{"report_id":"772ab4e3-2d34-4ab2-9348-34b4355bb104","version":0,"status":"done","tags":[],"date":"2026-07-08T11:54:35Z","url":{"schema":"https","addr":"rainbetlegal.com","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"title":"Rainbet | Completely Legal Crypto Plarform","dom":{"size":306081,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6102)","md5":"180c9d27d8e764e5327e4453f2aedf25","sha1":"f01bf9d94d0f435abef1bb65861efd5b992ff170","sha256":"d7eacfa8225acb3bb825d9a344c29219112cc3c44e35322b4c022d308b567211","sha512":"47efaebb06b2b5f96466c3fd110efe04b1a4f87d25a4cd207c78d15cf0dd0c719802820bbc391a1d8856f4f3369601e9a8e463baf9ba4df541c0c808eee77128","ssdeep":"3072:f76OY2apPcm7pPBBbtwNuuf87W7PjIAGBCSdvErI:fi2aKm7ppBbtCjY","tlshash":"5254e96b42b72059262b716d5fe96709622cd003da05cde8bbded18c8fc6f91c972b4c","dom_hash":"domhash87fe5f5a9482a13737d30ca1d03215c0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbetlegal.com","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:54:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetlegal.com","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":67,"request_count":67,"received_data":1172874,"sent_data":37608,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-05T22:41:50.352327Z","alert_count":0,"request_count":1,"received_data":60279,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"g10102301085.co","ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":72137,"first_seen":"2021-08-03T12:42:57Z","last_seen":"2026-07-08T11:52:29.783977Z","alert_count":0,"request_count":1,"received_data":779,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetlegal.com/scripts-js-extra","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0896cfe29f0452482106e0003ae1715e","sha1":"7ded6ecf03929d02ef10a4304c6d1cd8a424343e","sha256":"6670bc05917095dc164ba9f44f1c54f656a19d38b7254dda4d72e428e2b4d3a4","sha512":"c6f33d60e75fe959c3fda67d1fd53e452f663d76ca0819bfcd76f6f15228e0ba90bc342e40fd89d74f7cb9d0309acbcd2f1f6fc67db6a560396044d7a9a5a2de","ssdeep":"3:HD6EDew5vNVoZIJVgrTHnJH+LX/RA94eyGY3r:/9xcIJVgrTQLX5ACeyGY7","tlshash":"71f12b16ccf00f8251900efc48344633215c3421dc50dc409686c88000a4542d958141","size":7621,"data":"","first_seen":"2026-07-08T11:54:42.22891Z","last_seen":"2026-07-08T11:54:42.22891Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","size":8485,"data":"","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-09T02:17:44.810477Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e88a401907300a9989966839f7ab52d","sha1":"c15dcbe7b4ab3c929d4caa40438bbd384babcf11","sha256":"1320fe8c1f2515e760ba2b7347b1c6b4ad4f1f81e268099beb8b0b9e30cb9794","sha512":"49c9fc5c37a593f329bb646f7a7b53407fe1a05f5e43d91e0adecec646734c22a0bc32b0bb69ac87108a379fca06a89a18c0f5c208dce06471aa8cedf7a8ebb9","ssdeep":"","tlshash":"dd01abc9b9d17914259f616c21ab611e7573b5013e0c0ef3d46556922e30686d23e1ce","size":829,"data":"","first_seen":"2026-07-08T11:52:31.647944Z","last_seen":"2026-07-09T02:17:44.835205Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-17T09:19:36.588429Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"95f2a05e5ae6ace768625f9681c1a600","sha1":"130a15d98ad911168cec504323c47df8a56d16f7","sha256":"fa4fe08924aeb7be50fab76cbef2b007f1b96041bb7d29223d68f57257d07925","sha512":"caea853edf21b9e2851fe2760611762b9b4d81a019bf70662f36f764406388a1c5265c5b2a3c9b718d5aadba5cef71dbb586b5dce1eda217d6b57108cffffa80","ssdeep":"","tlshash":"72014066b3ac187143fb31a9d51f27c9a57d11fb7801948bbc0488451851f8d4678a1f","size":737,"data":"","first_seen":"2026-07-08T11:52:31.650424Z","last_seen":"2026-07-09T02:17:44.836269Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa9765539d612ec6385c2684a13572ab","sha1":"e9dacb00e4eda75169f369f02ee3ec74e5e63d06","sha256":"36051f9547b5ea525b5dad0d5233168bda534506d9eb79d9e10fd4b25f600d02","sha512":"507e62fde9c961d85f0e9689d4dea60f1e52558914e6a7b3a38c7d39922c69ddb95a512bbfe48ac4ae8469d6bfee6b4065b3cfe1f5a9118a7638a965ed0bec4f","ssdeep":"","tlshash":"e331e186e7fc0c7586e6326f1d7466c9203c56737c02549ffc8c8d09666cf91862139c","size":1855,"data":"","first_seen":"2026-07-08T11:54:42.231966Z","last_seen":"2026-07-08T11:54:42.231966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b75ffcdf480589f19cbf78ce373dea","sha1":"316b05245c99c1420895c28a0383802e6c5d74ea","sha256":"3cb8441193a5962c3af7a83eb1a4418970173e7a7f89bb085de078e3ac16fc0f","sha512":"10af5558f1abf25dbb1f03fe16b20efea15aaa4db054488e516bc625ee6fd0b36194fe7241573aa29f91513eab613c3a5cc0f423f1c8851b3aff77a84c56ac78","ssdeep":"","tlshash":"ab410768dbaeb662432ea0b62bfe12de143e147e7a414ebb7c38405048e48093715c7d","size":1934,"data":"","first_seen":"2026-06-07T17:05:58.287593Z","last_seen":"2026-07-09T02:17:44.838838Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fde8380702480175114f1dcb174076c","sha1":"d027ae5c97b3bb4b7b842d9be7b7d396c1b66f35","sha256":"35c5865ea4ad6d71513348f881d95da86541c4b433144305a68d887739585ced","sha512":"ebd3d693b86a3a8cb3b350092a200a3c068aa1a458dee4df96f5d3f60d242c9dcf2d801f16175a119e9384dc3fd9c7ee44187925955c89cee989f162bfc763c6","ssdeep":"","tlshash":"4a410e31f37d243147bf65b529e5269e2a3990823e878ca6cc9c9c0624c1f9d4875cfe","size":1919,"data":"","first_seen":"2026-07-08T11:54:42.238609Z","last_seen":"2026-07-08T11:54:42.238609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa9a2e00541c5d978bbf0a6222ba76b6","sha1":"e3bbc246c652e6594c458f3eaccf859d9397eccb","sha256":"5c3b561854db1a9db55f57069bf0ef0b5b12d741130b1114a18f4c65b1a7d381","sha512":"88f6ed907a6edcba1ac4e7446911ba0b3b9aeffa748363bb42a31676c5edb62755f25a9adc29f495db93a874641ce13dc1f4b461b8ee4dc541e5692d66dc1be5","ssdeep":"","tlshash":"3611ce28b6be043286637129266ef6cc7979006bac11cd0ebd2d8dc80fd0e519db6df1","size":1071,"data":"","first_seen":"2026-07-08T11:52:31.654177Z","last_seen":"2026-07-09T02:17:44.842007Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-17T12:44:08.592289Z","times_seen":27924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"002163d35a14de8377226f71f4c69731","sha1":"8aa592eb589dc72d6983af41653db2ce57ba825a","sha256":"8e2c6daf8befc5f6f4f3e14577b941ef149dae4175ab982d89c703ed102ed132","sha512":"f7512d391f15cf021a19017deed4ca33e05374e1658f9e68824262c21add4ad3d37347380659f4c2773a5048c24ea15c20f74b28ab93da98681aeb6c3e69eb35","ssdeep":"","tlshash":"46f0ac841c78a92645d2a2cb35aa7504b0acf910537f5d06b20f08491a50e6d9af3a5c","size":567,"data":"","first_seen":"2026-05-08T12:04:32.352388Z","last_seen":"2026-07-15T03:04:30.736582Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3158a08b25d70f86efa5ee32a49a9343","sha1":"0e1e9a232462560089ec0d5304c6c308bed5202e","sha256":"d42dfeaadd950d8df6c54c9cec3091a6f6b23ca33168ee5dfd8ba934f4603733","sha512":"bde3d5810ed738fa27e0fe450155c84027c64da9fc42b59b26ac279b1d56496c31262441359701fde2e8346788fc84179b33a68eb4e0db7c2115a72c44e51b8f","ssdeep":"","tlshash":"36c0809994b81c8514eac14c017c131075149413cb1f5e55f24d014c5ff4079e9141ca","size":173,"data":"","first_seen":"2026-07-08T11:54:42.243392Z","last_seen":"2026-07-08T11:54:42.243392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fe6c2e06bbea9735ef80ab506351ba5","sha1":"f0b2c549b674f68a4e13c1eed4d2b634d2a972c4","sha256":"9f00cc1d09afe5b28a400a7f6c013a9cbc943c6892080b8b835739fe8ecfe65a","sha512":"bf8243119f4583891b891e8ed84faa1b0571068f4137bc3348de866efe10f93c3f37b99b8c9ff1657ca02819f0ddd93cc0bb0b21c8fbbffa3e950f3411b285c3","ssdeep":"","tlshash":"4fb02b160cf00f8211900edc44304632211c3421dc109c409682c8800064542d958141","size":122,"data":"","first_seen":"2026-07-08T11:54:42.244409Z","last_seen":"2026-07-08T11:54:42.244409Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd29938f1ad524bd6ba87f4c0bdf291c","sha1":"ccce2f1c6e49b96f686e080b7b85695a08b0adba","sha256":"c98099d4cd33c13298dc59ce0c8cf912d68a0ab756ffe1fe733dd2b224f08106","sha512":"7a3a9237343dd8840f4d9788b4e88875c086b4ca6703759708bf9ae22e1d7d781eb0f9c96dda0d3d2d1b7a2ad3f2f73262ebf8c149440c5b4865e5cc2d5d803d","ssdeep":"","tlshash":"04f059db6b5c0432c25f305e105eb3cc3d7d803269412d67fc78c45248e0d98966289d","size":545,"data":"","first_seen":"2026-07-08T11:52:31.658162Z","last_seen":"2026-07-09T02:17:44.8469Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dbc1008a0655ecb932c1fde0eb72b0a","sha1":"2e64bf12bf7529f841baceb5ac9d5089ddfe9794","sha256":"2d65e312c8a0eed794d22cb196d1fabbf363edc0db34dc532345c58ade40c7aa","sha512":"312a05df4c4d92127ba8f16b8dbf05092762e348a050ea66d7821ce6b47f01415d89448a6e2d677e8167cfc76c0e282301761845405e54224c37be2933eac27e","ssdeep":"","tlshash":"d0216bd2f74c1532c4ff357eb45a42cc262d9071bc2018ba3d6c622c0172f8c55a679c","size":1378,"data":"","first_seen":"2026-07-08T11:52:31.658994Z","last_seen":"2026-07-09T02:17:44.848182Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetlegal.