb566","sha1":"c3645600a51cbee55351ef09f5fd698f405fd27b","sha256":"fe1b0fa151d64cee61df02239505b0a7e945f9091360d8bae7e7ec0024660366","sha512":"717a9631fd846905e45c8712890653cf2d7e3cdc89c197e4d73f761ed278143fd791c383eb0b2f866739e9b0275343174df102a77f65b84f9a55cb256a55a3a2","ssdeep":"768:2TqXHlO+HHIufhfUz6oiIErSqbSbLLc+zoZBHpiNtGP1/+5EFthf69wu:vH3P5UzTKMDc85EnhQ","tlshash":"56f2f17461c04fd9d48502f5629971f1b824bcad674882e391d16dbaef930ca001fab7","first_seen":"2026-08-28T13:34:49.45143Z","last_seen":"2026-08-28T14:25:40.743958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/site-reviews/assets/styles/default.css?ver=7.2.13","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.502Z","timestamp":1787927109502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/plugins/site-reviews/assets/styles/default.css?ver=7.2.13 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:32:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c543-7691\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30353,"size_decoded":6193,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30348)","md5":"cadcd88c2b50719913dc9399b152246b","sha1":"36d8e2583525e1ea387ef87559eee2d6e6c70bf2","sha256":"9babacb0d4d96f6a146103ec93214179c5f3a5fedb9fd4abd4f69bf023862977","sha512":"fbcb648b7d62af2a6f9c2a062b9415d76464722598dc1557a1092957493c5cc8a7d2e6733968e31456ca6caf883f58c9d0471d71f4bfa0e301535840d3b2deb1","ssdeep":"768:rGNlIy/Z+hHMs6CywLT38RbzwlGyHBjNjgG0W7LwcxmBN1P:aNxZ+hHMs6CywLT38RbzwlGyHBjNjgGC","tlshash":"9fd24358fd38f07c9a13a33bb7d9a3ac101a5c04e9122766a25ba47c47c7db71632f58","first_seen":"2024-12-04T20:32:16.192995Z","last_seen":"2026-09-07T14:20:25.48327Z","times_seen":2065,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/cropped-fav-32x32.png","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.904Z","timestamp":1787927109904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/cropped-fav-32x32.png HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQbCkoRBVZWG1U=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2243\r\nlast-modified: Wed, 21 Jan 2026 16:02:55 GMT\r\netag: \"6970f8af-8c3\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2243,"size_decoded":2585,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"fe02b432a03703308c761c26f9d01ee5","sha1":"557c835806b6964bd3bc9be2cb42ea3cfc05438d","sha256":"34cf8ad1acec33e140d652ef9a2876611e3adc45e089102062cd0cc99f413a17","sha512":"f9c944e3d57707c514c64f024d8bd4e9d86e22f7a714a1a99a55ffd70479afb7e56d420c5ca01365accf4c0df7b9471e74324423220a123d9224f218154f733f","ssdeep":"","tlshash":"7b411964fef93770f1487a26e0bba0b0f324c94d4bf1b3152ec864611c691ebb9e0511","first_seen":"2026-08-28T13:34:49.4327Z","last_seen":"2026-08-28T14:25:40.747092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.493Z","timestamp":1787927109493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 14:25:09 GMT\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3408,"size_decoded":1120,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ea4ef1b58461cc811a47cc9fdcab61a1","sha1":"155779c0daf2ef7c7f64ec41edad480c09da941b","sha256":"40522150a1e943dad5c88314d6a9c235b312d2d6beb893e8cb6b46a6825ed3b2","sha512":"26cc96e07b4c262d39d35758075140d1becd6980401a612d83b34339f35dab7bb2635c51e914a7d07c7f82971ae109966b569263c029e7a275d1f96a6e4d5e23","ssdeep":"","tlshash":"8b61ac81046bb114db572cc122cd7e32ef1f619164549874aafe2888fcaad6e5361b4d","first_seen":"2025-09-16T12:22:54.356027Z","last_seen":"2026-09-07T16:13:16.915215Z","times_seen":409,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/Bonus.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.556Z","timestamp":1787927109556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Bonus.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13254\r\nlast-modified: Wed, 05 Nov 2025 08:25:23 GMT\r\netag: \"690b09f3-33c6\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13254,"size_decoded":13599,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0055d9f68021dc316b6c42a048d1e68d","sha1":"3eb5a5c4c9228324c22f0b2a8f1520d89794201d","sha256":"cc0fdc495ca110417606f4b9088043d94f514973165753d60278d957a5606c39","sha512":"ad1b77da6e738460d48e0a0c307d738d1533f03257a95ce463df631ff78019ee203af9f7a7ede4943c2f3e3872fa0c2e3ce0f68dad69dae00b66e66f4d4800d6","ssdeep":"384:NwThJV73bY41J3iM5d+qvOMzqkuN7F8L5t3kZukYs:yTFjl1tJ5dTvOMC7OL5sYs","tlshash":"a552df58cf8b0760da162c7f28f2c747bf2a6db2ec748cd837a14596160320fa097667","first_seen":"2026-08-28T13:34:49.43819Z","last_seen":"2026-08-28T14:25:40.748867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.732Z","timestamp":1787927109732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 13:16:02 GMT\r\nexpires: Thu, 26 Aug 2027 13:16:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:26 GMT\r\ncontent-type: font/woff2\r\nage: 176947\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31204,"size_decoded":32017,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31204, version 1.0","md5":"644fb0923b00731d39d4d00d701f489b","sha1":"f7366f67d887653243faa2ca4e667fb390577e15","sha256":"53b35dda61b188937bb54ef16f8cbb018fdffad94b3f81c238bdaf764c77686e","sha512":"6569ec4d4a3d2b2f7aac556bcbb8fda83ea1985414979c0909bbc5910bd8f5bd69d1255626269faaacc1a64837501fb6fdb1ba902f84f5d213f49e88c5204fbd","ssdeep":"768:dvyQgaaXB0KgDAyWzjo9xOFqIoQ60ta3w1EOlWooyLDbY+5TMH:8fiDAyEj/FqIIw+ML3Y++H","tlshash":"f7e2f298012f52badff465100b34f7b1c8736ad9e5a243e9883d86f09b5d5e0f44bd94","first_seen":"2025-09-26T18:13:44.653047Z","last_seen":"2026-09-07T13:49:38.804231Z","times_seen":505,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":26,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.735Z","timestamp":1787927109735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 13:16:02 GMT\r\nexpires: Thu, 26 Aug 2027 13:16:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:26 GMT\r\ncontent-type: font/woff2\r\nage: 176947\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31204,"size_decoded":32017,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31204, version 1.0","md5":"644fb0923b00731d39d4d00d701f489b","sha1":"f7366f67d887653243faa2ca4e667fb390577e15","sha256":"53b35dda61b188937bb54ef16f8cbb018fdffad94b3f81c238bdaf764c77686e","sha512":"6569ec4d4a3d2b2f7aac556bcbb8fda83ea1985414979c0909bbc5910bd8f5bd69d1255626269faaacc1a64837501fb6fdb1ba902f84f5d213f49e88c5204fbd","ssdeep":"768:dvyQgaaXB0KgDAyWzjo9xOFqIoQ60ta3w1EOlWooyLDbY+5TMH:8fiDAyEj/FqIIw+ML3Y++H","tlshash":"f7e2f298012f52badff465100b34f7b1c8736ad9e5a243e9883d86f09b5d5e0f44bd94","first_seen":"2025-09-26T18:13:44.653047Z","last_seen":"2026-09-07T13:49:38.804231Z","times_seen":505,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2023/11/casea.