{"report_id":"759e8335-bb59-4dd7-86ef-79f3f1cc37b4","version":0,"status":"done","tags":[],"date":"2026-08-26T10:28:43Z","url":{"schema":"http","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"172.67.147.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"title":"Rainbet Argentina: Online","dom":{"size":95301,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11594)","md5":"1cb4fc3b507fa2c683fda851519d69b7","sha1":"de413247efc9c075c855bba6e35d42896b77f785","sha256":"b5c523118fa8ec22c7dc675a76fb392c13ce032fd3da6084e50ca4a7b9b17c70","sha512":"e74a5d35c08360e26798394d7fa8f3867a8bca99b3394fcacebfa00e9556d50c30289f45f864a64a4d528b066e4ec5010bbbab1d62110c440cffb43e0c625fb8","ssdeep":"1536:6Fyp/MVK73x0BmYiauzZvDbjMdhERM3Xzgm6LSZwHEoG7SaCNU5m:6ABMVUZwn3XzgmBZwHEoG+aT5m","tlshash":"d89319e1b8c8203b116f72ced146b71da29d8056cf114af5b3fed2549ba1fa479b3209","dom_hash":"domhash644bd694dab057ca9e63606e8e6c83fa","first_seen":"2026-08-26T10:26:00.924214Z","last_seen":"2026-08-26T10:28:45.626989Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"172.67.147.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T10:28:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetonline-ar.com","ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-22","domain_rank":0,"first_seen":"2026-08-24T04:34:29.565158Z","last_seen":"2026-08-24T04:34:29.565158Z","alert_count":86,"request_count":43,"received_data":626222,"sent_data":22303,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:3.35.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.173.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-08-20T20:59:32.456751Z","alert_count":0,"request_count":3,"received_data":268003,"sent_data":1697,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":1881,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-26T15:42:30.199198Z","times_seen":1034753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","size":5677,"data":"","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-08-26T10:28:45.646142Z","times_seen":13271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4190183531b3b668bf517ae448d85885","sha1":"75645da6340d3ec0aef3f631cdccc4d475a3470b","sha256":"b49bbb7a627ec66caeb200fdf2d716eeac779eb4dffc99fda8180a6a243fd543","sha512":"0b01a2c90d2610538ff6a5a5e7920f3cca40515392a8224287bbbac10a9cc362982496b998d89a872140411fc4fa408c448dbcc1fd0e1a82a51413d8a92d9a89","ssdeep":"","tlshash":"67e02b29447670e5c63718b1e90fb14cf35258171804ee05fd0cca499fc03297d66f54","size":315,"data":"","first_seen":"2026-06-28T23:57:34.571546Z","last_seen":"2026-08-26T10:28:45.670502Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-08-26T16:04:17.122531Z","times_seen":39115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d68e2e1a5503dd228c1beba35dee235","sha1":"872c6ba5d6a86069fe4203ffd95799755c4fb35c","sha256":"5c55adf3caf2eea38ff51d5676ee9307e988a2dc7262d370f1678229f47cd0f3","sha512":"0a61ac9e424b633bfcb230ef56efe2fd312e853b2d66490e6ddb3e1974b68ac6292ef45a50e555988619ecf4bf509371a075a386c0618fd1211263268a8dc4c6","ssdeep":"","tlshash":"8a310020e9880015d167cc2dc915bfeed33691b3c8d7075826a8ddb8d9ce3f4a911218","size":1730,"data":"","first_seen":"2026-08-24T04:34:34.565641Z","last_seen":"2026-08-26T10:28:45.672067Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f775bbf63d6b41aaa5be8224ceeef4b1","sha1":"3f46210efa226f245c38546fb55f304b94c26b7a","sha256":"0357c41373e5208f270605acec8633342a6a9e48a3b42aef4f408198015e356e","sha512":"a6514b96cbd28a0949f3b7126f13a9541733ccd80bba8a9f8e7b3c1b6cbc2485be6e7d47ace9017a544e529eef34469786d9b63fccf0914832c3d9d3eab4de8d","ssdeep":"","tlshash":"d0519420b9452e7f83e69b897a13bf12647c052690407cb5f0ed88ad10f6a79320be47","size":2792,"data":"","first_seen":"2026-08-24T04:34:34.566771Z","last_seen":"2026-08-26T10:28:45.672827Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-08-26T15:58:46.606573Z","times_seen":49237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"65a9711cd16325446f398d2a069ce741","sha1":"31cd7598ab00925f5d9934fc521369dd76ba03a0","sha256":"26375b398c65de54121fa87226c7bc1a00ec9e28bf19366662715bd8a8a68346","sha512":"65001dc92a7d2e76e73cf2415dbb70980b5528848ace36e533b0360c066bd4fadcea5b4318565fb5f21b4167484fa52b01a48f6eeda9ab317f4811f750793b47","ssdeep":"","tlshash":"c821f05a1a220f2483eea7d872c63a6f44d403336ad4b95d52ded06000f7eddf0192e7","size":1358,"data":"","first_seen":"2026-08-24T04:34:34.56862Z","last_seen":"2026-08-26T10:28:45.674398Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/wpfront-scroll-top/includes/assets/wpfront-scroll-top.min.js?ver=3.0.1.09211","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a6d9799aa5bca66aaca03ad26e6b6b3","sha1":"59158785f36c66a415d8563beef49310c270d61c","sha256":"7b1a6b8e38a3dc77d351b47f733f436c67b8f66959768b45e98543a5fc655cd5","sha512":"20eb61ef0bb54eaf89250ead4de0020ca0b2ee993743f632216ac2730dcc7e14c9c76e6592183f15000e207cf3b3c5709b129396a440a8910bdde5d0ffccc0ac","ssdeep":"","tlshash":"fe3110ccb82da56343bb945e083f2508f033052b686029881055ccf93f7cdab7a47b9a","size":1490,"data":"","first_seen":"2025-06-30T00:48:16.494202Z","last_seen":"2026-08-26T16:00:06.255496Z","times_seen":3248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-08-26T15:36:48.851248Z","times_seen":30758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/elementor-frontend-js-before","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7435ffa728055b8aa009110359df86e1","sha1":"38ab36f94e5ede4fbe5fce51f63d12efebd5a152","sha256":"13277873caa9241519624da000d57ef544c14f016efe2e5626f6cab2d4105d7b","sha512":"2e77f084277e599958b2c50f86087f24d49541c95b953e5a070c1174067bcd5ed6fdd53209eb650196549971127a556ebb1e503a9e5610bda5ebfb69ed331f28","ssdeep":"","tlshash":"4a618320f9452e7f83e69bb97a17be12647c0526d0407cb5f0ed88ad10f6a69320be47","size":3373,"data":"","first_seen":"2026-08-24T04:34:34.570601Z","last_seen":"2026-08-26T10:28:45.675178Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","size":24109,"data":"","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-08-26T15:59:35.33978Z","times_seen":107321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","size":3721,"data":"","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-08-26T15:59:35.31202Z","times_seen":71748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-26T14:50:09.471008Z","times_seen":205154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/elementor-pro-frontend-js-before","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89edd71d81b8b1f8d312682c3d8af10d","sha1":"27a4e7fbdb995087dbb6315f53b01a828394dd39","sha256":"1287dfca284fab327b523ac87cebd034d4db1f73e75fbf200709c3946cc2ba00","sha512":"2983746f2ebfddb1d6ad2ec8414bddd100bf943cf11cf37477f7162c26b89304865f986fdd9fef16e2f6fc4fe391564d9ba04ca9ba27384df9de852e5423bc38","ssdeep":"","tlshash":"7841ac56da220e2483aea6f862c63a6f44d40233d9d4b95d52ded06000f7eddf0192e7","size":1953,"data":"","first_seen":"2026-08-24T04:34:34.57174Z","last_seen":"2026-08-26T10:28:45.675993Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/mobile-menu/includes/js/mobmenu.js?ver=2.8.8","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a7a1c044f6f8909b5ea70ca382daaaa","sha1":"08f867d94047ac90852fb908b10a4ba8d8fd4eb2","sha256":"6e3737afae6858e7285d7cdf82d197b11e7090fe637d760cc82b5dc4ffe6d544","sha512":"c0973666b3762f86f686317f771c7b13b264a696f13ea4a20db4e492e3ac459afa46dce60fe7da8ccb2b03601524689dc07cff3acc3cf20d2c10832e28312b78","ssdeep":"384:tEIZQL8t9OcbPKStZmMC6eujK1xbK9dO1996v:lZvK6XjKod8q","tlshash":"cf72414937f220b280fbba7d0b8fd5116234458ba90ace487d5d1fc45f417662af2fa9","size":16173,"data":"","first_seen":"2023-03-10T02:44:22Z","last_seen":"2026-08-26T10:28:45.65829Z","times_seen":2032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wpfront-scroll-top-js-extra","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b94f5029fb7cad2deea4e9e586fbb5a","sha1":"9de0e9365537a4cbfb74e6a1f82f5a9f95de1368","sha256":"0fa9a8b8bf610d99fd0d7cbead30d0617f1911643632abd6a7b16d0a2bbd982f","sha512":"b4f9be5cbababab4d378d6dab1fa6fa4ac7c6580b7489b52182ead6a43bbed3beef8f3c60a79ab08ad5ce0ea47ca2a238792cfcafcde68f57637a6b0afa25f74","ssdeep":"","tlshash":"7f410020e9880015d167cc3dc915bfeed33691b3c8d7075826a8ddb8d9ce3f4a911218","size":2302,"data":"","first_seen":"2026-08-24T04:34:34.574029Z","last_seen":"2026-08-26T10:28:45.676775Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-08-26T14:54:14.636273Z","times_seen":71263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91e2eace8652a661d8c8bdf6613236a7","sha1":"afca4a2a64f51b1f213ddfae9f270c8add2959a0","sha256":"7121fc5dec5cbdfb78786cd4018f5239ce4df4745abbbf20be2a1d17cc23e1ea","sha512":"d383cb0e216b4f724dcc706b945088c8ac213c97e44b636ce99b76d054d729abbc9bcbdc5058960bc2b145fd9273e77672bd1d26de27059380c7aa071a6fb90e","ssdeep":"96:BEdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:eTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"9bd1569805489d2b26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","size":6248,"data":"","first_seen":"2025-08-11T06:13:36.205631Z","last_seen":"2026-08-26T12:49:46.36766Z","times_seen":5932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-26T14:57:30.883132Z","times_seen":202087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecf80cbb272e8005df8aa6ec914a6124","sha1":"5eae643d58d6d99f51474b2bf2eb4d3ad6fa36e9","sha256":"a2467aa115eb2eed954a7f2612c08c1a4f74d660c873528f9fef23a1e4ac4704","sha512":"0b33cc377db797b7741bb0b9e912d798a7decda063d577f28cc380f4f0071b4f9a5d4ddf805be70c98fac9f30dbc18cb86ca8f6fffc8710ee3978f9343a40aab","ssdeep":"384:Qxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Qxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"9bb2d9013163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","size":24210,"data":"","first_seen":"2025-08-10T22:50:09.558424Z","last_seen":"2026-08-26T12:49:46.443872Z","times_seen":5955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b1e4ea934ae31a60c0b66ad172f0980","sha1":"59e3a242b9dc383309a234e99fb4f53320cc48ba","sha256":"53880e82fb33ea08b7ff2de3b200a72f64ee035a76c7254045dc82ab04da067e","sha512":"723905055c0e80739f474b72a2d347996bb453f5cf8c75f6fb118c9034e2dd1670558e4ee3e68afbc7d5b8aabfd634098b6bf0662bbb115d1690597be83cbf14","ssdeep":"768:W/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Yt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"5513a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-08-10T22:50:09.603161Z","last_seen":"2026-08-26T12:49:46.346321Z","times_seen":5928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-26T15:42:49.457468Z","times_seen":947145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","size":1846,"data":"","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-08-26T10:28:45.667988Z","times_seen":14084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-26T15:43:30.180509Z","times_seen":346982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-i18n-js-after","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d69e0adceabc68d9a41370a206f62a5a","sha1":"ac2decb6364ac8c303ad83181d6ce104fbf4d9a2","sha256":"27ec5f15ab2a8c563930b54f2a0a1ae210c79cfebf3a3616ffabbb68ceeb7ce5","sha512":"6d851f9b48c8e9df6ded1607b4fd1e70d6099c0375d89b44f4dfba8451092365b7f6c6a0cf8a5d3e5be1dcdf75902566f56b714b39a838ba74942435974d6fd3","ssdeep":"","tlshash":"d30112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":688,"data":"","first_seen":"2025-12-06T07:49:18.765788Z","last_seen":"2026-08-26T10:28:45.677892Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b0105798c2209b64fa1ac129f05957a","sha1":"97f464a0386771314d2ab5f8a24a5a8f4bf86e2e","sha256":"fe27b1e2198de4670b8143d0e022f462567a44f244848adb27c8d3602dc59c64","sha512":"b6ce6600618798f2e9da08c88e154f762b7c885e196aeb990c14cd110339374f086667e2b59e98e9aed269b95e009760684cb0da30cde00cde46cf0e8e43031f","ssdeep":"","tlshash":"9d71869ae77638dfb2f900f2697e0d47eb614435d6c8d438c9bea3141cb58a3c274a46","size":3575,"data":"","first_seen":"2026-08-24T04:34:34.572887Z","last_seen":"2026-08-26T10:28:45.678819Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://rainbetonline-ar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/mobile-menu/includes/css/mobmenu.css?ver=2.8.8","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.342Z","timestamp":1787740093342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/mobile-menu/includes/css/mobmenu.css?ver=2.8.8 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bmYf7Zo31nm1ZcGbzaF%2BESzAe8%2Bzeem2DfVbKJRKlwucnPev59ChyO7iDvA%2FmaW9v6muoX%2FOgN9kLt%2Bup%2BNoeo9o%2FiqANDk5vjRibay7K90%2Bq%2BqtpoA2PCtlxU7o83Uc%2FeFjfL2qzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"54a03edf07892f1ee2596adff7cf0341\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6ff8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8600,"size_decoded":3072,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (400)","md5":"62bd0bbb7661b81231fdf47aa5e637c7","sha1":"a76c13fc4f1fc4e80268db43fc209a9831c0f305","sha256":"e2075aef71bbc7e753f8e18630c67d400da5fbab6d33cce8de7814a7ba36f641","sha512":"40e6a32788fd925ce8d521f3fdce410a9e8c9ebf7e7c80980c1828c0ebbfe4c84f9afcfb7705990db38bb5743dbc9190fc94d2a4496561c3e8fe2f7bfdccb86f","ssdeep":"192:e026JxBhDPAI2PAmcpYqmOl4GyYmzz0+5rIE/5HOpixSaxnVntqueuqThiKmF6FX:etVZNBrhuUP8ueuqTAtF6FZJ","tlshash":"670243c44ae320009563e56d9bdf9715333c93039b0aecd8bad126cd8f8679896d3bb4","first_seen":"2023-04-07T11:31:32Z","last_seen":"2026-08-26T10:28:45.630381Z","times_seen":1815,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.344Z","timestamp":1787740093344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptCuIiH31e8TRINg3Ui16HuUEscBd75FS6IFA8D4gY%2Bc7xPGtWmy7vg3rTpWhiD2hiMzRfpWNyU6dGQ4pht%2BWAPqkoluvnYC7nnKY0TzAeaXvzAeuC%2FU%2FdxXF1SIWmZ60UNzj1IzSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"ff416357a541c2641e2808b797569af3\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6ffb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5885,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-26T15:42:49.457468Z","times_seen":947145,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/2026/04/cropped-rainbet_logo-3-192x192.jpg","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:14.061Z","timestamp":1787740094061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/2026/04/cropped-rainbet_logo-3-192x192.jpg HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bj46Bj6wrkFKnkROeP1MwUCffbnD%2FQONAS10y8V0Z5iC1KXVJcqIMoDjATh5D6%2FrFwNoS9Z84w%2FhYn6QEoRMIYQ%2FV4EFwjOZUNYXMTDuyloRhHXXhOo8f6leiEr%2FfJGfmnErtiLZ2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7ef9fd4a2700d8aaf301a9ee35d5ea8b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 26 Aug 2026 10:28:14 GMT\r\naccept-ranges: bytes\r\ncf-ray: a3122603e8ac723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3995\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3995,"size_decoded":4823,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"34ac1194dee8d956cfa442e51ebf9950","sha1":"b941d34af6dc234eec3cfb604b79c24b593f3fb3","sha256":"3a059532c94ba715e802789343ca74ac7baf5d62472e1f1779d391ad260b8b50","sha512":"39a60d9af93fee314790b6ff25e00a97b6beeec013dca9ac9caa20030e56ba6cd645c3ab1d124c1fb3b7b59c4d010a2bf02491abb32bd495ec7191c36fe4d5a7","ssdeep":"","tlshash":"59814d0b1b01c780d8536dbd6e0a8d0555422d39eb6433597f36c99aee10cdeecc65da","first_seen":"2026-08-12T01:39:47.455145Z","last_seen":"2026-08-26T10:28:45.632957Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.115Z","timestamp":1787740093115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BD53NISsdyXtZTwnTi0qHltie6yis%2BDZXp5s8vvf5WHY%2B77mS95u410LbZwOlVUTuzBL7ThwUP9mjTXMw0NeiI%2FeHH9nWj8CpXXSV2202ZY4jEyrOZSaUoko%2F7IUvTkFL%2BqEd1krw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"224ddb5709a81db7a50d43ecb292d94a\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fdff8a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5456,"size_decoded":2564,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-08-26T15:36:48.818187Z","times_seen":43800,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.123Z","timestamp":1787740093123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.31.2 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcqiPLCQa3SEPNRVgxTQc084Dr5Xqo%2Bg3advv%2BKAbZdtSOU2nJHprUGFpKRJ8NPT4na2UQxQip0oTfvCygNl6sMahtiw1HJ%2FI0%2BJqSJGy5xPFESs4InWvp0nJgW6WaKMQ6gvRgXMhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"cfc4bb6d58349f409476795744e13681\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe0f93723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27364,"size_decoded":4408,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (27319)","md5":"e5d8795ba0559a3dc0d2261ad7a3814f","sha1":"bc342805f68ef7541158722554bfe04361271d54","sha256":"f637e1ffde398540fe0e32ab1dea43b65fc52fe6bd1d5c3802a2d8e75445d3a3","sha512":"0fd92c3fbaac3749a82fcf122303feb2a4477222ad0888e3c6ddb536d8f36229028be46a1985297379fdbea1b589d96cf64b0616e63af36a3b93aededdc88827","ssdeep":"768:crPoScoKjcUlwvGQzKVwGz42lvQz0ABI5PmBMqRIEEtCelEqJUrY+jz:w","tlshash":"7cc27a81be93592f032f613b91e2c60c4f9519c8b2a176a9f0f5910f41d7d5c6bb7b22","first_seen":"2025-08-11T06:13:36.216934Z","last_seen":"2026-08-26T12:49:46.401212Z","times_seen":2792,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.343Z","timestamp":1787740093343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DK6iAYyIyUWpzOt3U7val4gEbtIP6XGg8Fa7kRM3rVslkAw%2B18DS%2B8fc%2BzW0%2FaHgLNXYj89yN8rL8L7qCElbmOOUMBxdtjh1%2F5nVeEgqcmiaf9bzxzY7iExbQQ3aq8%2FuDSEFDkx2qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"4faaa9d1e8ac6b951abd4ab674ea9ec1\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6ff9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":32363,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-26T15:42:30.199198Z","times_seen":1034753,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.361Z","timestamp":1787740093361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.31.2 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1rS7LYdCLiuxAyu7NeAL2w%2BvaBT3sRYmLrAMMA1cGNEjMMwmfhXBPQtMEv4HTNKXN7QCmPY7oCdeDbV4Al7moBjmRnqWUlI2uSBAPgTHG0KReKAzcNMpgbNWUy%2FyuqGUzZbq6KKSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1a5ff80b62c4c8c33203d743e3a6d40a\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff880a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44670,"size_decoded":11998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"4b1e4ea934ae31a60c0b66ad172f0980","sha1":"59e3a242b9dc383309a234e99fb4f53320cc48ba","sha256":"53880e82fb33ea08b7ff2de3b200a72f64ee035a76c7254045dc82ab04da067e","sha512":"723905055c0e80739f474b72a2d347996bb453f5cf8c75f6fb118c9034e2dd1670558e4ee3e68afbc7d5b8aabfd634098b6bf0662bbb115d1690597be83cbf14","ssdeep":"768:W/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Yt5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"5513a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-08-10T22:50:09.603161Z","last_seen":"2026-08-26T12:49:46.346321Z","times_seen":5928,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/2026/04/cropped-rainbet_logo-3-32x32.jpg","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:14.062Z","timestamp":1787740094062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/2026/04/cropped-rainbet_logo-3-32x32.jpg HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pdEq1sIfVfocV71vCd4WiItcpu%2F94y2mPbW9eEcBeqq%2F5AUG00WnKWbjV1Nlo9ABXrI0Q93NoMJPeEcqj%2BjdaCdsM8P4ksRsPbBdG7p1KG3bxMYhgzA1ZxDUdTeuPgWpeyiLVqNqUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"31bb885f32970597f386b12781f9d799\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 26 Aug 2026 10:28:14 GMT\r\naccept-ranges: bytes\r\ncf-ray: a3122603e8ad723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 935\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":935,"size_decoded":1756,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"005fcef172d974bf566eca8d9bb824a2","sha1":"46ac293289eae8982596ea4c06bc7fccc93c0f55","sha256":"8af8108d37b2e7ffcccedfb5cf352192690d7bba12d8ccb64bdfc51c8893d424","sha512":"40ea8a613574d140e0cf0052b268b3e1f52f30e0136aea3d26b5931a7cf7652353b1c6a4c32adc28031903410aba475f1e93c82da3731d4f18b93860025bc5bc","ssdeep":"","tlshash":"1511962f975203e8dc134dbb5d41555ba28f2f41bb54e700be71d2a0c520cc8b4cd99d","first_seen":"2026-08-12T01:39:47.466268Z","last_seen":"2026-08-26T10:28:45.638391Z","times_seen":4,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/dynamic-mobmenu.css?ver=2.8.8-200","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.338Z","timestamp":1787740093338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/dynamic-mobmenu.css?ver=2.8.8-200 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVyHJyK%2BvXk8CqAMRghUTKsMVOCoFBH5NBQvA9vBfR8UnJ58nh5MotnUsvaMwsRx9CfahHpukgDStqWFZKQmvQLwyicIRo72VkmY5RsaR7PHW6iK4WHVsuIcd7w0UMTGXmuRoVmOMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"454c85fa8b66558c3c34e63c552901bb\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff5ff2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10183,"size_decoded":3032,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF, LF line terminators","md5":"230c5b930d7e76b6b32dd58eb03fcba6","sha1":"e2d15a26c6d126dd0ba2c45d83fc061e83f37001","sha256":"de167571d2a8b0e2989ba79fdd127ace203f821998d96dae3178100cac5322d4","sha512":"6fa04f4294ff35ff29b59bd3ef232896aef7d7a36cb1cc8fcdfb52cbb6886ef6fc25c0413d7c8e878ef4ab07d57039d709ee8fa10158d1d2913bbfbb0dce7408","ssdeep":"192:/m1/g07dkqeMXwTpDs7dT21z2CttMox0XwuZi2spkFBeen:+1Y0pkOZiro","tlshash":"bb22e081cbd54002a260fc6baedfba61033c57539b028eee74a554999bc13811fe7eb5","first_seen":"2026-02-13T05:38:08.206556Z","last_seen":"2026-08-26T10:28:45.639295Z","times_seen":74,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.353Z","timestamp":1787740093353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZe7Dlp3aKL1kWfQItGAYek6iX%2Feyzq1I9dUq3oCE7FITZ36w%2BvDP5w8114JfLSNhHUOKP%2BNti%2F57INQqDI7CmGLSpMNQACdjbF%2BOriDuhPEf0rSb3vKODQptEyV4ASh4nNydbr6ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8e43c119a4115fe9c546cd57171fb999\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7804723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24109,"size_decoded":8327,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24021)","md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-08-26T15:59:35.33978Z","times_seen":107321,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/elementor/thumbs/rainbet-logo-1-1ts62z5exrdcw0x0k93n55p6ks54ojv6jjo.png","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.625Z","timestamp":1787740093625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/elementor/thumbs/rainbet-logo-1-1ts62z5exrdcw0x0k93n55p6ks54ojv6jjo.png HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=931Dp29BJ%2FRxvra%2FmNMTIa3yVTak82QPdwtz8BruNUvrgV2O8pfTeoDnRF2GsguSnvRI%2B2ySkLvOCAODVdpvQdn8eq04cZOt71JyjGATfkz%2Bp5cgO%2B5Bh1folFZUG1dRAoq6BZru9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"12385e5b14c1b54aef7a15c17c98eba9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\naccept-ranges: bytes\r\ncf-ray: a31226012840723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5955\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5955,"size_decoded":6777,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"a5df37cabd8a06d7625930a6418a9ec4","sha1":"5db2dffb10b46eb549589328dabf5ab2cf7bc846","sha256":"375bb3ee5aef52b5c36e83c51996cfee82b9c17082e21072792221e4269e2fdc","sha512":"482d63716a2bca38fd4257510c160d00bbb9df6e3ca05d7985b1e31c971aa291420ef15de7fa2ae9da14635a5e01b52ecb8b0a89ba791d16daf4e9dc983e5f5c","ssdeep":"96:tZVydO1YFMZxeoqUszFhepfM+AZNjaY66e7fPvJvKay/mGSYCgTIz+zoIj62qUfx:nVy01Y6b/qFqrAbjaY6f9K+GSVgk6Xjx","tlshash":"33c19eb9ddb897e1b4dd2bbb51001c88e257c3c2dddd60911436f335e09e88ae560565","first_seen":"2026-08-12T01:39:47.449789Z","last_seen":"2026-08-26T10:28:45.641064Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.768Z","timestamp":1787740093768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MmP3lkQWJNleeMdajQIo6r%2F8fEpwqsAR0wjR6ad5ooMMCmYgQIJAdmejw7EZX0htbz5aHC0m%2BH3TiYKaE3q4Uckjbb7I2PVK1NLMtKcnz3nLJNEKw8xz8b%2FVDiDIvdFbMtthYzVwrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31226020867723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T15:40:45.624659Z","times_seen":18115603,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.118Z","timestamp":1787740093118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEOqqmPlsYInSQBXY8TXUPFotY9a3xdHxVSovSpSNzluwxHS3H6y9uaaDphdZgakxjx8UZ1cuUW3%2Bnp91tx46xlhKHN1YxVNdN9%2BdQzSQq7TyFvFAdLwvmZGR8%2Bk3j665knMqUoQQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"a913c20c51ea92cbd79eacc7157e9acf\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fdff8e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7182,"size_decoded":2241,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-08-26T15:26:48.261787Z","times_seen":49927,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.122Z","timestamp":1787740093122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LA%2FhTM4FYo9k9qTsh5WNowCvsqjYDzvTeTSL06taYbBvRzxfWj2Mql7EVwOv5foxO4xSNsyFj84ldTamvyvVK%2F5PMH1kBp5J8GDa5wcrsbvHkqAkCDVH3iGfSCbJX6DHuQ09jy5gtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"55f87162a17e4b1583d261498b9e5952\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe0f92723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":942,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-08-26T15:56:00.826187Z","times_seen":122739,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/mobile-menu/includes/css/mobmenu-icons.css?ver=6.9.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.341Z","timestamp":1787740093341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/mobile-menu/includes/css/mobmenu-icons.css?ver=6.9.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7A%2BV%2B%2Buj25IOpUyaIUVGWiHop5Akr6%2FEvHlJcfy24UVRnGkkPxatZ6KiLtWb3pxbooePLkKVTHB%2B2eYQTr8i%2B1lc58%2BEhYoATaE8pLIWIXmgy0Wt5NGX%2F8hRUuBBVAUDW9EW5mulug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"77d315ef826467f8d390aa57206dfbc2\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6ff7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5252,"size_decoded":2146,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"718fe426387df8914538d894c0655f81","sha1":"6f4ebb28dbe8a8033edc633a0397b43d26ae2114","sha256":"4311d512d6cf14e70081a47226237c6fb2fa60b67b6e39f236fd599119a49b79","sha512":"1a24fb4afc1d5fb7429b36b222b8dd880766a7873d24da22856df0f3f5b0d99da737b11c8b3b1a6b9b54d98581aff00d5a2581a961697e5a5016a066db0dc8c1","ssdeep":"96:3xFR5r5IOBOO4c6enMegk4a7Ec1UCzz3uQT7ZwWsls6S:hFRzd4cVbgk1751UC337T7ZwWsls6S","tlshash":"aeb19cf28d8914810fb5e78427cbb364234cf319da45cc91f9029e9ca6da2a153db6fc","first_seen":"2024-12-11T10:30:11.817919Z","last_seen":"2026-08-26T10:28:45.645302Z","times_seen":1430,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.350Z","timestamp":1787740093350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TS8N70lNtufMIfV1jumlfIufewW0ywEsSmts2ojfqZQmBqwVnLVfNcZvGQff64Fo9KXRPK5MdjAG7lJrnp86lWk5wTytotuBdI1YAlQznnCp1ZYgsgOfPThq1M02y%2Fy3MYb33Y4QaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1a4cc9a5e54a64a4d47bd5acec94dab2\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6800723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5677,"size_decoded":3305,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5677), with no line terminators","md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-08-26T10:28:45.646142Z","times_seen":13271,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.353Z","timestamp":1787740093353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5k3GHUO6ShsqjdWA%2Fc2muTrxMRlONb3gUUh7Q5FLWPGU91PmB7kPhIMATVgrUsYY9oIlCAm44jn65zvoq9O7FInJlYFm1MJzMKuSuKtXiBFhSrC%2BJSZQN1GHcs8M21f0Tpa8kqthyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bbc506b038b7014740912f27ccb8fee2\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7803723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31880,"size_decoded":11691,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-08-26T14:54:14.636273Z","times_seen":71263,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/ZKkRTMt8/68152d8482064563568f87fa94171236.jpg","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.531Z","timestamp":1787740093531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /ZKkRTMt8/68152d8482064563568f87fa94171236.jpg HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58618\r\nlast-modified: Sun, 28 Jun 2026 19:11:04 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58618,"size_decoded":58984,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 735x490, components 3","md5":"e2e8425c58abc8b01956ec848bd10077","sha1":"0dcf6344aa17caf71cef8a82fb392adad9e20a87","sha256":"0ec527779ddfd4433798becb71b57bf66526100522efc0e1a95482ac80f1a56f","sha512":"894ad42b11211a03667c4298beb7c9306855867d09bf61094db13f38517556ae8bb062e4172c4c787ea7d08f0d1349f5b5dc67e902156208df275f3d603868bb","ssdeep":"1536:6aBvfZPihZ0HnpG1EiiGurWxoquHeUWkaNoyTXu:6QpHHWEiiMxduH5Ga","tlshash":"1a4302ae3731a6c3f80e9e7c45cd5217dda3e8943f214789d243126d9f5c170aa3ab29","first_seen":"2026-08-12T01:39:47.488118Z","last_seen":"2026-08-26T10:28:45.647884Z","times_seen":4,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/wpfront-scroll-top/includes/assets/icons/1.png","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:14.070Z","timestamp":1787740094070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/wpfront-scroll-top/includes/assets/icons/1.png HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5NMXc%2B3hHFYZUjabQ5Nola8dKrMU2D2UsgVAdounZgqa6AJh3g5sTrJiebgo415scsVjDp3r0BQnftRDy6dSmxW1ObKD8zxrp8j3e6v5iagpyJfO%2B4UqKbiGoWvbe1KolJjM0U5xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"de1170f57334854f344cd2aa38672e1c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 26 Aug 2026 10:28:14 GMT\r\naccept-ranges: bytes\r\ncf-ray: a3122603e8af723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":773,"size_decoded":1588,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"93f66586b9c8b7ec4a5316f23d89e1eb","sha1":"e9397f9512f3592393923b71dfe25674a83503d5","sha256":"5a0dca92ff50b14535e86aa2ff9063acfe78830f1086726e6ff2670d32ba3d08","sha512":"4864b2507120cb1335959ac6e5ee38b65942b814c0732baa3a616cdb877ec4fe83413ed6ef642c0796cda933f64e6a431e4751095c9063c3b1e53b3b14bd7647","ssdeep":"","tlshash":"bf0188a61f848e35c7915ef18f515cdda2151cf217c181d529698b939ebf1bcd0306cb","first_seen":"2023-05-17T20:27:38Z","last_seen":"2026-08-26T11:15:23.644496Z","times_seen":1902,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/wpfront-scroll-top/includes/assets/wpfront-scroll-top.min.js?ver=3.0.1.09211","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.347Z","timestamp":1787740093347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/wpfront-scroll-top/includes/assets/wpfront-scroll-top.min.js?ver=3.0.1.09211 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvLjZ91rz%2BcQ284OsVbc76frrh9uNJEdgzg0NkXxh9KGupc5lHWTlD5XwnLwb0CbUUSqhjQQ5KkxF1mbmaFrzFqp1yMKBrxK3tKcVzEh7TkNwEf%2FlXMtTQB2uO%2Bwv%2FLTCtHiNLDx2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8729c14603d87e0dcd88868c7281a3a7\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6ffd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1490,"size_decoded":1454,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1490), with no line terminators","md5":"6a6d9799aa5bca66aaca03ad26e6b6b3","sha1":"59158785f36c66a415d8563beef49310c270d61c","sha256":"7b1a6b8e38a3dc77d351b47f733f436c67b8f66959768b45e98543a5fc655cd5","sha512":"20eb61ef0bb54eaf89250ead4de0020ca0b2ee993743f632216ac2730dcc7e14c9c76e6592183f15000e207cf3b3c5709b129396a440a8910bdde5d0ffccc0ac","ssdeep":"","tlshash":"fe3110ccb82da56343bb945e083f2508f033052b686029881055ccf93f7cdab7a47b9a","first_seen":"2025-06-30T00:48:16.494202Z","last_seen":"2026-08-26T16:00:06.255496Z","times_seen":3248,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.351Z","timestamp":1787740093351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1kLz5oaLmjWrn3BgqaVqWPnUDL3wFgLLFtaTNR0mUZIT3O%2F9Ajg1zvu0%2BVwQ47oUAU7b5dR293mT7b76rDjBd%2B7tM0%2Bhl1AsQ0EzzuwjJVoy2ef%2BdP25EIYN972avIjw7WnVYf2Cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"552c0f364091b2644fd3371049c73c89\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7802723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":8138,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-26T15:43:30.180509Z","times_seen":346982,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T10:28:12.771Z","timestamp":1787740092771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryFcxUq%2BKZnTC%2FH0wU1t5ITuxW2fKyEi2JIsa9n5d4NElClhYxDiyx%2FAh0%2FiNFf3FI1m9Qc3%2FfjNLaMcAZhr7QBXDMtlLAdAtFeXxWvFLgF11qRaGhy7GXVzI9U8%2Fh7rI%2F9E5UnlmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 26 Aug 2026 10:28:12 GMT\r\ncf-ray: a31225fbff42723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.1.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:3.35.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.173.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81424,"size_decoded":21296,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20803), with CRLF, LF line terminators","md5":"085a7069c2f93aa72011a94853c298ca","sha1":"18658add824e39f8302fde118dd6f9ca987e5a4d","sha256":"b6ef30b088f51786384dea9e316359c3fccc0d380e438c7b5f85d84441b1351b","sha512":"261a65b2531e65f508f5a1203664172cfd6806a7d6a546140a6fc840435f8dc7bf6f1e325d25084c8f55256613c721134620b7bcf5974eb8f806d9f2f0c9cc17","ssdeep":"1536:HJypxVS73x0BmxgKZIhbSL0M3Xzgm6LSU5wHEoG7SaCN3va:HEbVQWuB3XzgmBU5wHEoG+aKva","tlshash":"c5832aa1f8c4103b116f73ced546b71da19c805adb114af1b2fed1649ba0fa879b360e","first_seen":"2026-08-24T04:34:34.52228Z","last_seen":"2026-08-26T10:28:45.651294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":7,"connect":19,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.116Z","timestamp":1787740093116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWSV9aqpbAanJdS3ws%2BthqDAz3b1S8DOC9bflwDwO4PibGxe8%2Fj13um2u1%2Fb%2BWUB1YIOLqYpzB9%2FOUxhbl6%2F1MU09KXJgEvbS8yKgVeAaTVD%2BomwnsrciGs1myt%2BxFTo9EE4vSMQFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"a5d02bf71c61e1e3a0c760ad21eccc73\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fdff8c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5097,"size_decoded":2090,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-08-26T14:59:47.120389Z","times_seen":49971,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.130Z","timestamp":1787740093130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.31.2 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zGvT4I0OnPcsIOA6e%2FXa7U1rmV1VtV7KBMzmEVvLixoFyQIZ14KhSypHI5Q%2FpPpE%2FRKQGzVAAXFjH%2BW74imvVSrsIChiBCWAQ2GWrRohMvQtYYS2qTLgb6DoQBuh%2BzxhFk00ERbWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8e03df977d963ce720a4623f45f9bdf6\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe0f97723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":932,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7305ed8a30b2e9610fea4e383b7d1756","sha1":"24bef514e8dbd4dc0cbebb686639085dccbb9b4e","sha256":"6f0b2e96bd88c2d8512dfd204adaf2251376467a1f834a51c66ce85f0051979d","sha512":"cb9938e53724a35304cd932207fc9a255f4aa51ea111168e7fe4f9871435e5430a0377886243a4a62b3c2de92f143b88608a460086f6f482e024d251d29be11d","ssdeep":"","tlshash":"82c08c847a8fc830c03fb291088aae1c036ba8c34a90408aac12a00e0aedfe512dc002","first_seen":"2024-10-29T10:46:14.149107Z","last_seen":"2026-08-26T15:02:05.42644Z","times_seen":56260,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/elementor/css/post-1409.css?ver=1782674461","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.132Z","timestamp":1787740093132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/elementor/css/post-1409.css?ver=1782674461 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0aXOGWVJ0cW3a1puzlD35d16TaPDkvFdZs8YZgzvmYdUHUoxhmarKZghu0vcigcVe8ydduP04VYMKsTBYSRwZiylyJLbnYlZohjG4lbcJNEi0Co%2Fd%2B1qfI0Tm%2FOp3d2wApIUG%2BEHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b080925e515d00f4e0d392ee33d6bc29\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe1f99723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":959,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"c880e57ee2a22b060622198324cf9cf5","sha1":"bb235a19e519dcbfb06caaeec0077522a9fdf047","sha256":"fadd5a343aa45c3f20cfaa2bd2846e6ccf4dcbab29ed83a3822a9c47666564f2","sha512":"f6afe042160ed5d268c89d0b18e2ea6a25cc7d668b203393e02dd1e630acebf2ad5833de552d628aecb290ecf60abeae374148f8b49d6d1bf352e19d7a17913b","ssdeep":"","tlshash":"bcd0a78c3923e014f06b082f744bf57d282ca4d99e0fd5eae8084b5298b7f153784b14","first_seen":"2026-08-12T01:39:47.459851Z","last_seen":"2026-08-26T10:28:45.653961Z","times_seen":4,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/elementor/css/post-23.css?ver=1776418832","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.135Z","timestamp":1787740093135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/elementor/css/post-23.css?ver=1776418832 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sa6n5PaXZAhKVgvprLyca3qYY1Xj%2FTn8nPjiu1QbhzgOiFJsvm0uSBP0z7WUWsGQ4M8IqjBN1aAJuTw4688lWzwE0DJocGvIGAfwHrjjZrN1OnBjulgJ8vKkNvy2QUi%2Fxn7e8Ki12w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"4455d4b93b9f3411e1bb456b22d65289\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe1f9b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2085,"size_decoded":1433,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2085), with