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","size":352,"data":"","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-15T03:21:40.92912Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-17T12:36:54.326812Z","times_seen":35956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-17T12:37:28.648772Z","times_seen":216612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/contact-form-7-js-before","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d5f347c8fd9b09c0b87349daf18e130","sha1":"e95c3e7d24b2d015898d260aeebf2f868f8f6524","sha256":"397d60cb996a4ee8b0c5ea32d718a0321ce6fafaafb41eb1d692afc2ec26ac2d","sha512":"3a9a4ce02f82b1274d09546ffd6dc7d0679320c299022b37fdfa4977fd35a2a9cbe5ee4412f908506b653980559f1bd61c7550d08e4b3c8d3772b8529ae16f09","ssdeep":"3:Hz6SVGDSiCmbFFlHroZI5xBF/FFhhzVEGUHsR5pHdFQAwaKLlUFrQAv:nLiRhD8Ih1ulgpwAwaKZ4rQAv","tlshash":"d5f18099d5b81c8554eac17c057c1310b5149417cb1f5e55f24d014c5ff4079e9181ca","size":7662,"data":"","first_seen":"2026-07-08T11:54:42.247119Z","last_seen":"2026-07-08T11:54:42.247119Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-17T12:36:54.141044Z","times_seen":36762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/contact-form-7-js-translations","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"841e833ef841fedac72bc4fb695babfa","sha1":"2377fb6822f7a884321a4de4478e5fe8359c33f1","sha256":"69c71ac09211740f1582afae17b8ffa0aff6c8e2d509f56d41228cf56b442dd0","sha512":"9ae6a14ec15cc95c95b6b680fab8ec93b61a37e0f448b50528f28197592191d6167991e7aae93cc1956a71b6034cc60ba6e0258525baba631615f69e123a822c","ssdeep":"24:6q2WBWUcWLNVT7sJKceSxHTDkHcHoc0ZSWv:92WBWUcWLrTY4ceEHT0SWv","tlshash":"acf1a244dc78d92645d2a1fb35aa7904706cf510d37f5d06720f08491951f6d9af395c","size":8048,"data":"","first_seen":"2026-07-08T11:54:42.248228Z","last_seen":"2026-07-08T11:54:42.248228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-i18n-js-after","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfa1f5d9d3a558ccbaeafcc84f1ca26d","sha1":"3b2c19d392415e7a2c0b1a9d90e960c618a15b9d","sha256":"b7d0e63151cac9d8354a97c8d09d40531fe4e2b10cd38304095e06ee3bafb6e2","sha512":"7c83f9eac4f53b76bb4409b61f78b05f14d5dd98dfd317f910c3479bd01768df5a7d2a349184ffd17c657b01b14746dcc0d499c1890117ae44136e45d553adbe","ssdeep":"3:HaaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:6BLxTqtGmVOiFM/KGNMJ2","tlshash":"7ff112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":7573,"data":"","first_seen":"2026-07-08T11:54:42.249146Z","last_seen":"2026-07-08T11:54:42.249146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-17T12:37:28.676133Z","times_seen":224249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/desktop-screen.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.221Z","timestamp":1783511642221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/desktop-screen.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21156\r\nlast-modified: Mon, 29 Dec 2025 08:42:57 GMT\r\netag: \"69523f11-52a4\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21156,"size_decoded":21501,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee3351b1ce4ea12f0d016dac6696f0b2","sha1":"e164d4fd8799a8374ac3115388874348bfce6abf","sha256":"6906ece003ebbb445ec28f3a0efae830b8faa427dc6cd124f6eeaadf8f4e658e","sha512":"d4f4f18fbb68fa6f2b86ded1b1f1ee9a2b686cead27ce593c1300705b518d971316c93f28aa4fc41d83d83f4e34cb9c01af9ae515cfe3623f4fb240fec798201","ssdeep":"384:HwTj9o3XIxIsqac/VMN/9GoA6cB8ldCmgPVQZiBcWkci9MsSgBuPQK5TCKFqJ47I:QTe3XZHaGCNFUIldCPPbO9HSQeQK8MvI","tlshash":"1392d0a345a38a3ff14547750a34a2d599ad8da150723a1cc032af961b627e30dfe0f8","first_seen":"2026-07-08T11:54:42.162322Z","last_seen":"2026-07-08T11:54:42.162322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/weekly-bonus.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.428Z","timestamp":1783511642428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/weekly-bonus.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7720\r\nlast-modified: Mon, 29 Dec 2025 10:42:36 GMT\r\netag: \"69525b1c-1e28\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7720,"size_decoded":8064,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c8f355b918de4efbd7857164847c1ad","sha1":"6c4beccddff7096af41cb9932b9ad684f686d958","sha256":"c4a71948c3772b478fcf86f37cd83493a5f9785e560da597ec2589b1c399deaf","sha512":"233b4f37011d5a5606312890df77ca67dcdcd371688d131e622c4914c983fb3718059169238553ab3ad02221ca8bdaa8ff384f37f83fb049078f82b3f9ad822d","ssdeep":"192:IwTBZ+urMFhlpsYbWxEKGRmlLCxTLpaE6AG5sPOemZK:IwTB4u2jp1NRmlm5LpZPjmZK","tlshash":"07f18e0557f2aedcfde296f8406838c4a740ddd3434605b2bc611b20778b49da8abb07","first_seen":"2026-07-08T11:54:42.163374Z","last_seen":"2026-07-08T11:54:42.163374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/redeem-bonuses.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.429Z","timestamp":1783511642429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/redeem-bonuses.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5288\r\nlast-modified: Mon, 29 Dec 2025 10:42:35 GMT\r\netag: \"69525b1b-14a8\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5288,"size_decoded":5632,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"874ee26487465c10ad97721f5d7a2cbd","sha1":"3eb961013d032f0df85259aaa54025beaf98c176","sha256":"817e19164af7dacd82c77d21460a21f487e5389d78c00c231cd743c5689a72fe","sha512":"bb8981c4efb6e4af62595690e709a3ced6d1955f56a9cd18bd8895afe7b435128f3992639b3e5012b6610ed778faba61be98e5477a95e46207edf03757d78219","ssdeep":"96:AElbw+iXNeoNxsU67bvPdk/zehpm5tC1JjWtCjJH2EaJphrg+AsBYiZ9nzdWLyHg:lwTXG7bv1kK2iJj/FWEWphrBcei/kQp","tlshash":"2cb18e84f3248336d0350f3daca9a94adb7fee5b5715431e45e0839119a8fcc82aea49","first_seen":"2026-07-08T11:54:42.164802Z","last_seen":"2026-07-08T11:54:42.164802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/06/rainbet_fav-300x300.jpg","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.554Z","timestamp":1783511642554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/rainbet_fav-300x300.jpg HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en; c2_popup_unique_name=GVgRBVsdH1UdDFgURVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5431\r\nlast-modified: Fri, 19 Jun 2026 11:47:27 GMT\r\netag: \"6a352c4f-1537\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5431,"size_decoded":5775,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 300x300, components 3","md5":"6e08fe06ba7f44898b21d085f0292d3d","sha1":"d822e2a10e4c70a314eb225c49378bab03985dc4","sha256":"e089352f41ec2b7a42ca7c4fda4a718833e1741f6767a99826bc978653c97990","sha512":"b3c3786c710bda9201110c18b059efef5641938194b664399df60657f19ac5e522b0e9e85e8ff2963a2b7031e2ef6b7289d5c24d812b89ebbbd31018a02d943c","ssdeep":"96:UMZEYT/CPwRil6RWQig0Cy/JXgOvmuzeg0NJos8/B:UMueCPwMl64AyphvTetQJ","tlshash":"2cb17d0087c56ae4eeaa1f385ee7614a1ed12c24dc0187d32d35f893f57d6f40c96aa6","first_seen":"2026-07-08T11:54:42.166818Z","last_seen":"2026-07-08T11:54:42.166818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Red-Tiger-Gaming-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.242Z","timestamp":1783511642242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Red-Tiger-Gaming-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17168\r\nlast-modified: Mon, 29 Dec 2025 13:30:31 GMT\r\netag: \"69528277-4310\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17168,"size_decoded":17513,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3606c48b2a2d7b97f307ef5dd389f8e9","sha1":"11e0ebba5eb04ec443716eb58d2c08997328c2da","sha256":"5c174e282ac7ca89f899fca9c9ed24671706ecabb5e64f48a735fc40b5ffd77c","sha512":"0a7e03d334e5d659f8d927ca99eb284bb4a2ef0a2b0e1b0e45e01bb1d6c5fa5649c777b9d50a9d29f967ccf81051442d14632eef93f46a372720b62cfe5b38f5","ssdeep":"384:gwTF2/qRF16fqokqa5PgSnvvJi8aGOR7dnmk13Cei:1TFx1KdkHtgSnMoORdmQa","tlshash":"7672d0b7172a41b0c1f4ea725f448fd3ad245f3bba6aa3a128c00d744a04c337e16ed9","first_seen":"2026-07-08T11:54:42.168959Z","last_seen":"2026-07-08T11:54:42.168959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/deposite-cashout.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.427Z","timestamp":1783511642427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/deposite-cashout.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5066\r\nlast-modified: Mon, 29 Dec 2025 10:42:36 GMT\r\netag: \"69525b1c-13ca\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5066,"size_decoded":5410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5463aba04c88525c0a7829abbd971d16","sha1":"66196f0d2412c22a5e93d9a9efd49f6c8ee123c6","sha256":"76152e3dee14e77c68277c3f2fc3966e2b212cd4738a1d339b133d110125798f","sha512":"7d32a9cb9d9ba0efd95dac231dd58903b74fd36c0c044ac26cd2c304c1c5a988dffe51555eee4e4104b50a35c5c00c3dfe656e571455276326599483c783d7e3","ssdeep":"96:6Elbw+iX6wkzgve0BKOQXjMxD+isAz4bhnTldDg3C6zOjdXHC0:fwTXeyKbw0ASDfqyy0","tlshash":"efa17ef0c3f44ae8e8b0377252c84761e37ba725a0862f4bc98d8a0927a7167a601d55","first_seen":"2026-07-08T11:54:42.170856Z","last_seen":"2026-07-08T11:54:42.170856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/crypto-img-300x133.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.218Z","timestamp":1783511642218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/crypto-img-300x133.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7936\r\nlast-modified: Mon, 29 Dec 2025 08:21:24 GMT\r\netag: \"69523a04-1f00\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7936,"size_decoded":8280,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd242ba8232ac010e51f6b6764e5d683","sha1":"9b59c292f20725e4de3296dc514c61570033f271","sha256":"290880fb25b6a6d549456ea0552fda1ea4789b4de075ec625cb925fc021e3761","sha512":"6cbde236ecb5bba9dd9c462e5fc2ad88e2c0f081a38f0a13b645ffa0c2d1fd05c7397e46dbf1b92ce4088cbf7f29036df25e60ed0367f9b0322cdfea71b7583d","ssdeep":"192:QwTDJd9ViDJ2nnABLKJk0TG9TI/jKsPU2LZ9FC:QwTlvwsn02u0T2s/zPU2LZ9w","tlshash":"2bf19ebcd3b74380f22542f480435bd3ba5bb921e5127d2687eb4115535c9f48b6f1a3","first_seen":"2026-07-08T11:54:42.172027Z","last_seen":"2026-07-08T11:54:42.172027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/Fat-Pirate-logo-12.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.224Z","timestamp":1783511642224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Fat-Pirate-logo-12.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10304\r\nlast-modified: Fri, 27 Feb 2026 13:18:52 GMT\r\netag: \"69a199bc-2840\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10304,"size_decoded":10649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb3abf1b63b529dacbfbce77141d0713","sha1":"d66d7cd249f048046bc3eec8d7eb37c345e6754d","sha256":"de13940234c35f39dc1a5b48c9123b4869f8df868e4290b255fb6683d48f86ee","sha512":"9454bf9ceae50728a7ce9a828c47a7001815531a84397bde6a5731cf3cc357f378fce1599a511f85536c1e6705c38a139d10b89c79111f3e10150865514a9202","ssdeep":"192:wwT9cKAJo9hSHQf5H4Q+uKTWl9S7gFuIM5fiQdPncQ/nQG3Rq8:wwTTVoGYQkWbSy2piQdvcCQGQ","tlshash":"b322c0f022522da8f203fdbb64ea5340d6ba2427961d37519311fbbf1f079c4249e98a","first_seen":"2025-11-13T03:52:08.194529Z","last_seen":"2026-07-17T09:19:36.553583Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Pragmatic-Play-Logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.240Z","timestamp":1783511642240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Pragmatic-Play-Logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16544\r\nlast-modified: Mon, 29 Dec 2025 13:30:33 GMT\r\netag: \"69528279-40a0\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16544,"size_decoded":16889,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aae7d6b0729b1ef715fae4050a6c62c9","sha1":"28efc284affde2703c5bdb1094665e40419aec22","sha256":"191ebf70a3907c562c308252b63f8cce3e502b608a682b0bbaf25aa2def4d7c2","sha512":"3b88ce90ac11a2032eb51a8edb342f6f822e9cbbd7a76bc5aed3a8ed1fd057948655d35aac22e7f7407e6f0e25954d4b6db0889b194ea9e40a4ebf1a0110f7b0","ssdeep":"384:UwTnj3HIWGiCTVBUj+FrenVaxfoSS1BfrtDyPyH/Mdy0Rt:RTnjYpLYnVmwNXH/MdB","tlshash":"f772d03551d80ce7f8afbebbe2548691f351c66e700289f90024bde91e979c08768767","first_seen":"2026-07-08T11:54:42.174526Z","last_seen":"2026-07-08T11:54:42.174526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.435Z","timestamp":1783511642435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4d38\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/slot-mafia-logo-1-1-8.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.231Z","timestamp":1783511642231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/slot-mafia-logo-1-1-8.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13870\r\nlast-modified: Fri, 27 Feb 2026 13:18:53 GMT\r\netag: \"69a199bd-362e\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13870,"size_decoded":14215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c8c0ec5bca8f1f3fb84bbaaa30919c1","sha1":"865dcf4b34ce4bae99d0ca36f2540b86f6553b92","sha256":"95a61edb440db2381ee48a9fab1c8a2bfe4b92937290a3d8727e6f8f91e0cc4d","sha512":"eeb46b1c393045bfa5e6fa34c93c31c32c18b322696606ee1ab3f34fe8408057b1c91e71d9c8a5aa505891ea0bcd7d51ea05712705bb55e1f50aa37d4cf81d20","ssdeep":"384:8wTcpa/ZFsVhzQdTn/tXBVBWsfBh5u+OOC61hcHr:JTGGiQdT/txnWspX4N61KL","tlshash":"21529c22433152e4ce635dbb23da3304e5f4aef9171d85a8641f22e55bb6abb210c91f","first_seen":"2025-11-13T03:52:08.192508Z","last_seen":"2026-07-17T09:19:36.549979Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/amusnet-gaming.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.255Z","timestamp":1783511642255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/amusnet-gaming.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2100\r\nlast-modified: Mon, 29 Dec 2025 13:42:27 GMT\r\netag: \"69528543-834\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2100,"size_decoded":2443,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"941fb5067769a097ac0413e7c225f87d","sha1":"50874ba87659877c0633fd7056429241b428ee3a","sha256":"34939e8a22111ad9763fae51b6b6626638fe9ed372f6f25a40c5d0f34f916b71","sha512":"11b5d3fb9aaf05a713357335aee64e5b969f693f4843265f7c1d040a83eae366192dabba6ecbe7e84919a84badf11d22f9e0aac265437f0d0c73f222e93a6baa","ssdeep":"","tlshash":"524194a473586261f020bb74a4a2af86ebb2bd70cbcb04191721973a47564c86e9ce19","first_seen":"2026-07-08T11:54:42.179284Z","last_seen":"2026-07-08T11:54:42.179284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.821Z","timestamp":1783511642821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en; c2_popup_unique_name=GVgRBVsdH1UdDFgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4bc4\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-17T09:19:36.575522Z","times_seen":137,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.826Z","timestamp":1783511642826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en; c2_popup_unique_name=GVgRBVsdH1UdDFgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4d38\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T09:19:36.569201Z","times_seen":174,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/dist/styles/styles.min.css","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.181Z","timestamp":1783511642181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/styles/styles.min.css HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4df90a-90cf\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37071,"size_decoded":5540,"mime_type":"text/css","magic":"ASCII text","md5":"b4ff3bfe226d51aa7d62c65d9dc21b68","sha1":"feb0060ac2a89a7e6cec259fe4fa2abc6554432a","sha256":"81adf3d9093244663cca03c502058b0131408962a15d9a035609f7908249f3fc","sha512":"9183893095c0cc667e25a3015080ecced33778f4cefc8d49b639875cc053b59945f2942b8606ba193e39bd68a30570d4d8ba0fbe852ad3ef95cb37c762b835fb","ssdeep":"192:/NqClYjXbiLZmBOll/qnewojZ815/t4ssaWZZ+ya76kCaZQF7hoCkiufoSfufTGG:TZs5eoQFlN3svBeb7","tlshash":"9ff222216ab738d9651ff018ef99260621585007f14addf8fedde2886fce29484b1b4f","first_seen":"2025-06-17T02:00:31.753232Z","last_seen":"2026-07-09T02:17:44.809919Z","times_seen":12,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.208Z","timestamp":1783511642208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 598\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\netag: \"660dd398-256\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":598,"size_decoded":967,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-17T09:19:36.573605Z","times_seen":32,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/desktop-screen-rainbet.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.223Z","timestamp":1783511642223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/desktop-screen-rainbet.