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.531Z","timestamp":1787927109531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/casea.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4626\r\nlast-modified: Thu, 28 May 2026 09:30:58 GMT\r\netag: \"6a180b52-1212\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4626,"size_decoded":4970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99854d0a11a9071b5bd0c7b524240ec4","sha1":"cf6a6a259afdadcfe429374ad3a0d51e30c9262d","sha256":"333b32661434cb1ae472903224465055af7f02193ac37189529020f6204276d6","sha512":"017b2a49e749a74b0f8b61217bbffe0a88b766d7441410b96d0672b3b4826b3edb71c4e139206dc9d734b68fd1593e91b9030969ee93b0824ab027a7943110a1","ssdeep":"96:gElbw+iZT9OliRStMUZedQGjvTOIimJV8endhCPllse5DHFmEF:FwjGiRStlopj7OIisVNdAPbxF1","tlshash":"45918d712f4653bdc1180af80b69f18b83ddb03cc1ee466b54940023be614e6acd1ec7","first_seen":"2026-07-03T10:53:35.713042Z","last_seen":"2026-08-28T14:25:40.751836Z","times_seen":13,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/menu.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.538Z","timestamp":1787927109538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/menu.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9488\r\nlast-modified: Tue, 04 Nov 2025 10:38:57 GMT\r\netag: \"6909d7c1-2510\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9488,"size_decoded":9832,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b923b88b7c4e029070507c4306023a58","sha1":"a941d970081dd348783d9051bfb14f0ce652c3df","sha256":"1185bfc80c60a36e11506e640bcb251af22ccefbcf0485a24a9659571b00dab6","sha512":"f0e80cac7a01a36619b7a71a5d7c417f84ba529a3d975f4bcdeca30cb6c8d986ddf2ad3433ccce2c60f27dbba49bd9f317e367b09c3ccb9b789eb639db0ba439","ssdeep":"192:0wTvibJOlLYFO3mg1GTBEeSidcIHgwurdChhr/to6s9eQkHYCQ6RU3pNcr:0wTyeLCO3mZN71Hgn+r/tO9Msa","tlshash":"2d129f976b2ca60ff1e05d7be1d199fffb4a3d915e2d431726805b7081916cde108a83","first_seen":"2026-08-28T13:34:49.490921Z","last_seen":"2026-08-28T14:25:40.754581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2023/11/casinolab_logo-13.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.527Z","timestamp":1787927109527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/casinolab_logo-13.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30122\r\nlast-modified: Fri, 07 Aug 2026 13:14:59 GMT\r\netag: \"6a75da53-75aa\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30122,"size_decoded":30467,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f012dec75623d332f05ea82070716dd","sha1":"da36ef7d99d8a48e3e7a9c620707a5a12788257a","sha256":"75343757db6ea952e05273ee4ea3afa3641af7a3be0c531ddb62e83e9ef67a74","sha512":"082f318726fe7e2549132d72cc8bc42d694db11b7a9b81675839b1b3b8ffe8031f06f49e527dc402753f51cb4dc3f34f3f2ef7d3bf0011a9e972dbc475d3d964","ssdeep":"768:YT7djYZUOfDc2+6VAtIDOCgX7UA0b7AGRa:oylDM8AtIS5Ylb7AG","tlshash":"dbd2d04aa6b506eff23801389d191f72ba713ed06c0270d9e16323ed579d88e15791bb","first_seen":"2026-06-22T07:10:50.511178Z","last_seen":"2026-08-28T14:25:40.756465Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/themes/starter-kit/images/rating/badge-3.svg","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.532Z","timestamp":1787927109532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Aug 2026 08:01:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8feed4-5fe\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-09-05T09:49:21.421659Z","times_seen":78,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/themes/starter-kit/images/rating/badge-4.svg","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.534Z","timestamp":1787927109534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-4.svg HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Aug 2026 08:01:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8feed4-5fe\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1094,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da49c60a038c21ad060f0b53ff910426","sha1":"174fdc729062994bb104f00c9c6072a0cf4faccc","sha256":"addd89150ca262be3c0335ee993d4559fb1d5ce30ac6c25c6c3bdccb7c49e9c5","sha512":"38a85e0737612e812633a5b3f7f66a8bd9609ff6d24011b479ad55027f61373b54cecb7750d75d45fd2765931456920866eeafde617bc6e6d018cdc206d072ab","ssdeep":"","tlshash":"cd31957ee10d2c2af12885bcae52d478047abdfb4cc2000044e1b9abd0a24c60cebe5b","first_seen":"2025-06-05T18:04:56.85468Z","last_seen":"2026-09-05T09:49:21.435795Z","times_seen":49,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/choos-sweet-bonanza.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.564Z","timestamp":1787927109564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/choos-sweet-bonanza.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27166\r\nlast-modified: Tue, 04 Nov 2025 09:53:15 GMT\r\netag: \"6909cd0b-6a1e\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27166,"size_decoded":27511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"769c72477dfdee6371b107f3738d7712","sha1":"14ee624d257772f00a17d66f820a861c74bdcc28","sha256":"4a7797494e62c019125636d721f09f5fb9013efd8d83ed63e169e5e8ee0dae60","sha512":"144066ab2da35d72cf8c23d6a452c6b982597589246637bbc1149f271419d5442a3826389203feac097d73ff31e3f0f576532d697350671898d888705a365260","ssdeep":"768:Y1GcJdkfUtGFJp6+g3/vh/V99eqcPza4+McL:GNJxtMjg3/J99AqcrwMcL","tlshash":"8cc2e167214e2e82e809a4ff5b1432977d96371b07ff08a285e3660ef21cd4eef60585","first_seen":"2026-08-28T13:34:49.445288Z","last_seen":"2026-08-28T14:25:40.763716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.730Z","timestamp":1787927109730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:39:45 GMT\r\nexpires: Thu, 26 Aug 2027 10:39:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nage: 186324\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-09-07T16:43:50.818501Z","times_seen":25594,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":42,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:25:06.870Z","timestamp":1787927106870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbet-casino.pl/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbet-casino.pl/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbet-casino.pl/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contact Form 7:6.1.