{"report_id":"918f1ca2-99bc-44f6-bb03-9b9b23a5b5f0","version":0,"status":"done","tags":[],"date":"2026-09-19T07:09:52Z","url":{"schema":"http","addr":"rainbets-casino-au.com/","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rainbets-casino-au.com/","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"title":"Rainbet Casino - Let It Rain Wins in Australia","dom":{"size":73205,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"affa49072c71682e3787e42bd8360308","sha1":"fab8646c837c3c42f50bfc57a241397acd47e73e","sha256":"abe55ec41424bf0678c37d0e597cf81e4c428740fb9c440b99bf9014b9aac895","sha512":"b5be4a252c530e4ae65ccb6d31435358355f0e51f5a722b134f6a355fae3b7db407d2190dd6dea32e78eb46101d2b5133c3e294f6cc6bb58432e8c235d9293d7","ssdeep":"1536:OYypRMvtWh9nff8TE3J3kvobkvoNkvoTkvo6kvoo3JcwT49CH3sR6Hi:O5HMvIj3UPvCH3s4C","tlshash":"80632b33e1d4106ba22f83d9d510f719ba6da117cf0546a4b1fc61a82f95ef708bb64c","dom_hash":"domhash88b7b3f966bb7f4d89d358ed1013d6d5","first_seen":"2026-09-19T07:10:00.397752Z","last_seen":"2026-09-19T07:10:00.397752Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbets-casino-au.com/","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T07:09:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":3,"received_data":115704,"sent_data":1728,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":8392,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbets-casino-au.com","ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-08-26","domain_rank":0,"first_seen":"2026-09-19T06:55:51.022459Z","last_seen":"2026-09-19T06:55:51.022459Z","alert_count":42,"request_count":21,"received_data":591263,"sent_data":11182,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:28.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-20T13:41:49.22254Z","times_seen":1062945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/plugins/thirstyaffiliates/js/app/ta.min.js?ver=3.12.0","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"957517127db62533618d8f8f8afd4706","sha1":"5a6112bd184191484482010362b0b81047142d8b","sha256":"3c0071fa6df97def7b87a712f08f27accff60d870edc403a06778144baa23e9c","sha512":"7a0aaeecd944794065943612a992c3e3cbad8d6ef41cdbe71bac8217732753cff3c368bd9f631b53534f4babf738adc372d17530f935de3ff47013c37a6f7cdb","ssdeep":"","tlshash":"7c71968975987c9d2c7b33886b4f620cd33361ab801c5a04d96f58ae5b31f4972a3f4e","size":3536,"data":"","first_seen":"2026-01-22T12:29:03.677577Z","last_seen":"2026-09-20T07:11:47.66959Z","times_seen":706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/themes/casinonova/js/navigation.js?ver=1.0.0","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cde90140ff101f6c85bd096f89eeae8","sha1":"d890636e08071ac5d532721e26cb683eabe2ff89","sha256":"8ee0654259fda0bbfeab4305b895e740659613080d90352bd36c1452fd426ef6","sha512":"52fdbb75df92195f4a223876ea95ba78af126864a152be62595b335d809cacc431186467178248ccf1740c1f9d3e37699b18c1394fe7a7e2bf6b9010f1d427c3","ssdeep":"","tlshash":"425123e7abcd337706f930e3a79961ea33384076a9446576ac5ac919240086413fffdd","size":2980,"data":"","first_seen":"2023-03-07T12:08:49Z","last_seen":"2026-09-20T14:04:43.649367Z","times_seen":4101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-20T13:43:23.71035Z","times_seen":971658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/ta_main_js-js-extra","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"83226061f7f42bac7585df0fde4379a2","sha1":"fb50f7a7feeef44e4f164e8fb8729c19c5a65414","sha256":"403989b265e5f0853b15203a4da011a1f1292ea871efa0e000f6664c42912b35","sha512":"9f40df059495fe3fb075423ffddad2a334f8c132a99cbf73a382a9cfc1863c2332542d1b01285d0a50ddee5401c92c74065e6f13e1dcb2c123d34ce851e8d8d2","ssdeep":"","tlshash":"c1016825c8cc2a2bafc19efcfc1c842796f89628d129085ac8c242d8514afe1024bf0f","size":794,"data":"","first_seen":"2026-09-19T06:55:55.59832Z","last_seen":"2026-09-19T07:10:00.415257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/themes/casinonova/assets/js/common.js","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd19e3af63dc257048243baed3a569f","sha1":"7d96336aeee0ede2c413b45391bb3b30f6485252","sha256":"7b4ffec9ceae987f472f26d287c1c6260a29a598844295404705e55588d15735","sha512":"c6b331e70f294d78112675057fa4b88cb963705ff76a0fa8fa24a2773da73a571ad1b367af1996cbd3c5cb95b9e79d6e244c0c5e9fdcd64d19f59e15be420760","ssdeep":"3072:vHNwcv9VBQpLl88SMBQ47GKDrKPJfpIL41i:vHWK9VC78UBQ47GKfKBxIL41i","tlshash":"2fc308df7295703246bb20ba006f510af236159aa80d4540f17de8d8bfbc95a427bf6e","size":126140,"data":"","first_seen":"2026-01-23T17:53:59.534802Z","last_seen":"2026-09-19T07:10:00.410856Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8240766e3dac81f20924bdb9731