no line terminators","md5":"db6f0ea6d256fbfc6209184abbbf22c3","sha1":"294a8c97a2d4997c01e8591fef40fe3d38fe29a5","sha256":"92370a49ae6a539f40992c0a700d0c57660b048d5d56f450775ab1ca20430d69","sha512":"aa465503d7e9c9db2f1b933ab5987c941ed1d2004dbbed168a61a8f55c43b15b739cf7671d2fa0a705b3bf37258f1e6aadb903e77861e47563e111a2caa5dadb","ssdeep":"","tlshash":"8e417c263d13926db27f402f9413b86c2515accad52b5adbed546213f8fbe923360709","first_seen":"2026-08-12T01:39:47.464141Z","last_seen":"2026-08-26T10:28:45.654831Z","times_seen":4,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/elementor/css/post-31.css?ver=1776418735","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.336Z","timestamp":1787740093336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/elementor/css/post-31.css?ver=1776418735 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Z%2FYHDFrMAMCn7%2FCz5oYphWFJMM9X%2FqQ0nmXB%2F0Kwabo1UFcQ%2BSO08aui8ballbu0nbs1evHsRY1a8SnmCG5%2Fhmq5v8WVaDA0IZHJ4K00ZvslQB18RG1kAPk9DTOAQQnsOcfx0kMcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"0cbcaf274e016ead5dc6cefecc9954e8\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff5ff1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":1030,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (432), with no line terminators","md5":"af9c799ee43b22fa1563959ce3ebc12b","sha1":"ffd1fb72f052455d0d7db1224589af7830c7fdc2","sha256":"18f99a2cf10d2ec985c4358fa3abf0706b1030bec2cc7ddccadfd000c84a7015","sha512":"6218ab80b3dd3684a2071fc19b92c40dd5b4bf80115e7f7021bc2c636969efb0525dcc5555f0f155a218e829e8e2b9633f90017d0bea15b7eff008f03b508b1f","ssdeep":"","tlshash":"23e02b483e23d058a53f185fd403b4bc152db4da851ad5d7e4144213fcf2d677390309","first_seen":"2025-12-09T06:02:51.363914Z","last_seen":"2026-08-26T10:28:45.655668Z","times_seen":101,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.119Z","timestamp":1787740093119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idizRVmHRVo9Ig226hXFTJz9eWsBXd8Gh8FEuO0whdWLZlTC7e47asVfxCgHfqkxM2Yb8kNCzJy%2BNU7%2B4as4LYpoeTHMLjY%2F52DU%2FrKltof0va5W1CN7JgsekMVve1IvlHxnaq5aIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"29b99ad7d9fd1c1ac11bd2d012ba75e4\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fdff90723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54666,"size_decoded":8294,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-08-26T16:01:26.359421Z","times_seen":75124,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/elementor/css/post-13.css?ver=1775651891","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.120Z","timestamp":1787740093120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/elementor/css/post-13.css?ver=1775651891 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rodhdbGzfUzwaIuFMQAEJFUc3KfexQBXd7K%2F7V32tcOvFZybpLrEFe6pDiFB%2BGQR0BycnNB%2FzmvsXa%2B9ryzyvs%2FPg32VkivZP5obIh7UGM85sykSIhBCJq9Yl%2Fb2YoNIPMXpQXOP6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"14add246aa459d6232c5eee6a6577837\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe0f91723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1628,"size_decoded":1334,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1628), with no line terminators","md5":"cb81742650f6217f04f4e588571cf4c3","sha1":"6521fb2ebbf265e39657e75d6d11c0821c545a81","sha256":"a3c1736987226eac42607ffd53598a96fd90fc8b61392425f417875d9a6c78c1","sha512":"fa40e5a26ae337289f82bf8470352de9bc33ce70a346252c389bbfc81d6094a5f478df9db87da36bf8d16b2d70e3202740e8c7a6c5417d44fc34ef5b9cf667bc","ssdeep":"","tlshash":"67318b01be13e011e17b452f92c3b41c101ce49fa19fdeeee82d9396f9bf9462229207","first_seen":"2026-03-27T11:36:00.27133Z","last_seen":"2026-08-26T10:28:45.65743Z","times_seen":18,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/mobile-menu/includes/js/mobmenu.js?ver=2.8.8","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.346Z","timestamp":1787740093346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/mobile-menu/includes/js/mobmenu.js?ver=2.8.8 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NRc04gwX%2FbFH2fnRy3pFcsFe2JerLBtO1mzYznlnbdu4Gec9jQDoxoKM%2FGt1oQ0%2FP1bk8QUuMEl%2FkOnWje6wyr6IK8ENiAmY%2FwVEJSLHXPxS3SHO6IAS%2F7aG7nhtuy1OJ%2Fs18IfSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"5ad711a1a4311f5afdcf7761be0a9027\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6ffc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16173,"size_decoded":5004,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1a7a1c044f6f8909b5ea70ca382daaaa","sha1":"08f867d94047ac90852fb908b10a4ba8d8fd4eb2","sha256":"6e3737afae6858e7285d7cdf82d197b11e7090fe637d760cc82b5dc4ffe6d544","sha512":"c0973666b3762f86f686317f771c7b13b264a696f13ea4a20db4e492e3ac459afa46dce60fe7da8ccb2b03601524689dc07cff3acc3cf20d2c10832e28312b78","ssdeep":"384:tEIZQL8t9OcbPKStZmMC6eujK1xbK9dO1996v:lZvK6XjKod8q","tlshash":"cf72414937f220b280fbba7d0b8fd5116234458ba90ace487d5d1fc45f417662af2fa9","first_seen":"2023-03-10T02:44:22Z","last_seen":"2026-08-26T10:28:45.65829Z","times_seen":2032,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.351Z","timestamp":1787740093351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlV3F0PEFTIMYwTHdVBYyjS8DvqHdyNFtYG3XGGckEEx0%2BA5C45kJy8lV00o%2Fh0KCUsqxHBpyf%2F6Uv0An0rFwrlCfOISRGyvsEKx48b7m3ojqcEfRqtWuuGOWmODEy0mC4SjErKRwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"37c4c69bd1ef935daf2ef902ec89b1e1\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6801723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50503,"size_decoded":17365,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-08-26T15:36:48.851248Z","times_seen":30758,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.356Z","timestamp":1787740093356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.31.2 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xjl6GhIF0M9yyiWOUVFXdgOrasMxzzAVBwQ%2FhrH%2FS9jdpYgC3sngfF9IAzihNl8b8rhFqZnbbjnQOC01691uotPyAjOQ%2FP1FBW4fvXX8j8nPgM%2BLpJBnRuQe8a87lNKlblqA%2BLsLvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"5a221c7b7eca4111470d08eae475a87e\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7806723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6248,"size_decoded":3585,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"91e2eace8652a661d8c8bdf6613236a7","sha1":"afca4a2a64f51b1f213ddfae9f270c8add2959a0","sha256":"7121fc5dec5cbdfb78786cd4018f5239ce4df4745abbbf20be2a1d17cc23e1ea","sha512":"d383cb0e216b4f724dcc706b945088c8ac213c97e44b636ce99b76d054d729abbc9bcbdc5058960bc2b145fd9273e77672bd1d26de27059380c7aa071a6fb90e","ssdeep":"96:BEdxwrudY4kjboFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:eTXd4jboFemUN537MPa/pMdOQ8Mk2","tlshash":"9bd1569805489d2b26e43ad8b15b6b741b3dd0323c5ada81e611eddc18fcfd187ea532","first_seen":"2025-08-11T06:13:36.205631Z","last_seen":"2026-08-26T12:49:46.36766Z","times_seen":5932,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.359Z","timestamp":1787740093359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.31.2 