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":222377,"size_decoded":44933,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"90e5f7aa56cec0a8258afb9da3b0a173","sha1":"4b353a9ed3f3eb763cbbb86188ae83c9249d7ef2","sha256":"a266317156850b34439268511530ff456de315f307649c2e3d59dc82a6a5546d","sha512":"0da2c8dbcfd8ddaa848025f9e81d3c20b857a8159e36087a3258a166105e403f32b1a01444786e0ce6b112dd1999e1d6c156f002dd94857fa3a5c82ca3eef906","ssdeep":"3072:Diozz5SkixaspUU1MAtbQgnETUmaGEWmOTA/:+0SkiuQvnETo/","tlshash":"94242a6b42d0657d213ba3689d427a0cbb2dd043db0245e8b8eed154bfc6fe14876b8d","first_seen":"2026-08-28T14:25:40.766411Z","last_seen":"2026-08-28T14:25:40.766411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2288,"timings":{"blocked":-1,"dns":149,"connect":54,"send":0,"wait":1973,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/themes/starter-kit/css/main.css?ver=6.11.0","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.501Z","timestamp":1787927109501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/css/main.css?ver=6.11.0 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 27 Aug 2026 08:01:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8feed4-199d4\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104916,"size_decoded":18416,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ab4bd79e6afb398ff171b97946e32d38","sha1":"11e4177a619d45364e96033799e8a25b27746926","sha256":"272276540ccf0459ed8436730087e144584f01cbb498ec2bc2af42345ecbdfa0","sha512":"681f37f117c57faccccfddc3cd39e456434ed8613332f0d1adc3b6129b4f9a4af95788ad154bd39db085230f63090889afb94f9cfe0826834b5ed3712d9164ad","ssdeep":"1536:+1WI4eMHa8aqEB+ENWcuYtcJ3SYiLuVENM6HN26KG3Epi5fG:qgCtm3SYiLoENM6HN26KK5+","tlshash":"60a382c7f1a03518d467c61de0d0babe296f4641e3269eebf4276bb487c92c70952e0d","first_seen":"2026-01-04T17:17:18.931393Z","last_seen":"2026-09-05T09:49:21.395346Z","times_seen":20,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2023/11/Gransino-casino_logo-13-1-2.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.533Z","timestamp":1787927109533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/Gransino-casino_logo-13-1-2.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11642\r\nlast-modified: Fri, 23 Jan 2026 07:37:45 GMT\r\netag: \"69732549-2d7a\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11642,"size_decoded":11987,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc8665714f5c5eb37064aa13bf0e13a2","sha1":"c58a01b7c42d3f6f01fa9ed026c6ecc4c259fbea","sha256":"662cf386b82fd6ede759ae2b1c79672baa6a352458405f8e523844ab3f1891ff","sha512":"d5720c283c09882d2f7c4ab18e58de3b909186b79322803d9e859ee881af19924106c90463e30f50d4b8f37b8322293dbc95e004af17e828f77bd7db8ae6ac07","ssdeep":"192:ZwT88rZHYe3PDSIhmR/VSRVOUSsPvpoihsinnJd8Z6zMYaTDXEnqAz:ZwTNF4e3mIa/nUtPvOSnJdbMYaTDXZ","tlshash":"4c32bfa27b24da6ccb1d873719795f81f32812329e01ece48107bdc22a075b56175b7b","first_seen":"2026-08-28T13:34:49.463444Z","last_seen":"2026-08-28T14:25:40.769651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.513Z","timestamp":1787927109513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 27 Aug 2026 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8fee30-169f\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5791,"size_decoded":2868,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-07T16:34:01.171858Z","times_seen":6714,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.516Z","timestamp":1787927109516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c535-30e0\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":3879,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-07T16:22:52.999046Z","times_seen":235322,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2023/11/neon-1-1.png","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.535Z","timestamp":1787927109535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/neon-1-1.png HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 29973\r\nlast-modified: Thu, 28 May 2026 09:30:58 GMT\r\netag: \"6a180b52-7515\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29973,"size_decoded":30317,"mime_type":"image/png","magic":"PNG image data, 192 x 128, 8-bit/color RGBA, non-interlaced","md5":"f5313013bbc5bc0c700cd5cdf60d7710","sha1":"3ce39d2d124d381f4e29fd76a4702e9603233d7c","sha256":"c3beec59e3ce62780ea2ec7c85dda09b31328a1205232ec55568f55d8e5a3aba","sha512":"3869c78e8c5626cdde58f25ac76c34b9abb25159bef187d58f4f737b5985a19c5f0e732d468ce68671bc7db7a4d50fcdc4cf25ab288b086240d5c02093cd6869","ssdeep":"768:mPFJeE2y81sdRgFACgWquMxAKRTT3R0ty4CCBEhH5EYze:mPFIsjgFACgZrhT3RpCehH5bze","tlshash":"4cd2e062e37a73b68d26bdb9431e21d7e60da131997b32be53c770a4044a763542bce0","first_seen":"2026-07-15T03:20:27.04737Z","last_seen":"2026-08-28T14:25:40.779092Z","times_seen":7,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/erste_einzahlung_1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.552Z","timestamp":1787927109552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/erste_einzahlung_1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13042\r\nlast-modified: Tue, 20 Jan 2026 07:58:27 GMT\r\netag: \"696f35a3-32f2\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13042,"size_decoded":13387,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bd88b0ecd2a876bf4ed55d789dc5739","sha1":"1b5f1f99cba12ab380a22fda9c5fe889ed20049d","sha256":"5b034b29baf09073edb9b322972922d767523f34ae69d93fa4648581a16439bb","sha512":"c5dc3d27b493531f492243fe65fe6dcc38e087801ba3754e9d22ad045a1bd5aeaafd4dbf3021d75992d6f4de24ee5aa400b8a6f7b8efe5a824ad59f44e742210","ssdeep":"192:kwT0N719SeWE/gWTkhJFU/lMh+pJpKmxhRV8YA5o6F/05naJ/FH5HpdtCujD+ao:kwT0NONeDMm/b/u5oMma9FZHpdtCuGD","tlshash":"8242c0211ea15e2cf66c36b29dc11ac457b47c80fcc6348ee64860f62737192fb97706","first_seen":"2026-08-28T13:34:49.431168Z","last_seen":"2026-08-28T14:25:40.779941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/abhebung_von_geldern_1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.554Z","timestamp":1787927109554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/abhebung_von_geldern_1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14366\r\nlast-modified: Tue, 20 Jan 2026 07:58:28 GMT\r\netag: \"696f35a4-381e\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14366,"size_decoded":14711,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a3ebca39c7b539be7ff63e9756314a4","sha1":"7430f5ca123708a4d129a21391611c1810870640","sha256":"308d14ce7ca953960bc2cb1c472b218afcc18b540add9b81dea137e61b2d16c7","sha512":"782b337c44b4167a137ccf5b596d11839f507194752a25bcdcfdb86ac822c120dd9d848d091d34c4246a49a7874f34221af036a45475c17050c2d05d414687de","ssdeep":"384:ywTYLqm3tILBTY0ZkSmyJL6VQndoOPD8SJCpseUKwWp:DTYLJ34ZSS3LKqdP4Wey","tlshash":"0652b058133b165ff2e05b7328e07b4a41a76f64ba159fe543a24db6cd41ec1436ce81","first_seen":"2026-08-28T13:34:49.477111Z","last_seen":"2026-08-28T14:25:40.782212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/rainbet_logo_2.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.503Z","timestamp":1787927109503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/rainbet_logo_2.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12030\r\nlast-modified: Mon, 19 Jan 2026 15:42:27 GMT\r\netag: \"696e50e3-2efe\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12030,"size_decoded":12375,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"655288553d20eea43f7044e5ee0d32a1","sha1":"0722e72dfba121613e00908e14910d476086097c","sha256":"4d252265da512fc89a3724aa42de250ff13e1a4c05378d5af5f1b96df1bdf9d5","sha512":"085acd0bd736b4da7cfa2ee95625f483f1b5848caed8476ba2f1744846983e4e992a3a160b5cd62904597a787fd377ae3e78ea204ca279104100545785e208c6","ssdeep":"192:rwT8LYkbcXkpfSZSpHODkCnzMjw4QmtG2W0ysSfUIKWxHFH/e0ykdNkiQtFHMPDR:rwTeYkYXkp6ApWstGlySsWPHqjFHutNl","tlshash":"5142cf4eab930344edc62ebc89e10fa12bbfea41710d4d5d934431af2854c2d7729b22","first_seen":"2026-08-28T13:34:49.485562Z","last_seen":"2026-08-28T14:25:40.784903Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/themes/starter-kit/images/rating/badge-2.svg","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.528Z","timestamp":1787927109528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Aug 2026 08:01:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8feed4-5fe\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-09-05T09:49:21.438092Z","times_seen":87,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/aufzeichnen_1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.551Z","timestamp":1787927109551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/aufzeichnen_1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12308\r\nlast-modified: Tue, 20 Jan 2026 07:58:23 GMT\r\netag: \"696f359f-3014\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12308,"size_decoded":12653,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ecf3853adc750a91d7e40b1dd0bf552","sha1":"3f58b1e1312629dcd4d99ec2c942154c7df84ef6","sha256":"149ea1f0d4340f42a4c3ec22822dd8ace8ac6f5cc5eb86d109ba870efe4e2e04","sha512":"30eedf0d0f2d37dd0641248e9e616ce936ecd97f5d7c9055963a67be604453b19e89a99dfd62e2e37c42a115a3c9fd73a9bd81142284d598af1bef74de87a64c","ssdeep":"192:MwTMhXYcYOqCQsRQf60BS9N7ZfLg7Um9p5iQwOJHmkYV7VL6:MwTMFYc7Kf60GiUm9p5BPG7","tlshash":"0c42d00591306f48fbe806f0f4545e04890e74eddb094af68be717d51b1998b25aff8e","first_seen":"2026-08-28T13:34:49.436524Z","last_seen":"2026-08-28T14:25:40.787078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/Promocje-w-kasynie.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.557Z","timestamp":1787927109557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Promocje-w-kasynie.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14434\r\nlast-modified: Wed, 05 Nov 2025 08:26:00 GMT\r\netag: \"690b0a18-3862\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14434,"size_decoded":14779,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff6619cbffbdbb839799cfe85e65241d","sha1":"d5fb5d2647fc1ebcb30d58cc32ea014b997969e2","sha256":"aa825056bd2d01f0934ad6ca74d2488759b078db4b6f8132ddee3041d471191c","sha512":"fa0d528e1dd5f19d2ebc888896b52f716d5679e6b8afd3b98e3c5786b56b4941e52ad0d3ee1c6d19d464b9e6715a0f0de8dec784518de78c22d15c7282f99e67","ssdeep":"384:+wTcztjch5oS4ODvjqVAe19rSV6GJ8UBMuX+GWP:HTcztjc4OD7qp9rxNncFWP","tlshash":"7752bf5ec43c6aa0d4e142bc8c2673cf679aad93b1791314c26fb5199753fbc6b880c6","first_seen":"2026-08-28T13:34:49.449061Z","last_seen":"2026-08-28T14:25:40.788964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/choos-menu.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.561Z","timestamp":1787927109561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/choos-menu.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45678\r\nlast-modified: Tue, 04 Nov 2025 09:53:15 GMT\r\netag: \"6909cd0b-b26e\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45678,"size_decoded":46023,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d202f23feb439b51b91b6e76652c182d","sha1":"d83c3e0445b2fbc3bd2105451bc757dd90a9db8e","sha256":"e8053a5bfe6f7d509ab5fff4ab901ef846ddf2ca68e6b4a20de7df2d5ec4cf86","sha512":"767c0759b8098c72400c55d0f6d4bcc1f0ea4dfbafe3d36c4169a05a01b4c54bf783cfab4b9a7f916cbc635566e96345194a1d5eb9a70bd00e6b3b522d8b44b1","ssdeep":"768:w0BFySCDGn3xj5nqyuNv8nyQhi+Ia2A9USYYDcbwTB9oTfc9nqMoh6xI8Ynwbbgw:FB4ZDS3xj5nqLkxisAYDcCB9oTfOqZMB","tlshash":"f023022b3e69b6cae97272b46c0e3c64674f618fc9e66f444116270e3b8f2073a15539","first_seen":"2026-08-28T13:34:49.480215Z","last_seen":"2026-08-28T14:25:40.791498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/Wsparcie-gracza.