471e","sha1":"c4a18528faa9c5fc69701da2c6325efc1c8214ae","sha256":"0301415fbaaf72f3a508fc5441686b526dad5d2327b3ffb42f844f8b75c47fec","sha512":"ce40224b4bac17aa8944686e364d6315c04d09361c5163a970bb15fb5c859c5ac08f1910fce64bf591fb4e21fce8eea42deb2edc03ab7cf015f075e3b0a7cc97","ssdeep":"","tlshash":"b5719559eb7938df33fa01f2693a4d4beb614436e784d038c9ae631424b1893c375a5a","size":3508,"data":"","first_seen":"2026-09-19T06:55:55.596562Z","last_seen":"2026-09-19T07:10:00.415996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"28355f5b5ec4e328597bb2d360c98fe3","sha1":"0c3704d4e536da90cac007a75b0dcbc2e58c75f3","sha256":"1ab6a4465e3ef8cfd689b133d3e8b50612ef530dba799fcda647a2ec3678dcbb","sha512":"89506483f0c925fda6fc5150bc3c5a896290bc93e05aca6e4bd74149a29ee1cfc1f8b33d504e87d2250506e1f7ec84634ce2644dfc404030a69da5ce6cee3cb4","ssdeep":"","tlshash":"dce0c03508cc2a2f6fc15eccfc1c842796f89728d129085ac8c242d8510afe1024ff0f","size":356,"data":"","first_seen":"2026-09-19T06:55:55.593983Z","last_seen":"2026-09-19T07:10:00.416758Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"52df6a9f11e60d593a3789b962fb53a6","sha1":"161260b00dc320d75cce80addfdd366f4dc0561a","sha256":"91811f887eab3bfac4dcf84cf70d1edb5824e3ae2fd74459e276c780303ba77f","sha512":"f5edd994b8a9e5f2128dc7b86eb691067f9895e77b2736384553aa58de1728703556f7f1d2904b52b2a8dafc1d91ac19f576bb897ea6037951be0a57d2410f54","ssdeep":"","tlshash":"32d0970e6a5b419423eb0a40fa0f733b2593298810ceca02c0fcc78c746630feaba10c","size":269,"data":"","first_seen":"2025-07-26T14:33:26.168599Z","last_seen":"2026-09-19T07:10:00.417543Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-includes/js/wp-emoji-release.min.js?ver=b5a096a1240ab6fdc4e412bf7a74e862","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-20T13:54:31.745336Z","times_seen":58533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://rainbets-casino-au.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.374Z","timestamp":1789801763374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbets-casino-au.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 18:10:46 GMT\r\nexpires: Sat, 18 Sep 2027 18:10:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46717\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-20T13:46:44.620205Z","times_seen":562189,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.185Z","timestamp":1789801763185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Sep 2026 07:09:23 GMT\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7708,"size_decoded":1341,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1ab580c098713ba5680e1913e9caf80e","sha1":"2b61e528ad401d3c56e6af21737ede00f5078469","sha256":"c6c6a881ab72a41f837ab5a715a37ab503fd9f45a43acd91e278213abd2ad759","sha512":"4eb37771ea65d2656786fa03fb8a21b3d269c66e4078e76ce1a7164a07ee693fad4d51dd66dc8704f0aca44ac9ef23153eeaccb58e07efa157b892e70b7377d0","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFu6RB7W+Oju8:zRPQPTade","tlshash":"0ef1bf911057e500e6472cc923cf7e26dd4e216674a4c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-05T12:13:40.826454Z","last_seen":"2026-09-19T07:10:00.400342Z","times_seen":764,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/themes/casinonova/assets/css/main-style/main-style.css?ver=b5a096a1240ab6fdc4e412bf7a74e862","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.188Z","timestamp":1789801763188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/themes/casinonova/assets/css/main-style/main-style.css?ver=b5a096a1240ab6fdc4e412bf7a74e862 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Oct 2025 13:56:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6326\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48600,"size_decoded":6668,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9152f3f5e3fc520e1d20ca841da581a6","sha1":"05bd8793046299238884d41f560be4638f942fba","sha256":"c021a1a8292a782b4abcfcb3b82a62146384532a8508574a37194ada7a95a5ce","sha512":"1d32ba233bcac0f4054d9bc6c76f8502214867e910e13c2eb3609328cfda33f3f5f3de317a9138e0fe8e438db5a0b13503824cc54946595e0664577cb9ca30e2","ssdeep":"768:lbanvVFf2FMCW3/1ItFTzBjtYFZFVza7RDzFsFbjUELFxFwjFeFlFMFXEP0FjrkV:ly9Um/1It9zBjtYrqlDzuNjnfejEnWHQ","tlshash":"41230fab16b02518ba17e4947da63f05b39dc013d30ee9f5a6c1214cdec93ea44b3b8d","first_seen":"2026-07-15T07:57:10.010007Z","last_seen":"2026-09-19T07:10:00.401001Z","times_seen":4,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/themes/casinonova/js/navigation.js?ver=1.0.0","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.196Z","timestamp":1789801763196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/themes/casinonova/js/navigation.js?ver=1.0.0 