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14160\r\nlast-modified: Mon, 29 Dec 2025 08:56:31 GMT\r\netag: \"6952423f-3750\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14160,"size_decoded":14505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f9a3e76cc51dcb79339e94d2d6c058c","sha1":"a064f8d6a27281c0c0e4fe9bb2a852fd0a125f85","sha256":"6f94fa1cd1344b6131199fac4f4688bb4156490f93d3c945d979bee8c252511a","sha512":"855bd1c9acb685eab501ec75d2d0f04bdbb581fd2c874920853b7342c4066d5b3309ecbf8a3acdb05ec614cfcc6c0a88a6984102612555accc1edea011470200","ssdeep":"384:jwTPN/MuaC7SctjWswDIa/8SwAmhqlERuNwFoD3G7oQP3zD:ETP35GcjW7V8lAmhqlERuGFEG7P3P","tlshash":"db52cf6e34470885d499643dd956f8438004a90604f5cf1a23cb7a376f8eea7b78efad","first_seen":"2026-07-08T11:54:42.181814Z","last_seen":"2026-07-08T11:54:42.181814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/lukki-casino-8.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.237Z","timestamp":1783511642237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/lukki-casino-8.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4418\r\nlast-modified: Fri, 27 Feb 2026 13:18:53 GMT\r\netag: \"69a199bd-1142\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4418,"size_decoded":4762,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d01b3e09ac6a68bf4ddd5088eeece361","sha1":"bc6eb050ea932e43f3c03c6dde7a584b9545b7b5","sha256":"d9db133b5472ada60b4553b9b14628cbb581b4aa8d9040806980bf3e74e47cdd","sha512":"d5024135988eb1fe6d7343af4b185a87a3bdccdec270cdb5c02be82dd856bcb9db604ea4e2d70131e6381ed321d99905a9c27909e6c4b5d92d4302d9a6314db2","ssdeep":"96:TElbw+iXtIRGmci3vpvaJmkrL9Bu1ROoSD86pOvBVeKlginBdCrbFzN:OwTCUmci/BaJ1XSFVFLBYPf","tlshash":"05915d1e97a6d382eb216ffce1902356a3157d31c2857d3145e9672b8300ee42f59e2b","first_seen":"2025-11-13T03:52:08.129441Z","last_seen":"2026-07-17T09:19:36.562412Z","times_seen":9,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Playn-GO-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.241Z","timestamp":1783511642241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Playn-GO-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10372\r\nlast-modified: Mon, 29 Dec 2025 13:30:32 GMT\r\netag: \"69528278-2884\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10372,"size_decoded":10717,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bee9cd07e8de56d783110fdd938a821c","sha1":"d38d4a57794e750e25bae44898dd2cc671a9a6f2","sha256":"afb05418ceea5b6878d97b9eb47993c5debf7257c7310ad726c1b89c0f6dbd8e","sha512":"3cdf65c8add6ffccc7e97863b006e5c126df0395e081260ddb8216841d18cfc757feeb6a5828729ed0c8292b0a07052342ce3206b6e9cf6e60dfac42ca8a4976","ssdeep":"192:fwTdHlBv0azM6i1D5C83fAxAaYXHq9iIxTF/t++QJHGPghC/eaoBbxyYf6o:fwTdHlN0avi1lKAs9zt+lggxyI","tlshash":"c822b05357171b37f48c1d34f8b18b16ad3c98a3011a5b5abef8de600a502c6e1dd3a9","first_seen":"2026-07-08T11:54:42.183312Z","last_seen":"2026-07-08T11:54:42.183312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.205Z","timestamp":1783511642205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4df90a-2125\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8485,"size_decoded":3034,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3531)","md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-09T02:17:44.810477Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.475Z","timestamp":1783511642475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 282\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-11a\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-17T09:19:36.583551Z","times_seen":104,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:54:01.280Z","timestamp":1783511641280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: pll_language=en; expires=Thu, 08-Jul-2027 11:54:01 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://rainbetlegal.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetlegal.com/wp-json/wp/v2/pages/20433\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetlegal.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"Yoast SEO:25.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311221,"size_decoded":52644,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6102)","md5":"40cbf225f5bf5f8e2cecbed388622cac","sha1":"f0c5d6c4ba135ad9d860c0e68db7815720acbfe2","sha256":"f3bb25fe07280090cce1e171ab6a2d506618f5abaf400bf9dd1b9bf27f12b97e","sha512":"7275235c5b5ccdc409f8233ed7d2df8a90cf5da28f15106866f0acdf9aed3bd0f85299a25f6a6ea08d6edeb16a907bdf0adb3ba6e56a448685e76083100a6402","ssdeep":"3072:y7CON2apPVm7pFB6b6Tex5wzhATYIAGBCSdvEr6:yT2a/m7pL6b6Av","tlshash":"7764ea2b46b72059253b716d5fe96709722c9003da05cde8baded2888fc6f91c973b4c","first_seen":"2026-07-08T11:54:42.185947Z","last_seen":"2026-07-08T11:54:42.185947Z","times_seen":1,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":67,"connect":16,"send":0,"wait":522,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Betsoft-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.251Z","timestamp":1783511642251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Betsoft-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17916\r\nlast-modified: Mon, 29 Dec 2025 13:30:24 GMT\r\netag: \"69528270-45fc\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17916,"size_decoded":18261,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fbdc01fa8aba517cdf994ee01766d6dc","sha1":"9299c5c2f8440adadb2e4b765a61f2cc92561f7e","sha256":"7cd9a2103d62648a735b0803e80ed794674e7e03a6c966931de5e464c281278e","sha512":"16a2c3e4bc4d4d612385ba373e979b49afb8b4d176530f14d021e2e7fa6c55376250193217d2bee92b119f1714925a13b144f07da31abfc9b163a518ef04b437","ssdeep":"384:1wTKZ2lCnMoPhzTMEg5hiTkacLr/ZDF5Jj09nESIRj7/:qTKwDoZz4J5gTUHZZnj9","tlshash":"c0828c0e2241525dffe0717cf66abea2627427a0a1d27900423c9335e16d8ec7c1bbde","first_seen":"2026-07-08T11:54:42.189424Z","last_seen":"2026-07-08T11:54:42.189424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/08/crypto-e1756632537638.png","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.264Z","timestamp":1783511642264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/crypto-e1756632537638.png HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1833\r\nlast-modified: Sun, 31 Aug 2025 09:28:57 GMT\r\netag: \"68b415d9-729\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1833,"size_decoded":2175,"mime_type":"image/png","magic":"PNG image data, 100 x 47, 8-bit colormap, non-interlaced","md5":"b84bcf221a1aa521753eef4c594e5a53","sha1":"3bcae34bfa59ff86de7564c42277ff0cee93505d","sha256":"9497163275635d488d4c1e2b75f92219a89e2114bf376676f466590c3a48cf6b","sha512":"94bdaa24d5926d211834d92dbc94f11c51a01c619237a6b3c5503fed5c626f3f1b34974f32ecb38f74cf2d68abd3abea146098fd95a20f0dd4f98f2f40b55abf","ssdeep":"","tlshash":"513109e8f4a6c8dfd924195be8c51d358931e80b2da007f1765b6e381c843e9b8e32d9","first_seen":"2026-07-08T11:54:42.190471Z","last_seen":"2026-07-08T11:54:42.190471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.198Z","timestamp":1783511642198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 07:00:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4df59e-1397\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5015,"size_decoded":2175,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-17T12:36:54.141044Z","times_seen":36762,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/1xbet-2.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.236Z","timestamp":1783511642236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/1xbet-2.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21310\r\nlast-modified: Fri, 27 Feb 2026 13:18:53 GMT\r\netag: \"69a199bd-533e\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21310,"size_decoded":21655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77eec379564edb6287104dfda9645466","sha1":"341adf4051f285ba548cdea4569a7547098ea883","sha256":"a1342708a6d7976d0ae545897dcfeef18e26cb9792b098ac8a72999d78416d17","sha512":"4aab9dc2c8f5fa606939a1588a9d5e9c04754b8ebdc7d6934f05ee3efc0a2c0cf8c2659e3b103f359388e94d1efe75c0aaac1477f2739d2d47ff2af666afd562","ssdeep":"384:XwTxfReHXGpEudnM4xN54obhB4lguiukpxHIPIso8sbCSkGCfIvIcAQ8N:ATxfEHXOJxfxuvk7TzbCvG5rAQ8","tlshash":"24a2bf4acea20493d357cef92ac497824b79926ac429e03549b1460163efcd49e6cfcd","first_seen":"2026-05-10T08:25:06.379303Z","last_seen":"2026-07-17T09:19:36.572989Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Edict-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.253Z","timestamp":1783511642253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Edict-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12774\r\nlast-modified: Mon, 29 Dec 2025 13:30:22 GMT\r\netag: \"6952826e-31e6\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12774,"size_decoded":13119,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e68b8d33c8e38666627d5726eb5db56","sha1":"23584a08c1e6673d9b78aa9fc04f4223e2dab1b1","sha256":"5161050c676fe4b31183865e6fca9f5c5f0baf5ea7a8164b859fb05858a84559","sha512":"e6e84dc526e120f5b37a5e2c24c5b71fb56816e17eb5b90800911f1599c76f33ee8d61a3f69025ea8c418da4537745cee69ee9d5eb08a58a645f4fcf6d4490e4","ssdeep":"384:uwT9SHw+hK+AvAbPixT12+ePjQPWBdSsHq46tq2keMTD/5mDj:XTKwiK+4AbiMNQPBsqIReMnByj","tlshash":"6e42bf922357630ae6edaaf1c093f7520b559e1c9d436b3ed08cb7b08a6c41187cdb17","first_seen":"2026-07-08T11:54:42.193208Z","last_seen":"2026-07-08T11:54:42.193208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/08/18.png-1.