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.565Z","timestamp":1787927109565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Wsparcie-gracza.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12752\r\nlast-modified: Wed, 05 Nov 2025 08:26:29 GMT\r\netag: \"690b0a35-31d0\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12752,"size_decoded":13097,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6216dc23599405fec98e6c2e05467c24","sha1":"b3986051f55e9fa7a06d71b5bb5d82419e77a48b","sha256":"d7a6602077049e1f4b1476e362724b1b113230ad06cc35fdc739aab37af2f3bb","sha512":"5d83b9641f1d6329480e28d180a15b5436fcafd8f21d927d3b77344123aa44f44226f4be769388cbeb3ec3ad420be929cfc1ba2b033a7e6f79787561b00e003e","ssdeep":"384:twTig+PAs+kaeL3kaVvZKbKIMu6AlkKf7IwZro:STigs+UL0+BEdM8FRZE","tlshash":"a542c0408699d31ee455affeac33f2d77051fc276010e8df828b47b52299a85f28c1d8","first_seen":"2026-08-28T13:34:49.453959Z","last_seen":"2026-08-28T14:25:40.793819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/themes/starter-kit/images/rating/badge-1.svg","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.526Z","timestamp":1787927109526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Aug 2026 08:01:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8feed4-5fe\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-09-05T09:49:21.456885Z","times_seen":86,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.511Z","timestamp":1787927109511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 27 Aug 2026 07:58:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8fee30-13f3\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5107,"size_decoded":2236,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-07T16:34:01.227596Z","times_seen":6796,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.517Z","timestamp":1787927109517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c535-348c\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":4641,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-07T16:22:53.123084Z","times_seen":242175,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.520Z","timestamp":1787927109520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:32:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c543-a660\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42592,"size_decoded":13472,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42591)","md5":"966eee900d7086888c6bd24e345ef1ac","sha1":"491665f686c464cd80b35807c865dd9ba9586c44","sha256":"bc595c8641415c3d16715855939a7a0edfc323acca2a3c6869effa7548e05156","sha512":"5d7152d312ca977277ad81dc638c392fe60616e426dd3867bce3d001dfb541689374d17ce16d39ea3a126ff84b1e2059ec8c028afde62a69481988846792dfa1","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQa:LDESVre/zP1vV95t9SWgLt27W35LP5zH","tlshash":"7a13d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","first_seen":"2025-03-01T11:52:27.461641Z","last_seen":"2026-09-07T14:20:25.446571Z","times_seen":2312,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/Zalety-kasyna-Rainbet.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.548Z","timestamp":1787927109548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Zalety-kasyna-Rainbet.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16722\r\nlast-modified: Wed, 05 Nov 2025 08:24:49 GMT\r\netag: \"690b09d1-4152\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16722,"size_decoded":17067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82fed8f56d1406c68259a928def57591","sha1":"c271ecc10732c0493d674501707ab9734f660222","sha256":"7a85d91dc800398cb257b5ba328eea0aec6a6380b0749b944fe9566efb171e15","sha512":"f8d41b89bf3cae0f17f62e8c98e1683673a5e9df9c39a26595ec1e5bfbc703ed399258b32b3a4033495b9f0601ed40b4d81ee31afc008675b7a02dd75ee40620","ssdeep":"384:bwTprUnrfRrQerwRlJ2K03HIIu2CvYn5lzret5CavAN4efTf6aras:MTpE9rLS70rulYIEavAyuTSPs","tlshash":"6572cf6af3bd87adf30334b44dc03bc6d766d2106528b07c58e9a72a42f52571378b12","first_seen":"2026-08-28T13:34:49.492124Z","last_seen":"2026-08-28T14:25:40.80186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/slot-section.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.563Z","timestamp":1787927109563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/slot-section.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45426\r\nlast-modified: Tue, 04 Nov 2025 09:53:15 GMT\r\netag: \"6909cd0b-b172\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45426,"size_decoded":45771,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"680aaf04b86169c67ed2dc8dbe5f0c38","sha1":"8d2d8123ddbf81cb9fd4f227fba0ba3757af43e7","sha256":"357c6aa88b713161f625abcb1735c2fd9830615fdcccd989e5fd1d5d6d6b50c8","sha512":"84cd1a51004901efea81e81360a7a0a42396d7560104c90026ef88fed4e08425b64beaeaac709013a0246914f25647a693a183530e5df474b21875cb54cb6e7b","ssdeep":"768:NbmvlZhfPVM8pXcxt5ZAKfTvDGcaD83jNUpreRwC4mV4BvZ/g9KBrD7r:QlZhlMccp3NaOxUpwz4BR/lBrD","tlshash":"7013f2bf61536bcefde26b793082149b80434fd273c3df6ea649534792965a340e904e","first_seen":"2026-08-28T13:34:49.470719Z","last_seen":"2026-08-28T14:25:40.805576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.761Z","timestamp":1787927109761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 13:16:02 GMT\r\nexpires: Thu, 26 Aug 2027 13:16:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:26 GMT\r\ncontent-type: font/woff2\r\nage: 176947\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31204,"size_decoded":32017,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31204, version 1.0","md5":"644fb0923b00731d39d4d00d701f489b","sha1":"f7366f67d887653243faa2ca4e667fb390577e15","sha256":"53b35dda61b188937bb54ef16f8cbb018fdffad94b3f81c238bdaf764c77686e","sha512":"6569ec4d4a3d2b2f7aac556bcbb8fda83ea1985414979c0909bbc5910bd8f5bd69d1255626269faaacc1a64837501fb6fdb1ba902f84f5d213f49e88c5204fbd","ssdeep":"768:dvyQgaaXB0KgDAyWzjo9xOFqIoQ60ta3w1EOlWooyLDbY+5TMH:8fiDAyEj/FqIIw+ML3Y++H","tlshash":"f7e2f298012f52badff465100b34f7b1c8736ad9e5a243e9883d86f09b5d5e0f44bd94","first_seen":"2025-09-26T18:13:44.653047Z","last_seen":"2026-09-07T13:49:38.804231Z","times_seen":505,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/weekly-race-1024x207.