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrhWyktwKgLfUidDYY%2Bq6HDS1CXYN36SKoLKodu%2F7DBnp6hVF0%2FftRSE5Yct5zjCRIY5MW5VuSAIoq7TtfxvSXIzJt4OBLUVf1%2BwIQsBC%2BQyJkCgVOJN4Y2cVqyeesSJBFfuyCnGpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"35ce54bdea55d775e12f09bb4e15ddfb\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7809723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24210,"size_decoded":7654,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24166)","md5":"ecf80cbb272e8005df8aa6ec914a6124","sha1":"5eae643d58d6d99f51474b2bf2eb4d3ad6fa36e9","sha256":"a2467aa115eb2eed954a7f2612c08c1a4f74d660c873528f9fef23a1e4ac4704","sha512":"0b33cc377db797b7741bb0b9e912d798a7decda063d577f28cc380f4f0071b4f9a5d4ddf805be70c98fac9f30dbc18cb86ca8f6fffc8710ee3978f9343a40aab","ssdeep":"384:Qxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+pQDTWmMo7YtDTVHJiMqkoh+vFWN7KS:Qxw+EVxFm6cKikdHd7taQtHuGJswg/D2","tlshash":"9bb2d9013163ac7a50cf815be467420e77378894740570ed7abc6cdba5b8e9a33ea339","first_seen":"2025-08-10T22:50:09.558424Z","last_seen":"2026-08-26T12:49:46.443872Z","times_seen":5955,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/hjGywstj/rainbet-slots-4.webp","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.393Z","timestamp":1787740093393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /hjGywstj/rainbet-slots-4.webp HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 131338\r\nlast-modified: Sun, 28 Jun 2026 18:56:40 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131338,"size_decoded":131705,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x606, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3c2a7e1bc210afca964c8fc7569a796","sha1":"f1a0fea132bb785588253226e391e8fffb661c9a","sha256":"2e2a2d23311009700177332e7ab85ba2a91af992c39d1128f2296b7178936954","sha512":"19e182892ed1f77a8415dc58e893b8408ee2f8440c821507076c9e820a79e3752dd2c86329a4ce1aef2408229ceec3f92657a67482e9ec1e9f21d5f72fabdfcb","ssdeep":"3072:t+qzhKJMOYGU0ayYdz0dMg3N91cGuA5bm1FPOaZfu:1QJ3YGU0ep0H3NvcC5e0aZG","tlshash":"d0d312e2975b352cefca50ee29407aed6455666c3e07b57f9c794630e880e22253c0b6","first_seen":"2026-08-12T01:39:47.471385Z","last_seen":"2026-08-26T10:28:45.661651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":11,"dns":0,"connect":30,"send":0,"wait":407,"receive":117,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/DZF6kgfW/rainbet-sports-6.webp","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"195.154.239.27","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.395Z","timestamp":1787740093395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 20:49:56 GMT","end":"Thu, 10 Sep 2026 20:49:55 GMT"},"fingerprint":{"sha1":"26:FA:0F:A3:79:17:51:D3:85:0A:52:F9:5D:2A:5A:4C:F4:BB:21:8E","sha256":"62:CC:53:22:C5:B5:DB:6F:00:DC:A7:E7:8D:47:E9:73:22:99:BC:E0:89:01:FC:1E:55:8C:11:6F:D1:05:9F:66"}}},"request":{"raw":"GET /DZF6kgfW/rainbet-sports-6.webp HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76948\r\nlast-modified: Sun, 28 Jun 2026 19:17:51 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":76948,"size_decoded":77314,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x601, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42d7fe35ab30c3103de8d00c8bae31c0","sha1":"fcedab5fd5017348ce1a4e37afd13e9c1db38188","sha256":"61b86057be0a3c8aef2a421aa89859ae355c6828510a83dc4dcef99a1bf01ebb","sha512":"dfbea93ed3d91c4301ab0ca9b551125a6beba05ef9b42d22603afccafe18b9adfa6d06a07ba3123b94092fc199fbacd4d5ac682d43ecb6df2ab0e65a01f44d83","ssdeep":"1536:26hXUBSdPXgqjU8yopS+AYWa45TjKoqKhXAUGeFW81c341OhToMUlUG:rhkBQfgYycS+DWcsAUGeFW4cbToM/G","tlshash":"67730266044064b1ce28b76a694d373050fbf7a80e84431f4baedeb6ee6c856c35c5f9","first_seen":"2026-08-12T01:39:47.480921Z","last_seen":"2026-08-26T10:28:45.66245Z","times_seen":4,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":9,"dns":0,"connect":32,"send":0,"wait":406,"receive":117,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.35.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.125Z","timestamp":1787740093125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.35.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQXrilIOypdHVIoWb86rhcV2mPAMyAX6kgEsW6xONlsSMiF7D2oQUCxxbJWInkwUw8o9yylysJCmOhYFtlJkRK1DLzHqxHC55qcr%2FAlZRJ73vAv5vHNXrHEq9ycjzD3DQK4gMKyjAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c24c2cc4f0d7dbf0924fd1d8f3c0e21e\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe0f94723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":935,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"97db8103f62ef845cbe078e37073b483","sha1":"3c9d293b60aff72e6ae2c13fd5848565c0964d0c","sha256":"dad3795cefb3d9f5dc2cb4a6e621043322cc94cd90170f28f25b8a0c3eda7633","sha512":"873a257478fdb7ae3b1fa586e1ef97245f9381eadcc08811f95dc25f0fff20fa5f8137de00b18a1e27aa119fd6e622ef09c8c97e80dc425ac758555b430a0aad","ssdeep":"","tlshash":"2ad012f5ff0350080297032340ca2a5ac97cbec225111c7eb324100f00a384a778ba33","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-08-26T15:02:05.508983Z","times_seen":33286,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Dosis%3Ainherit%2C400\u0026subset=latin%2Clatin-ext\u0026ver=6.9.4","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.339Z","timestamp":1787740093339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Dosis%3Ainherit%2C400\u0026subset=latin%2Clatin-ext\u0026ver=6.9.4 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 10:28:13 GMT\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1197,"size_decoded":1142,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"31c7707bd602159f5466506944271993","sha1":"74ff5920895cf146f58d0e95949c4e70d7a35826","sha256":"da5715d72ae51f23b5601d8a2f3a8e4a958bb543c77cef22338909ec94b31eae","sha512":"32f05deb6c198f48170eba6c9188afc7fbf61291e9ca7d9ae945a800012546dd90c71dcf906cb524f0e50d7270fcd8fe077024cc81e4d7a663d54ca1bd400999","ssdeep":"","tlshash":"aa21d091886ab40497830dd622cebd37dd4fa294709496396ffe0cc8fd9ad666312b0d","first_seen":"2025-09-11T22:16:49.702999Z","last_seen":"2026-08-26T10:28:45.66398Z","times_seen":1917,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.31.2","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.355Z","timestamp":1787740093355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.31.2 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrmvsnNlcHanI%2BY2AE9sjyAlZuqiPGZ8q%2FmpQ8QGWIiXr9HAinHAcDtvBxqoDWy3AINdIloQM1qlmXDQ68V%2FA4ATKbJm48Yv4GwI3J8fQAP0uKiPNM8Vk0wwouQUcsMhFtGrEF0Tmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"432b3d64c1607fd316ea06f1f18b21e0\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7805723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3721,"size_decoded":2361,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-08-26T15:59:35.31202Z","times_seen":71748,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.357Z","timestamp":1787740093357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGCSpE6vwqGEFO2gLhap2dhJQy265WCl1D5s6Qrpyluu8yU3eCioDUbpXqQL9xQ0gjDCdLm3ShsHGqDj1BJY4CeTcOnT1lzoZR5v1zfDCSOWTeJY5Fg6QmRUzb2lvIJ2KP5Mo8wyIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"ecd605084c6a90e2cce5305a29e70162\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7807723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":2793,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-26T14:50:09.471008Z","times_seen":205154,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/2026/04/rainbet-logo-1.png","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.396Z","timestamp":1787740093396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/2026/04/rainbet-logo-1.png HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uwkac3vOf8n439FJcpPkwTI9pruFJ360HT3%2BkR2djAk10V%2BXnKC3vy9hIbTi0yDAcexDdoxRYQxU33RKjDRuja%2Fpf5ZwqN5%2Bgv8GRSHGX5jcv3Sl8SlQSV3kKXYWzrhtFLXxy7YVlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"de336884c30b01f8273886c523146cfb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\naccept-ranges: bytes\r\ncf-ray: a31225ffb811723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6331\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6331,"size_decoded":7151,"mime_type":"image/png","magic":"PNG image data, 290 x 130, 8-bit/color RGBA, non-interlaced","md5":"5ea7477f5305821d9ca5d149cc6d2f9c","sha1":"e1c833c0e7c135829f247f64a20ca49601766e15","sha256":"2f6ff7352ef7bb4899b4a06217cf7c1a201c57ea9b7a6c106ded3e55e97efffd","sha512":"5c2ab8ce01fa034fde1f0a9f022fc5324e8e4b51319c5929c4754888c46f07a9001b37d8ad111084b3c0c640a1ded0f0bf269b8f8c95dc4bb18918cb2ed5ed66","ssdeep":"192:466666666mMKIvetzw9Hh1C7XIke6wNlnVRGD66669:466666666mMK+etEdh1iXZe6wDnPs66n","tlshash":"70d16cbf13c29f42a8c5f5499861eed75ea9acd3618e8002d8de47d19db1b3703897b0","first_seen":"2026-06-18T01:33:03.27703Z","last_seen":"2026-08-26T10:28:45.666386Z","times_seen":6,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/elementor/css/post-27.css?ver=1776418832","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.134Z","timestamp":1787740093134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/elementor/css/post-27.css?ver=1776418832 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LiZCtkPT0gOfGXHX1zi%2FozZPLGSUHxOXps05GuogVWohzYaZ6IjRGQkqX0HU5w64hOxpVAEgrN5KDXxdO96exdSymvCrrHPsHyuPSh1fP3uisdcUQyqdjGUMWzif92D3Az9bnRwxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"747c06bd583eb071d1ff43a6855b5420\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225fe1f9a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3667,"size_decoded":1676,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3667), with no line terminators","md5":"c6e329c7c9f48489a0b50b3709280cb8","sha1":"4b28f1bda0743b536d251b2dabbbe29fef6a44f7","sha256":"ad7dc936d2f71602e71dee03860ce64dc8be419dc8bdb4ebdd245ebb9cfe8dc9","sha512":"cf72e16620425333d544617e3907fc5d4a9dcd90f62ca5c11fda9fa415d73812541df901e11f919bce42c471e3d1cf42a6dd390ddab05dafec322380f623ad76","ssdeep":"","tlshash":"ff719c623d13932cb37f040f5507b5ac1528ecced61f6adae9516157e8fae9233a0b09","first_seen":"2026-05-10T21:19:05.081976Z","last_seen":"2026-08-26T10:28:45.667152Z","times_seen":6,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.348Z","timestamp":1787740093348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFBw7XNtNt2mfixTwOT8LSesZR%2BSymAwgRuFgotHvSP%2BTAZE43MiNvo%2BR1oCeQd0Q%2Fz4lLdoFIIUfQTs3x5wocSf%2BvbBFM1nLIUWIGe%2F2EEJw3cu48V6MEDgt%2Fwd%2FU1XZWzyy63A9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bd673e08f5f7cdedd8353839e71fcc42\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff6ffe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1846,"size_decoded":1374,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1846), with no line terminators","md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-08-26T10:28:45.667988Z","times_seen":14084,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.358Z","timestamp":1787740093358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwFVw%2Bofx50OcPpNKZDdEl3nrGuJkJU1JiNi8JgcDetXsMWctEApUZF%2Bd9y07%2Ff2X%2F%2FG03KjsJUIeRN5XIOyDzDZc0%2FTSU6xfm%2BcJSb9aIyKZyxyEA9uMyMGpoLUksgu0z25KD6pZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"3acb43228ce2589be84398b6be51a68f\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31225ff7808723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":3069,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-26T14:57:30.883132Z","times_seen":202087,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/uploads/sites/30/2026/04/cropped-cropped-rainbet_logo-3.jpg","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.397Z","timestamp":1787740093397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/uploads/sites/30/2026/04/cropped-cropped-rainbet_logo-3.jpg HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMlsq7SzFCabOwVvuIy3JDytNM2kLb%2FVPSz2XrGUsGLGqC4cO6CSrp0vrBvlmojCPXlLc2LgQ0aqgTN9bzzYQU0HxMiRyxq36bCTfC71KoPdQ1qC8uBiqbnWfaF9i3KIGDHUjue%2B4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e294659403c7ff993dec038d1d7365b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\naccept-ranges: bytes\r\ncf-ray: a31225ffb812723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14644,"size_decoded":15462,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 512x512, components 3","md5":"a58ca9952aa83aee230689d8f521e34c","sha1":"2792789d722dccdfca486801b5f59ed45ef9ea9e","sha256":"0acbdfccf477d10e3c9be4f943e08f0933648dc7c74ef6716c226bef05ad88f9","sha512":"6e03d3863bbcfe943de36b1017b181e9bc127d07b9ebd9ce30d82f4ddac17b2533f8308f73940b508bc07e6c17e5aa327fda22655a40ab96bccbde1e6a4265f6","ssdeep":"192:3fSzOVZljk3luLk8rY4wjXb0dbGytk6lq9abeT/qBFSQlUEKVQ7C5DxnFwc:PkqUjgbGytZYoC/uF5lULVWQph","tlshash":"6762e71b9d088b97a4589bacbe574cad6f09130cadc736fd46238ec75e007b15c8e46e","first_seen":"2026-08-12T01:39:47.474623Z","last_seen":"2026-08-26T10:28:45.669734Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.692Z","timestamp":1787740093692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4norVBkfmP3mfUOux2uugILK2%2FmtZBf5JTXTeATquyH5X5Llc1SshCmrWMo1SLIlzLrksxy7iYkRAhfwUHqTmTt2K3efcHqK3g9q%2BAKL4GcedrYsvZq%2FLD%2F8a4sE0ty2Kj1oHl6RwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a3122601984b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T15:40:45.624659Z","times_seen":18115603,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.a23fbd67486c5bedf26c.bundle.min.js","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.732Z","timestamp":1787740093732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.a23fbd67486c5bedf26c.bundle.min.js HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5VmoUbqCElx6CdfVQCAYfuwG7pJCpjGIVs4PCiykxDL7yCkEiUhm0b5C8l70O7Mc%2BCeM%2FfxZXDm8S3GUEhMKWzTs3tp5vwPCP7dOfjkoxvqIxp8r0xj0dLOuRqI0ngUlhPEqotX%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a3122601d85a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T15:40:45.624659Z","times_seen":18115603,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetonline-ar.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"rainbetonline-ar.com","domain":"rainbetonline-ar.com","tld":"com"},"ip":{"addr":"104.21.71.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetonline-ar.com/","date":"2026-08-26T10:28:13.806Z","timestamp":1787740093806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetonline-ar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Aug 2026 17:21:50 GMT","end":"Fri, 20 Nov 2026 18:21:45 GMT"},"fingerprint":{"sha1":"CF:A8:62:5C:07:B0:FB:70:C1:D0:CD:69:10:11:A3:7A:C6:A9:63:94","sha256":"1E:FE:48:7E:FE:2D:51:3F:56:93:23:0D:3B:28:4C:3F:4D:01:D1:E7:95:3C:C0:A3:F7:A2:0B:71:30:F1:5D:33"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: rainbetonline-ar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetonline-ar.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmqLUXqG2PjDYr8GqmhnxIzn5Ak%2FJ7AgbrYG133RWjDm496nUTrhjsBMyEZFU4bemh88jgjsRd9YUTUxbYLA7hOeaM963SP9f4MxIroWmkw5C3CMjKAW3p%2BTBVJ1rV0DHe%2BbmZ%2BSNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Wed, 26 Aug 2026 10:28:13 GMT\r\ncf-ray: a31226024874723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T15:40:45.624659Z","times_seen":18115603,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetonline-ar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}