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.259Z","timestamp":1783511642259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/18.png-1.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1674\r\nlast-modified: Sun, 31 Aug 2025 09:24:58 GMT\r\netag: \"68b414ea-68a\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1674,"size_decoded":2017,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ddb9679d196cec820639d2f1c1705278","sha1":"4c17778abc3d28628a47582d0e4da8d8a798f449","sha256":"f761861b05235b7837d4efa97a4b41610d99da3d72e75f92786f3ea98f6190a3","sha512":"2a46125c0b6f2989ad13ad9dadb536f86828aa235435f5318f5c7997e2333187aea5e187b23ff43bf95b39562070c2ef5c3a72644fb089b6fb8a0427c6645f68","ssdeep":"","tlshash":"e1311aba8712fe7834012bd81624b80b2f42a047181a105648129ceedf6ca18fc73512","first_seen":"2025-06-17T02:00:31.737495Z","last_seen":"2026-07-08T11:54:42.194181Z","times_seen":9,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.177Z","timestamp":1783511642177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Mar 2026 21:00:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b0867a-ade\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-17T12:41:34.869547Z","times_seen":30370,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/rainbet-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.220Z","timestamp":1783511642220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/rainbet-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1874\r\nlast-modified: Mon, 29 Dec 2025 08:38:23 GMT\r\netag: \"69523dff-752\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1874,"size_decoded":2217,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"392c0ecb988b1e06e580fd2cd3c08aa4","sha1":"c840fe1edfd6f3fbe1f893a1dc12105039f20134","sha256":"74e89e6a49bd1fd15559a4e46daab1a1b26bb3355e427e19e86bd4abdaa4e2c0","sha512":"ebf2c7c8cbe0dfb0d10f771ae7f55d445b879b5430979e8e29ad684fb8af624b45bc9aefeb4b65d96cee9a1cdd04592595f54bcaf22f29a868483740a8811c6c","ssdeep":"","tlshash":"2b311abf5784f704e098ebb850c16bc27398b571e29a1b120e8112321b1e4cbdcce183","first_seen":"2026-07-08T11:54:42.195349Z","last_seen":"2026-07-08T11:54:42.195349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Microgaming-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.243Z","timestamp":1783511642243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Microgaming-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32786\r\nlast-modified: Mon, 29 Dec 2025 13:30:30 GMT\r\netag: \"69528276-8012\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32786,"size_decoded":33131,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb66e20b4fe87edbd66b6e17095107f4","sha1":"826e770daf9451427b243e3bf3d72b8f2e153481","sha256":"1b36a83072fdf38dbf2bc75c45cf916bc456a7fe747cf7a22653bacdd046a1e8","sha512":"399401c5d72d7f1867d4016d2db22613177a20882dde557d46558add87900bdbb554d2b856f9673fbeff46eb52ac41cd29bbc611c2ece8e0c34cbc08a83db321","ssdeep":"768:/T1OIjZuq9e6YQO9aeBJKa7fase4ddcH46SrANsUBBg:HZLg19aeL37dejYzrqB","tlshash":"35e2e08a92556435ee850e382d4e6c0ecb8b125e5a78cbd2809391f3dbc7cd872e874d","first_seen":"2026-07-08T11:54:42.19626Z","last_seen":"2026-07-08T11:54:42.19626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Yggdrasil-logo-white.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.245Z","timestamp":1783511642245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Yggdrasil-logo-white.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3668\r\nlast-modified: Mon, 29 Dec 2025 13:30:28 GMT\r\netag: \"69528274-e54\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3668,"size_decoded":4011,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fba8f8644089b944be747f9baeb435cd","sha1":"36acbd6dda5690b79e4fb35fc30263bd65df0b77","sha256":"023d9ca3600af0b1c1ca406361bb1eab8066c3ed7a4a3d30883b824b38dea389","sha512":"38544809156a993ba7f28d9ef75688ccd53734de5d6f84c38b1151886fed208b0afadeb7b2fc7a892ea5fa7f8c8325228c661da952b404bfb00b9efaf9eb4236","ssdeep":"","tlshash":"c5714d387355913ef19277b8223f2fc5f78d3650414ad704e968883d0bd19a19cbac71","first_seen":"2026-07-08T11:54:42.197159Z","last_seen":"2026-07-08T11:54:42.197159Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Hacksaw-Gaming-logo-white.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.249Z","timestamp":1783511642249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Hacksaw-Gaming-logo-white.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34422\r\nlast-modified: Mon, 29 Dec 2025 13:30:26 GMT\r\netag: \"69528272-8676\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34422,"size_decoded":34767,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9a5d7dc4e1d011aab24347ed6251ed6","sha1":"82953fb016b6d87a1371193ed871dd573a3e374c","sha256":"84dd006b89cfcaf599183b82888f7e0d1e80e0f8225ec357b5e3528be8803485","sha512":"3ea6b42acc8bf6658ea094e3a0d7ea5487d212507856d8fee32266cdf298a377c9a0cf71461f56dc6bb871811cec4b5199a5ae8a0abd264c57e3152122d12a85","ssdeep":"768:hT076E0Owo7Y55r1o5uUbgBLt4P0r0GIB+0go7JUMukw4:C6X+8T1yMtt+0r0GIxHL3","tlshash":"03f2f18a1c45a5d2edf176f8b9c34bb6aa27fc791e1b84155e0021bcb7326ed90d80dc","first_seen":"2026-07-08T11:54:42.198009Z","last_seen":"2026-07-08T11:54:42.198009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/CAD-150x150.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.219Z","timestamp":1783511642219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/CAD-150x150.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6988\r\nlast-modified: Mon, 29 Dec 2025 08:21:23 GMT\r\netag: \"69523a03-1b4c\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6988,"size_decoded":7332,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e912e58ff8e8e9bfd79eef6fdce2a84","sha1":"904dad5b7eea911343b669b6985f69749bd050fb","sha256":"b8456df153b773d3b6c77c6fbe886efefdf9d1b03bcc2de87eba1b8a2cf04a8e","sha512":"ffb0338208df090e64193d677f7d985f07ebfcfd6a0ba4dd349dd3a16c98cb19be701fde113234cafbd85c0afd9aa281e7bc12d2e16e25ddf83b8ca91f7cd1b2","ssdeep":"192:rwTJzjVoArmGE8J/x7mgHXio8HBz2D/gNR287f7s+m:rwTJdYpAhmxX07Ctf7s+m","tlshash":"27e1af5990341b0af15a337950b36f13f3b8a97dd7d81e820e55d2b4e626488d49c12b","first_seen":"2026-07-08T11:54:42.198935Z","last_seen":"2026-07-08T11:54:42.198935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/Logo-black-2-scaled-1-1-1.png","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.227Z","timestamp":1783511642227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Logo-black-2-scaled-1-1-1.png HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 35674\r\nlast-modified: Wed, 10 Jun 2026 14:48:34 GMT\r\netag: \"6a297942-8b5a\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35674,"size_decoded":36018,"mime_type":"image/png","magic":"PNG image data, 240 x 112, 8-bit/color RGBA, non-interlaced","md5":"e3e7d3767b0ec1a8dc053f8a6d64b7c3","sha1":"f56d4cfe52e6207ea2ba7f4727e6f6b78f50042b","sha256":"1e9e342045c462ea2050b85f8489f560c2fc245da8136cae9e98827940748553","sha512":"b080ad48f4b33103f3f1c41a12e0e578f2951cada4ee3418922ffd983499cb37686ef31319eb01ab5dc5d3ba0d1512e627204b7947360b1d1e0b967859f7421d","ssdeep":"768:nLPNALQ1XHGFOHLLT6eDDHhV8x0oLu5agG3oAz9vVq+:nd1XH80LLu6HTN+u5ag89zxVJ","tlshash":"cbf2f1e25e5952b49d18e328cf00d16a573f196e80ff3a9f88f84f24132ee5ee40465a","first_seen":"2026-06-22T07:10:50.454495Z","last_seen":"2026-07-17T09:19:36.557534Z","times_seen":7,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/casea.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.228Z","timestamp":1783511642228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/casea.