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.555Z","timestamp":1787927109555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/weekly-race-1024x207.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8644\r\nlast-modified: Tue, 04 Nov 2025 08:42:47 GMT\r\netag: \"6909bc87-21c4\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8644,"size_decoded":8988,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b7779a10fd7d239304da746f1e4b4e6","sha1":"f10b23760079fe6931efe047ce5e6d5b1fd71619","sha256":"df2741957bf7cf1fff47f1070d65537b3fc39c3d987aa844f04427810fb6e445","sha512":"a4d3b8e8d3ba1946f4e0407f5743fbcc2dd801ae9271bc9f9f4130895c8fea02367269988566cfc7d2d636bdc0cfb53c66afaa390c92aeedd0c7b279874f97ec","ssdeep":"192:XwTqNOZTE0tnD3W9JIhq/b7cSoW8nE3XDtofIsxZ8G4v6YgZ9W:XwTqNOZTfdD3+acz7eE3ufrxZ8G4vKW","tlshash":"b202af56c3415bcae407323da3af83d053e83e01a5bd2e0642201df43dec5ad05eca69","first_seen":"2026-08-28T13:34:49.452697Z","last_seen":"2026-08-28T14:25:40.807118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/roulette-3.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.560Z","timestamp":1787927109560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/roulette-3.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57600\r\nlast-modified: Tue, 20 Jan 2026 08:16:57 GMT\r\netag: \"696f39f9-e100\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57600,"size_decoded":57945,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1171d9bb2f92b38f5a12e73626266b4","sha1":"555df68558eff06c2db1afbcce135721405c17ba","sha256":"d5304168b63101ef66d9031db363822f4d0f87aa26bff6c09079f72837ff543a","sha512":"edd0a6f2997ae749789c0967a9bc5a934cd4d89319103b8c6fea487bed9b0ac39ca3229c07c40695359b0838b00423411ed19dc5d8a5f269116ae7af27fa08e6","ssdeep":"1536:IxMGdPvsqEXUKVc74DfYllUXggJIUAVa02:IpdnlEM7If0lUVG32","tlshash":"0b43f16aab15779be24a0cb832b33e947587f115d24357ab832df04b13a359c8ca8631","first_seen":"2026-08-28T13:34:49.420507Z","last_seen":"2026-08-28T14:25:40.810746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/main-screen.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.537Z","timestamp":1787927109537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/main-screen.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16914\r\nlast-modified: Tue, 04 Nov 2025 10:38:28 GMT\r\netag: \"6909d7a4-4212\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16914,"size_decoded":17259,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23877ddb9eafffbf3d87631cd83868c7","sha1":"7cc219aa1d9955e863128f5967602a2d5b496b7d","sha256":"4b7d0b99fe5470085c190cb90db6605b8c57c3ba417990f548b55b75d5de2be3","sha512":"9b16b946b48a0015fc0e9ca1941a10d03f4fa778faee4db5bd8b1c6a90298b77789f836c66de24f193c5b895a9e37dcc6cb43d3b1e75a1154b24aad03210dd34","ssdeep":"384:JwToDv00RsSXU2vypN2UHrknBOpMFuMSMriflukSP8:WTNSvvyNfqGKOuK","tlshash":"5c72c0287e2c96d6e6bcaff731743e24cd479a8b07e21ee504c39a2615553c82955c03","first_seen":"2026-08-28T13:34:49.501694Z","last_seen":"2026-08-28T14:25:40.811619Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/deposit-1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.544Z","timestamp":1787927109544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/deposit-1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6852\r\nlast-modified: Tue, 04 Nov 2025 10:38:02 GMT\r\netag: \"6909d78a-1ac4\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6852,"size_decoded":7196,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2b45ec983ffae7341b04d09b90ae692","sha1":"921d00d8693f0c1df3c496fcfd5bc9c6f82d1ed0","sha256":"182d29e4680fa8ad78a6edbd18d61660e614d5ff7d219de0bc0980b33831f314","sha512":"2f80049a3d90aa9c66452e18d33bd661305b13ddb8ab64613157f4e299d931c8b1c18b3e1ee0975f3ec8c29be7ced99f95e1a95da4baa3b9c10bb4c6e6275925","ssdeep":"96:qElbw+iXFamogj9ami1qaTKL7K9FoIyZ9yB2m5ISaBZe1C95EJABM2ShNPXAd8t6:PwTvVj9G1qa8GzJl8t5EjhN/M8A0y","tlshash":"79e17c7a53eb0a15e8045e34b20992c3d7da130a4dc39de2a5982b25a34e55876ba3cb","first_seen":"2026-08-28T13:34:49.455173Z","last_seen":"2026-08-28T14:25:40.813209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/play-game.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.546Z","timestamp":1787927109546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/play-game.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11954\r\nlast-modified: Tue, 04 Nov 2025 10:39:36 GMT\r\netag: \"6909d7e8-2eb2\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11954,"size_decoded":12299,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7479c003dd5a51e3d232a2289da673e3","sha1":"5aebeeb8025cb5c2f6d8249882c6554fbe8f4e65","sha256":"76d0cdf602d71ae132bb60955b7919344a2b4f936a18d00132c004794b46632d","sha512":"96f7f77f1831d32a140b662736f8c0ee50912d5fb16200b0e1c3d746a991e328458c3fbb2b8d3e1b99b69f5e6fbb3201e43a5ffa30347af4fcddb6ec4be6d18b","ssdeep":"192:VwTvkdkXLfD054T1PejTl96I4zALUu13M2NxYo/3467NI7XABNLBksi5N57glsb0:VwTzXDsQwl9ZVgOo67NtrAGSb0","tlshash":"0d32bf3c37a1cfa6dc5729f645640775a6b5bd2287c1437fe703784a22b9322a428885","first_seen":"2026-08-28T13:34:49.447875Z","last_seen":"2026-08-28T14:25:40.815086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/poker-1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.559Z","timestamp":1787927109559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/poker-1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59878\r\nlast-modified: Tue, 20 Jan 2026 08:15:49 GMT\r\netag: \"696f39b5-e9e6\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59878,"size_decoded":60223,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"192c300fbf90a09c27981e15573014e1","sha1":"4abe8467f1a713639824b67e54c60542792e629a","sha256":"edcf8f8e9ed6a6eafcf99ff314d30d424fbc0da8b67dcc37d7cf215c98443034","sha512":"e2a74f798149f1cd656ad8377779b42baed06dda616d87580268aa9db3ce9f6b14684cd2ab03231e29bae35631f4ea5bb2c9ee0e76c5ff046d4d60e8eaac3884","ssdeep":"1536:mrNFMH+a8Pevegh+aMJJJYkYbJCcTBmcCmfsr:mhA+P6ee+a28dLBlm","tlshash":"7343011af6318bfdf378913b42cc82feb78a618cfa168a01413fb7e58a345dd2855159","first_seen":"2026-08-28T13:34:49.443758Z","last_seen":"2026-08-28T14:25:40.821335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.751Z","timestamp":1787927109751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZ2IHTWCBl0-8RH9.