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4626\r\nlast-modified: Thu, 28 May 2026 08:48:13 GMT\r\netag: \"6a18014d-1212\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4626,"size_decoded":4970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99854d0a11a9071b5bd0c7b524240ec4","sha1":"cf6a6a259afdadcfe429374ad3a0d51e30c9262d","sha256":"333b32661434cb1ae472903224465055af7f02193ac37189529020f6204276d6","sha512":"017b2a49e749a74b0f8b61217bbffe0a88b766d7441410b96d0672b3b4826b3edb71c4e139206dc9d734b68fd1593e91b9030969ee93b0824ab027a7943110a1","ssdeep":"96:gElbw+iZT9OliRStMUZedQGjvTOIimJV8endhCPllse5DHFmEF:FwjGiRStlopj7OIisVNdAPbxF1","tlshash":"45918d712f4653bdc1180af80b69f18b83ddb03cc1ee466b54940023be614e6acd1ec7","first_seen":"2026-07-03T10:53:35.713042Z","last_seen":"2026-07-17T09:19:36.55851Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/lucky-hanter-1-1-7.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.238Z","timestamp":1783511642238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/lucky-hanter-1-1-7.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8428\r\nlast-modified: Fri, 27 Feb 2026 13:18:53 GMT\r\netag: \"69a199bd-20ec\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8428,"size_decoded":8772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"500497469fc4d9c8535196fbcc740b05","sha1":"354360f6ddbe55afc69f59e694de47d9ea88fcc1","sha256":"a1130edc12b108309f078b239cf9edaf461ab0dbe162323bfa31721218194d7a","sha512":"31b94c02fd24cec0c61e530db7036a52a4c3942847548355977e3f56923661d6003b8423574f19d698c621f6b9d7f4bc73af7b032ec53d5e6f76da963f1e5e6a","ssdeep":"192:NwTJLik8H9zUQ1K0oTatnYrJVphEzOph0ldaT:NwTJv8obQcJV4zldaT","tlshash":"0f02ae092bb60dafe490517d5e69cfd2958841a6c2de3f9903cecb26716ea441c4a273","first_seen":"2025-11-13T03:52:08.173283Z","last_seen":"2026-07-17T09:19:36.581337Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/evolution-gaming-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.256Z","timestamp":1783511642256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/evolution-gaming-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15826\r\nlast-modified: Mon, 29 Dec 2025 13:39:49 GMT\r\netag: \"695284a5-3dd2\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15826,"size_decoded":16171,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac465f8ae2bb60049af12d176a49247b","sha1":"9bfa9f9a9fee0a8a66282668ba98d537c425cf02","sha256":"a3858f762ba2d6086ae212897087696e256d12e7ca57b4da37386696820a749d","sha512":"bc9dd19eddfecb8cc5a0d6ce01b4874d6fd7dc7cc84ca34048c61e7dd89836ff72362ae5112c5a4c497fc2f9092de7a8e2d19d2489a3d1cbe6e6868754e0d2af","ssdeep":"384:MwTAUoPRjxYwPks22kl0RPh/kDk1n4pvtUz2q9r1oi76HY0jxCg+R:5TAvrTPk3Ap/0k1nAt02UR9wZ+","tlshash":"d362c1027179842fe29697b0d8c27d317bfe3e5a17a5fde9805a872fb893489004d16f","first_seen":"2026-07-08T11:54:42.202452Z","last_seen":"2026-07-08T11:54:42.202452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.173Z","timestamp":1783511642173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 Aug 2025 07:05:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b3f435-d0f\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3343,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-17T11:46:23.607118Z","times_seen":4452,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/06/National-Council-on-Problem-Gambling.png","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.258Z","timestamp":1783511642258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/National-Council-on-Problem-Gambling.png HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 10412\r\nlast-modified: Fri, 19 Jun 2026 11:40:36 GMT\r\netag: \"6a352ab4-28ac\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10412,"size_decoded":10756,"mime_type":"image/png","magic":"PNG image data, 166 x 50, 8-bit/color RGBA, non-interlaced","md5":"72ae98bb42b8f926c7e4e9bdc322a8fc","sha1":"9e95ad3bef7dcd590fc7bdda068968e707cee2ee","sha256":"aac2bde487df3c1ba8bb8faafa03f36b231130e19f6accbe8d456baf51e6ec78","sha512":"95142ac07f63f2bcea231887ee4af9c3594a6cdc2c18cec0b5befaa9e2b86a37d13a09d5bf884ca239909b4279b74b145cbea7fe15ddf94c2d1db19d1450c1d3","ssdeep":"192:UC6gLIj+jUucBMQhGSgUjo44UgUnJxEbVuuZBXZb7EwlzEyV4Onvi49s1ytW29:UC6gLw+oufo+UfuZBXBEwlzGOps1ytB9","tlshash":"f022c03d6c109ba7dadff3f42cc63f0ac8f327526981439aa1891e536e5498199370d7","first_seen":"2026-07-08T11:54:42.204351Z","last_seen":"2026-07-08T11:54:42.204351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/08/google-pay.svg","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.262Z","timestamp":1783511642262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/google-pay.svg HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 31 Aug 2025 09:27:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b4158b-af0\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2800,"size_decoded":1692,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f564e91d755a5981269f25e3229b317e","sha1":"90ef8b35b6b5b075057aeff81920bb07428db040","sha256":"020267c6e697628328181afde1a743c9dcaa208506de33c2d8151653f57fe6ba","sha512":"715f035150e5953e5259616d7342262bc4dd23e3c4b866ec384d13831a7c5488c0f72edcfaaa7d2e9f420f7e8482a7ad113413bb274d6fb82a37cedac672a988","ssdeep":"","tlshash":"de5172c1233063a8a90493fd4b3af0b53f620cf57a469878dbd25c1294612adcdbacc7","first_seen":"2026-07-08T11:54:42.205382Z","last_seen":"2026-07-08T11:54:42.205382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.824Z","timestamp":1783511642824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en; c2_popup_unique_name=GVgRBVsdH1UdDFgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4c7c\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/08/visa.svg","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.261Z","timestamp":1783511642261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/visa.svg HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 31 Aug 2025 09:26:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b41547-509\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1289,"size_decoded":1041,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c58486058ef656c134706147a8b9e0b6","sha1":"a9683cdd2fd9a7cd973b695b821c2aabba24ce6a","sha256":"8409d8045d030b70e8ee8047c85f18ba9845def89f6634e59123f3dbbd399635","sha512":"a326344f5387a2f7d92fb3b921429bec56157b3d763e21f7564b06bc719a87b49181c7574007c402a893eb99f93c26c8b715af68e51374066331ead2d724c3e4","ssdeep":"","tlshash":"2c21128947e4d378b804ebb095acdced7a1322ca5a95b1f487c10d1655ba4dd40cd4db","first_seen":"2026-07-08T11:54:42.207143Z","last_seen":"2026-07-08T11:54:42.207143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/Gransino-casino_logo-13.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.232Z","timestamp":1783511642232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Gransino-casino_logo-13.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11764\r\nlast-modified: Fri, 27 Feb 2026 13:18:53 GMT\r\netag: \"69a199bd-2df4\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11764,"size_decoded":12109,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de4423a831842a22de1885b71e228ab","sha1":"c9bed5a72e642a86a69087fd150cb6db0c0135cd","sha256":"457a0926d55c930b17bd92fe88049283a2f53f8b39136fcb5fbbcb23a0b8b176","sha512":"7ded7a6382ed74a24188b344dce13e47e154d4faecba1376498af60ddb1b4f84cd2a77214664807eff4639e1e6c0d9d8c75a252956611ecaf1ba88574abcb71d","ssdeep":"192:HwT88rZHYe3PDSIhmR/VSRVOUSsPvpGftFGIfX+6xGhZ1xASU2:HwTNF4e3mIa/nUtPvcfbGIW66D","tlshash":"0b32c057f730ca4ccb0943331d559f849b2a2d366227cddd9894e8d325173e8ae6aa33","first_seen":"2025-11-13T03:52:08.138651Z","last_seen":"2026-07-17T09:19:36.580705Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/Logo-Playfina.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.239Z","timestamp":1783511642239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Logo-Playfina.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36516\r\nlast-modified: Fri, 27 Feb 2026 13:18:52 GMT\r\netag: \"69a199bc-8ea4\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36516,"size_decoded":36861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78d693c5ffcb8938f9d786a438c637a1","sha1":"cbab5f0e49f47e88cbcf3e0e929dfe9375c7ca11","sha256":"159396cb290ee45165cbaa7d8d0d691d22e090f6c56ae107106ec4589af3f15f","sha512":"606109185e43a415dd6bc365a8fbb1cf975436ecd6a119ffb108c18bd4bd6b5025f1ab21568df69f2202c0519f327cd4f15210ce8ccba4a47b5aea8103d97021","ssdeep":"768:VTNOoMmLx7Qh5c2P8lV8/ST7KBLuuyWn/6pBGdCF0SJWgv:3nzx7Qh5c6+8/ST7uuuy4ypwu4w","tlshash":"b6f2e09b6316770aef789b7c7ec2ea53702b79109ef85aa3d07084a329981c69495c84","first_seen":"2026-06-22T07:10:50.512438Z","last_seen":"2026-07-17T09:19:36.566536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Wazdan-logo-white.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.246Z","timestamp":1783511642246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Wazdan-logo-white.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5654\r\nlast-modified: Mon, 29 Dec 2025 13:30:27 GMT\r\netag: \"69528273-1616\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5654,"size_decoded":5998,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"062e9709ded6631cc1414a4505669916","sha1":"980f4b653e50db903b6fe9e7ea707a8ee5d25a9c","sha256":"7c8bb28a006e1a6fdc9a98ea98ac041dc44701d67c94428ab93b74e40ec24e30","sha512":"1d5d8b67fe35f8d5a8aa73afb6167355c01176ad658395f32b6d4f54795b3b94ac8ceecc11b1f753aa77971cdb7ada2de9243756f9b80a9d8df1c3a35f74006e","ssdeep":"96:8Elbw+iXesbLecOH79Lo0vp+zXy3rrwV8J4A5ttBf7/UoJHI4Ez18CHmGwkJmv:JwTyH17Rqmrw+J4Aft5ZJo41GwkUv","tlshash":"aec17e31276c0e8cd07f7fb06206a7d1a83b4c98be97332784d0922b2b959c41e99d87","first_seen":"2026-07-08T11:54:42.211001Z","last_seen":"2026-07-08T11:54:42.211001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/08/apple-pay.svg","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.263Z","timestamp":1783511642263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/apple-pay.svg HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 31 Aug 2025 09:28:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b415a0-85d\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2141,"size_decoded":1449,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce4772e8b81054ed7567cdd01aee51b7","sha1":"c8bec4ac4a88e1d5ad8e2f43062afab0a19e4f11","sha256":"74b8f534f1fa0d5a5c4a401b231e9afe92852a789b41ad142d0629943230f5b4","sha512":"4f0b9b8049d764f894802a0ad2fca1d47175a873e01d98adea942d9ea4d1d9dd6d4dfd38a9dbbaff69fb689b0b58db7bccd6ab4637a0e705ae33024a17e3995d","ssdeep":"","tlshash":"7541268037a6d2a8f405b7fdcf254036be75b6d969c2c534cae06d0ce4a28cc69154db","first_seen":"2026-07-08T11:54:42.212011Z","last_seen":"2026-07-08T11:54:42.212011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.179Z","timestamp":1783511642179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2334\r\nexpires: Mon, 28 Jun 2027 11:54:02 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etqiJxiDNeTtnFMMEeWcqmGLHH%2FhVygjgwHpqHDMDMVXkm8gxDSP2Jl8SUa6CM3s%2BbKE8PApXI%2B%2FlOXwk0iLGIlBxz84l1bilBppfU5EtqXB6AxLBdETXfKxAXg8g5VIzylNNDm5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a17ee453be6756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59305,"size_decoded":11436,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-07-17T12:27:22.251279Z","times_seen":45966,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.182Z","timestamp":1783511642182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1027,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-17T09:19:36.556937Z","times_seen":34,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.202Z","timestamp":1783511642202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 31 Aug 2025 07:04:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b3f40d-30e0\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":3879,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-17T12:37:28.648772Z","times_seen":216612,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.204Z","timestamp":1783511642204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 31 Aug 2025 07:04:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b3f40d-348c\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":4641,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-17T12:37:28.676133Z","times_seen":224249,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.207Z","timestamp":1783511642207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 984\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-3d8\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":984,"size_decoded":1353,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-17T09:19:36.552209Z","times_seen":32,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/Rainbet-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.214Z","timestamp":1783511642214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Rainbet-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8328\r\nlast-modified: Fri, 02 Jan 2026 09:50:13 GMT\r\netag: \"695794d5-2088\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8328,"size_decoded":8672,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b01100eea38d543ca11e444208ea046b","sha1":"12c526730d97b2b65443d9b0810c071c96877db1","sha256":"bdf7fc35acefb1209707cde1f89c409fa37183390feaac4b8afff18668754a6e","sha512":"916be7a2cd368e27c1726038dc1d2d2cf7c15fe8046f6668b25871f069682c94cd4cc4c8402e0b2d61c2c2fc7d00a743953fbb8a1d950a9e1489ab3f30338d45","ssdeep":"192:yZP7rShs/hqqtu3niyMgkXc5ptzXu+TPoqAHyNRxmSpHIEw:UPEXiCMgAcxzXu+TP5uK6SpHQ","tlshash":"1b028e212c46167f7d8cb7244dc8e464ca735464dd955202eef2ea3376222837abb050","first_seen":"2026-07-08T11:54:42.217214Z","last_seen":"2026-07-08T11:54:42.217214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/bitcasino-1.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.225Z","timestamp":1783511642225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bitcasino-1.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9362\r\nlast-modified: Thu, 28 May 2026 09:04:33 GMT\r\netag: \"6a180521-2492\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9362,"size_decoded":9706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-07-17T09:19:36.554611Z","times_seen":10,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/06/ConnexOntario.png","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.257Z","timestamp":1783511642257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/ConnexOntario.png HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 15182\r\nlast-modified: Fri, 19 Jun 2026 11:40:35 GMT\r\netag: \"6a352ab3-3b4e\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15182,"size_decoded":15526,"mime_type":"image/png","magic":"PNG image data, 417 x 50, 8-bit/color RGBA, non-interlaced","md5":"a67e1f31aa82b44392e06a38e5f85888","sha1":"783bf153bb95eee0ade9446a5a7e471f8fe503ed","sha256":"30f192debeaddf788dd3440855fc5f406b3ffc7dd811a66847cce2eff7883f93","sha512":"7d2ce078a5e47d7218a8d8efd8963f8fbf036d7e2c38f011e0da52f7d4d6fef702af6e5074533dfdd3fb879e8d5f5104fb7741345465fc30a9b0d6b2bd977104","ssdeep":"384:2N3pneDojlKTRwffJKxxgxGKAx8FdAsTj4aRhnahPWyD:6t3EROfArwGJEdAsTj4ajWPZD","tlshash":"c462cf7098b303a3d80ab7378dca366880e72a59447175dc27ab4c0f4ed0e625b9f0db","first_seen":"2026-07-08T11:54:42.218607Z","last_seen":"2026-07-08T11:54:42.218607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/Goldex-Casino-Logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.230Z","timestamp":1783511642230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Goldex-Casino-Logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10772\r\nlast-modified: Fri, 27 Feb 2026 13:18:52 GMT\r\netag: \"69a199bc-2a14\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10772,"size_decoded":11117,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b743c8b52d59a4896ed4a107b8464a5","sha1":"3c377e02290e1c945fe95683c6c48a30e9133af0","sha256":"3f6459adc35f31999790a201dbac78ccb7e39be24e50e3b903c0e1757ed6f995","sha512":"f8c1a06382479a20b21bafa7ac56d0a931e35372ec915d63195edabd161310b5de2b284ea2e879d256f63446033b10285caf2573948cdd17c481cae6444c986c","ssdeep":"192:QwTCf/R1TjpVlxSLqYUGYrcXrpbyC+oaAn/k1WL7bqVItIuPxwEmmc:QwTCnR1vpVqG5GYrcXrEhAM1XmtImwE4","tlshash":"2a22bff052338ab5ed435134a0e27bc4a0eff51c4fadcfa6874507032e66961969379e","first_seen":"2026-07-08T11:54:42.219485Z","last_seen":"2026-07-17T09:19:36.556302Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/banner-rainbet-canada.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.188Z","timestamp":1783511642188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/banner-rainbet-canada.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19796\r\nlast-modified: Mon, 29 Dec 2025 09:04:10 GMT\r\netag: \"6952440a-4d54\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19796,"size_decoded":20141,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e24f54b532ecad378788b59852ec6fe","sha1":"8c840e98230a211380f88465cf17c90d33cd839f","sha256":"dcd671c4c3981c4948614e71e6cf8f4db231011e21b0f2c32566bcaf46cf69fe","sha512":"e4e9216ac1c5672b1d227abb96845db2bf3300d96ebb7298fcb543726a6bfa557263ab228abaf32ae122895bb55d6752af103b87c8f2b28f182baf55d820d27b","ssdeep":"384:KwT0QZ8mbMKvbADLgx1oRgYi7WDr0WKlkAzvy3Tb9nAJusTJ6:rT0QPMKvbRn7izKlkEvW9nGTJ6","tlshash":"1592d03e5afb520becdbca3cecb57b06e91a9637d8d5fc2888fe42024525152dc0d541","first_seen":"2026-07-08T11:54:42.220315Z","last_seen":"2026-07-08T11:54:42.220315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/01/0x0__28_-removebg-preview.