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 13:16:02 GMT\r\nexpires: Thu, 26 Aug 2027 13:16:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:26 GMT\r\ncontent-type: font/woff2\r\nage: 176947\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31204,"size_decoded":32017,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31204, version 1.0","md5":"644fb0923b00731d39d4d00d701f489b","sha1":"f7366f67d887653243faa2ca4e667fb390577e15","sha256":"53b35dda61b188937bb54ef16f8cbb018fdffad94b3f81c238bdaf764c77686e","sha512":"6569ec4d4a3d2b2f7aac556bcbb8fda83ea1985414979c0909bbc5910bd8f5bd69d1255626269faaacc1a64837501fb6fdb1ba902f84f5d213f49e88c5204fbd","ssdeep":"768:dvyQgaaXB0KgDAyWzjo9xOFqIoQ60ta3w1EOlWooyLDbY+5TMH:8fiDAyEj/FqIIw+ML3Y++H","tlshash":"f7e2f298012f52badff465100b34f7b1c8736ad9e5a243e9883d86f09b5d5e0f44bd94","first_seen":"2025-09-26T18:13:44.653047Z","last_seen":"2026-09-07T13:49:38.804231Z","times_seen":505,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/curacao-egaming-license-logo.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.549Z","timestamp":1787927109549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/curacao-egaming-license-logo.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18822\r\nlast-modified: Tue, 04 Nov 2025 08:28:42 GMT\r\netag: \"6909b93a-4986\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18822,"size_decoded":19167,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c3a3ab63800e89d25d30ee0cc56c966","sha1":"e0f3e2af0c7bd5f0de099729baac64bcb6bbad44","sha256":"ef2f1998ce3ee51f4fb5168fce29381eb894c7de578ea2f6b5153a111e4929d6","sha512":"7daca79959eadcd132057fae66aed922ebef100a330700abd3da95046bf171f3119f39bf66901cd4f785335feef06c01d736622b1878609800272afe8f690f6f","ssdeep":"384:FwTwuT9IkuXxT+zODGRXXPm838rUSN4sCV65ykLBLz9akm+Y:aTnT6dxT+SYXfmm+USqtV6LdkAY","tlshash":"0e82c1e501ad2f2bed7a7879483c9fd196d1bc7de375812204316b761c40782361d9c6","first_seen":"2026-08-28T13:34:49.429654Z","last_seen":"2026-08-28T14:25:40.822369Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.726Z","timestamp":1787927109726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:39:45 GMT\r\nexpires: Thu, 26 Aug 2027 10:39:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nage: 186324\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-09-07T16:43:50.818501Z","times_seen":25594,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":20,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/cropped-fav-192x192.png","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.902Z","timestamp":1787927109902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/cropped-fav-192x192.png HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nCookie: p2_popup_unique_name=GVgRBVsdHxQbCkoRBVZWG1U=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 23406\r\nlast-modified: Wed, 21 Jan 2026 16:02:55 GMT\r\netag: \"6970f8af-5b6e\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23406,"size_decoded":23750,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3c28c7b7d32ff1726a6ceca2e867cead","sha1":"4ba03f5e3cefc38e76547a0a5cb44faa9e4fc73e","sha256":"8ec2fabb7bfa6737113410236e4f017c49ad3d774ba3d331bff0866d87ced215","sha512":"955489a6a98bf3cd8e67e96f25da20588a9f3a15345ce54cfe9d570532b36004bdd901ee7bfe9195198e43c42a7570dd69301d55dc0e6cb1b7196941e02c5ebd","ssdeep":"384:Ydy4/ZHb6ihztotnu3JJtzQfKBh/MqqPsG0awfJgiW8dUslU+Rlm:MyqZH/hztotkzaKBVGkG01fhaslUslm","tlshash":"6bb2e1f59f881035d0b6a2fc723668ed3d6af42ed2f0340a918c14c1a88b5f1764b6a8","first_seen":"2026-08-28T13:34:49.424973Z","last_seen":"2026-08-28T14:25:40.836587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.519Z","timestamp":1787927109519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/js/main.js?ver=1.0.3 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 27 Aug 2026 08:01:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8feed4-2f57\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12119,"size_decoded":3652,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4059), with CRLF line terminators","md5":"84b71e1835eb9020c7ca700d1aabbf37","sha1":"dc7dd60e16969e6df9d55ca14522ae8ac23707d0","sha256":"0a218b269cc8ae4a4c3b0367add047275973fbe05b152812268dd46bf9b7b82f","sha512":"e1bb3b4a7c978c8ab81c13fd907a9f59ee38d1959af69384c9f06cb4f94b6b3c24561caaa4283aa14177e63f9d3a2a68d97fb25c53174269ad10b6db66bbade6","ssdeep":"192:aB6Lk0IbL9op5vQo6PeoP0vpRJC7lxBFKJ6TQxTEvmgiE/mqjVdGg9sqU34ZOApw:140WLEIo7w3XtvF/mqRdGsgAzItj","tlshash":"e9423e6562712c3a46b26a224e371b05fb3850636542c26e3e1fb68c1ff08918792ffd","first_seen":"2026-06-07T17:05:58.096609Z","last_seen":"2026-08-28T14:25:40.838172Z","times_seen":12,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/reccomendet-game.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.545Z","timestamp":1787927109545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/reccomendet-game.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19144\r\nlast-modified: Tue, 04 Nov 2025 10:39:58 GMT\r\netag: \"6909d7fe-4ac8\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19144,"size_decoded":19489,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c66e5bf3751e2560fa484321496f055","sha1":"c8c3ff82d33299ea90f275e2e610ff3a07e415b2","sha256":"ff8ae76b8b979d61f017166c79d28bce8f1cd25a07a531815d20dede7c075811","sha512":"a0b359b4f4f683836c4f1522015db87dbf745244c081fcaf0df92396a45073264efc6b7a47104b251e877b10d6b6b06861606f0c10329fad0a0bc9ea8d0e67d4","ssdeep":"384:DwTRXQN2QbluqLSaDoz6LXmE4LDPvL0XSTZe4y+AKHBO92vZ1TR:kTRm2Qbl5SMoz6LF4/vLlTE+1hO9UZ1V","tlshash":"9e82c03b81f4e701ebaa2d75d0d88f82f59eded517d2421c9c1449906c5df952c03b6e","first_seen":"2026-08-28T13:34:49.459194Z","last_seen":"2026-08-28T14:25:40.857843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/sport-bet.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.547Z","timestamp":1787927109547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/sport-bet.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16068\r\nlast-modified: Tue, 04 Nov 2025 10:40:16 GMT\r\netag: \"6909d810-3ec4\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16068,"size_decoded":16413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4106638913a41f9dc4a53f02b78721ec","sha1":"4ed7ce9ec7c9b83636bc9526e72573da293e05e7","sha256":"dd4aba77b68230f4ad5c3895ed673d53ae64037b0c1ec9a8b5f09ed4ca891156","sha512":"71b9c23f334abf1bd3252e0a4094b8c26a2b900f45701b8fe44b38fdd9cf976e1df994156ac4ab035ac56728aadfc3f5d20042d980fac891f294a0d7d56836c3","ssdeep":"384:DwTnbAPlQ3+rB7ZRgg5Oj8i2Tb58qaLBmmS6:kTnbL3+RZVwjY5HaBl","tlshash":"3c72e06eb18a3b24f6d05ff845f55d8860e38c3f7eae0da3ee20641620160c1a079fb1","first_seen":"2026-08-28T13:34:49.474549Z","last_seen":"2026-08-28T14:25:40.859809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2026/01/slot-3.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.558Z","timestamp":1787927109558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/slot-3.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65784\r\nlast-modified: Tue, 20 Jan 2026 08:13:36 GMT\r\netag: \"696f3930-100f8\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65784,"size_decoded":66130,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06d08e2980d88e38bfbbc546ca2929fe","sha1":"986ffb3261901e251feff917171fffb80530cee4","sha256":"7ba30e9561fd514dee856c58a4d6489ba6ccb928372e906a25bc4b010870e5f7","sha512":"99a238fa111ccb1271a9e2c1741675e3052f06765ed8615568cc75dac6920a3fd53e00e91f395a36d8f47d05bb4bbdd41198fb45d2593c128a355df464ba559e","ssdeep":"1536:OIf40DWeixGmtoT5gXwvPw7PviHonMl5QdTkcMdh9ig55b+x51:/7ixG425gIsP6Hon2GgVdh9N5b4P","tlshash":"4a530183b0bcc37cf3413b7436381a0a4a5dc9dea025a6958d7d4beb793ba9b7c55800","first_seen":"2026-08-28T13:34:49.478501Z","last_seen":"2026-08-28T14:25:40.861551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.728Z","timestamp":1787927109728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:39:45 GMT\r\nexpires: Thu, 26 Aug 2027 10:39:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nage: 186324\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-09-07T16:43:50.818501Z","times_seen":25594,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":35,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2025/11/choos-slots.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.562Z","timestamp":1787927109562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/choos-slots.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20770\r\nlast-modified: Tue, 04 Nov 2025 09:53:15 GMT\r\netag: \"6909cd0b-5122\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20770,"size_decoded":21115,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2227a25f39ce2c03ba45564dce8f929e","sha1":"0897fd497e0bf84a151d3c87c478cd553edd90c8","sha256":"3a402d05c389825bd29d5971c97d0d8a55a9ee4c07f95a68555dd3c8ecf3d689","sha512":"65de8480ce1a6f60fc7fc67530a74f3fb5a4abe1083832a93c3f81697fb2f731949735060df91fef18ab9e0964151e0dc0c6b1bd9fa4858614f6e2c6eec67f02","ssdeep":"384:4wkJd6nivOCSTY5tpHHTqldN/i6raeEqfKQCeFp3/lhm+phQOxAcreIv:9kTGpC4CnTGw6mwCA39Q+H+y","tlshash":"9392d077b7129b02f878013f104ea3c99185f91ae7fa3a1deb867f626543b335c4a904","first_seen":"2026-08-28T13:34:49.42229Z","last_seen":"2026-08-28T14:25:40.866337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.734Z","timestamp":1787927109734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbet-casino.pl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:39:45 GMT\r\nexpires: Thu, 26 Aug 2027 10:39:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nage: 186324\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-09-07T16:43:50.818501Z","times_seen":25594,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.1","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.495Z","timestamp":1787927109495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.1 HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c535-b83\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2947,"size_decoded":1377,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-09-07T16:29:19.77423Z","times_seen":141174,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-casino.pl/wp-content/uploads/2023/11/mostbet-casino-1.webp","fqdn":"rainbet-casino.pl","domain":"rainbet-casino.pl","tld":"pl"},"ip":{"addr":"80.97.160.174","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-casino.pl/","date":"2026-08-28T14:25:09.536Z","timestamp":1787927109536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-casino.pl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 08:19:35 GMT","end":"Wed, 25 Nov 2026 08:19:34 GMT"},"fingerprint":{"sha1":"8C:B6:8A:8A:1F:94:69:A3:DC:BE:C4:A4:7F:4D:7F:E9:5A:A4:51:9F","sha256":"AF:0C:48:02:29:E4:5F:ED:86:FF:0F:22:2C:52:7C:A4:46:0A:93:E1:CC:32:5C:2C:24:1C:8A:EC:87:E2:9A:71"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/mostbet-casino-1.webp HTTP/1.1\r\nHost: rainbet-casino.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-casino.pl/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:25:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26120\r\nlast-modified: Fri, 23 Jan 2026 07:37:44 GMT\r\netag: \"69732548-6608\"\r\nexpires: Sun, 27 Sep 2026 14:25:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26120,"size_decoded":26465,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"60cca8e7170155188bf7f517aeeaa42a","sha1":"22559dd01aa26d49e8714cb962026697d4cbee92","sha256":"97c625feca39ab59c498286e3c917e75c5fae9db86fb953ed770fb1ebc289371","sha512":"7e43af32458e44e25ad234afce217197ae7ff8ff7c5d6fd787f4e104c537d799e5e434d568035307dd3e367b11bd46626927df16e344a338253c91cb42fd42cb","ssdeep":"768:aT710iL6RkP14CX+7953v6wsNRaaaCPwUbJTDqq:ILwJI+79oXTVd","tlshash":"69c2e068f3d5111fc44056b095ad83a61f5a521f8ad409ceeb4c8664a8b5d3f2ef3cf1","first_seen":"2026-08-28T13:34:49.427131Z","last_seen":"2026-08-28T14:25:40.871142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"rainbet-casino.pl","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}