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.226Z","timestamp":1783511642226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/0x0__28_-removebg-preview.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15200\r\nlast-modified: Tue, 09 Jun 2026 13:52:08 GMT\r\netag: \"6a281a88-3b60\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15200,"size_decoded":15545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a29908cb688d388f9d676f2df3005a","sha1":"08fd835f8877b50dfa0bf86c7c7289bf80bceb19","sha256":"e5387df49b389f37e9edeb9f2ad57bf1a905bde34505abd4b53abe7484104207","sha512":"5e8b9b2aaf1e4add5ab7d7fd51938b68f06bedbcc2fb14e60ab325e939b7ceb515d979ab18de9e276618df0be209cb4408b775264c1c0cb74d7da5acd852abaf","ssdeep":"384:VwT6fMoelWQoVm1B91IqkeutDRdzIww132gLcpznBGrJOov:KT6cWQoIWeMDzTw1voBOOo","tlshash":"f962d162361e5d30f093797ab2c3716f2329dd21a3794780624e54ef1bc8de20e885f8","first_seen":"2026-07-03T10:53:35.712019Z","last_seen":"2026-07-17T09:19:36.555317Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.425Z","timestamp":1783511642425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-df\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-17T09:19:36.586377Z","times_seen":37,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.431Z","timestamp":1783511642431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4bc4\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-17T09:19:36.575522Z","times_seen":137,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.432Z","timestamp":1783511642432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4c7c\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-17T09:19:36.561132Z","times_seen":167,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.436Z","timestamp":1783511642436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4c08\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2026/06/rainbet_fav-36x36.jpg","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.556Z","timestamp":1783511642556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/rainbet_fav-36x36.jpg HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en; c2_popup_unique_name=GVgRBVsdH1UdDFgURVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 631\r\nlast-modified: Fri, 19 Jun 2026 11:47:27 GMT\r\netag: \"6a352c4f-277\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":631,"size_decoded":973,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 36x36, components 3","md5":"0b8ed7b373bec561de728fd7da5e070c","sha1":"734c0a4e005e727d0eed9795a1b36f2d4eeed56e","sha256":"8037afeade4292ec1e07ea43be7665a98788fba53d37893ccbc2ed5ab6df7629","sha512":"12b6532bd4643a01332e7a32b8acad38aad5956d3f5d57ce42645dd2caf92c8e42f2113e73dde6bdbd8f8776ef5bd16fdbdce007195283c68bf446b410b39420","ssdeep":"","tlshash":"7cf0209e1b608285c9042d7c4d410b0dd3033956aee2a6960373e50596a07ee8c78c30","first_seen":"2026-07-08T11:54:42.224243Z","last_seen":"2026-07-08T11:54:42.224243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-includes/css/dashicons.min.css","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.175Z","timestamp":1783511642175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 07:00:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4df59e-e67c\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59004,"size_decoded":36087,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-17T12:52:16.148382Z","times_seen":61850,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.200Z","timestamp":1783511642200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 07:00:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4df59e-1641\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5697,"size_decoded":2814,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-17T12:36:54.326812Z","times_seen":35956,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/Booming-Games-logo.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.252Z","timestamp":1783511642252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Booming-Games-logo.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36338\r\nlast-modified: Mon, 29 Dec 2025 13:30:23 GMT\r\netag: \"6952826f-8df2\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36338,"size_decoded":36683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0a5dfa343e9920dd8270d97ab7872b8","sha1":"703c96bdefc9b6e2aabd5573e568a1a7e6abe8a5","sha256":"1057a4bd1a526f26b789969e6aec8ec6f4ffb3863e4c87ef37d36ae31866ae7b","sha512":"a897947a3de6dca7d8a810af83c22a42b702ebc6f0d0518fd6ded313a6e12149d1bf71864c462c8b1947ea58b70ded0f6dc33b30c793600364e5ac33f28771a0","ssdeep":"768:YTFwk618aR/Jp6CKWQnnt+4j9N7DSo//LaOH4fL3INcMEIhVg:2PzawCcfCoaOHOL45EA","tlshash":"20f2e1cdd61f2b5aef923a3e38e55ec98b419d65311f298c609013012bd56ad8cae273","first_seen":"2026-07-08T11:54:42.226524Z","last_seen":"2026-07-08T11:54:42.226524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/uploads/2025/12/bg-rainbet.webp","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.424Z","timestamp":1783511642424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/bg-rainbet.webp HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3720\r\nlast-modified: Mon, 29 Dec 2025 07:58:45 GMT\r\netag: \"695234b5-e88\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3720,"size_decoded":4063,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b95a47e97bb88b206eee8304f541f61b","sha1":"ef29daa0ed039135e3f31ae732bba035aaf1840d","sha256":"fae57d8d5f0589cbcde5288e71221df468d0e6b73b394bcbac8d26eddcb8fd37","sha512":"77725116a55962b3a00b19e66c5f94c80613d18037c02e684d4a358ea59fdca6f76be2f7fe5b071378dad62fb98d2814c30560f6410fe4b0619af34e502c713e","ssdeep":"","tlshash":"15713f48c3235aecd3269b7469b01aaef5f53d885d3800265bcd63fe8683321503dcba","first_seen":"2026-07-08T11:54:42.227502Z","last_seen":"2026-07-15T08:01:48.942614Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetlegal.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetlegal.com","domain":"rainbetlegal.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.828Z","timestamp":1783511642828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetlegal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 07:52:12 GMT","end":"Tue, 06 Oct 2026 07:52:11 GMT"},"fingerprint":{"sha1":"A8:B3:16:D4:83:C5:BD:E5:AA:B5:77:7C:C4:4E:39:A7:CD:11:EC:48","sha256":"06:0E:C5:6B:1D:C7:15:A9:39:B3:0D:8A:F9:4F:85:40:77:6E:0D:E3:1E:76:F4:1D:E5:7B:47:6A:A1:9D:7C:80"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetlegal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nCookie: pll_language=en; c2_popup_unique_name=GVgRBVsdH1UdDFgURVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Wed, 08 Jul 2026 07:15:22 GMT\r\netag: \"6a4df90a-4c08\"\r\nexpires: Fri, 07 Aug 2026 11:54:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-17T09:19:36.55917Z","times_seen":163,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetlegal.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetlegal.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetlegal.com/","date":"2026-07-08T11:54:02.210Z","timestamp":1783511642210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9508048080.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 23:47:34 GMT","end":"Tue, 06 Oct 2026 00:41:06 GMT"},"fingerprint":{"sha1":"33:85:DA:27:B6:E8:23:41:7B:FC:54:07:F6:E6:0C:F7:14:8B:79:09","sha256":"20:2E:77:9F:D3:C2:12:6D:43:BA:E7:23:70:C5:CD:D1:2C:F0:B8:C4:D9:42:EA:A4:B6:AB:24:B0:98:11:19:A1"}}},"request":{"raw":"GET /gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetlegal.com%2F HTTP/1.1\r\nHost: g10102301085.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetlegal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate\r\netag: W/\"160-9XoKTHJPhkwR+uq3SOUaam5YNgk\"\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: f394c0cc273ad8abbe3de787f0a14cdf\r\ndate: Wed, 08 Jul 2026 11:54:02 GMT\r\nserver: Google Frontend\r\ncontent-length: 352\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":352,"size_decoded":779,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (352), with no line terminators","md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-15T03:21:40.92912Z","times_seen":13,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":55,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}