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 10 Feb 2025 13:14:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 923\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2980,"size_decoded":1271,"mime_type":"text/javascript","magic":"ASCII text","md5":"3cde90140ff101f6c85bd096f89eeae8","sha1":"d890636e08071ac5d532721e26cb683eabe2ff89","sha256":"8ee0654259fda0bbfeab4305b895e740659613080d90352bd36c1452fd426ef6","sha512":"52fdbb75df92195f4a223876ea95ba78af126864a152be62595b335d809cacc431186467178248ccf1740c1f9d3e37699b18c1394fe7a7e2bf6b9010f1d427c3","ssdeep":"","tlshash":"425123e7abcd337706f930e3a79961ea33384076a9446576ac5ac919240086413fffdd","first_seen":"2023-03-07T12:08:49Z","last_seen":"2026-09-20T14:04:43.649367Z","times_seen":4101,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/themes/casinonova/assets/img/close.svg","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.204Z","timestamp":1789801763204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/themes/casinonova/assets/img/close.svg HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 29 Jul 2025 14:16:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 375\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":794,"size_decoded":721,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f971e0bc2810c12bada29fab702c5ec5","sha1":"ae42e6ab7645ef72886323adce70e8fdc417f23a","sha256":"5a0deb78036dcffa2034d71e9ac6f30ded24fa2ee38b62f94aadef1385a375bf","sha512":"cdf2cfca1ac8a15220ded29b2d517aa27482085802c0601f300e2e504ee6dbda2963042716af9aeede67d44202b5a6efa32ecefb1aee78a6af6b975a10f5fca9","ssdeep":"","tlshash":"ed019cd152c60115c43ac970efe4b2c5de39f18302c22864b18c25477f3886e8a5b244","first_seen":"2025-12-09T04:02:10.17628Z","last_seen":"2026-09-19T07:10:00.402257Z","times_seen":24,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2026/09/rainbet-1.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.382Z","timestamp":1789801763382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/rainbet-1.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 01 Sep 2026 13:11:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36606\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36606,"size_decoded":36913,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1402x489, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dfdf246fa77aef197d5162217ed686bd","sha1":"28f406a56454b2d1cc165a44e0955cc5c552262e","sha256":"87eab1abdd782ecc0512ee8076a4cfe6e74fb09da08f5e3031289c3d157498c3","sha512":"c43a8485e524bd314754251bf1bd9d092b4bc9814daa05e6cc9576f05eb1444393096d18935b87639cff91edbd5187dc4cda10920cd41ceb2169db2a2cb13a9a","ssdeep":"768:DDu2zPT6iJXp1MoLgYZ7XLOVtK7J/vyLzZ9d2RqeSjWyOBuF36R:W2zPT6iVpPBOVt0N6DERqTi46R","tlshash":"08f2f2861601601b78a1a064ff026429605e693cdd38ef6b1d9e37ee84b07dfd389f60","first_seen":"2026-09-19T06:55:55.579095Z","last_seen":"2026-09-19T07:10:00.403158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2025/10/eye-of-spartacus.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.384Z","timestamp":1789801763384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/eye-of-spartacus.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 13 Oct 2025 17:40:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19618\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19618,"size_decoded":19925,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"79ef1a43dcf085a3711234f2a75f5b38","sha1":"381bfdbb695a651a23a3db8f57a4399e2b8a1798","sha256":"356fa94afc28cb7e431f423625472ad571814f2a88ef536e49d31ac2e79b47a1","sha512":"30182c9d4303065560c5420d73b562fcff96525a33b9226065caf8df4b7b880f94f145a776edd813020560537f1212a4c28094dee2c3b5c892bf421bcbbc5227","ssdeep":"384:sIQ5VuTnn4ZbkP1UeXaFp6R9oQdpQ3LHYk5MBoA4LUoqk1+cbU:/oAT4FkbKFp6RiQd+38BeAGVY","tlshash":"f392d1349883cd64cae5ab02fe929210ed23bb46f950806fc377e9672296dd37203e44","first_seen":"2026-07-15T07:57:10.01245Z","last_seen":"2026-09-19T07:10:00.404023Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T07:09:22.518Z","timestamp":1789801762518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ndate: Sat, 19 Sep 2026 07:09:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:28.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":73307,"size_decoded":16398,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291), with CRLF, LF line terminators","md5":"a683294d5e2167d2cbc34f4fc725558f","sha1":"e3ae090256695b0dcabbf90f58a014492aeb27c7","sha256":"056c8b9467f78b37f2965cfeab7daa16efab44a740e5b330d977eaece8d0b2d9","sha512":"089888143bf630de845d2b1a3f292531b7d0b87cdd11b9ca42493e5c2e3cb79dbce60671419d93ac042ce3fcf74a65dc701cce8841ee00839ed601cda406f17b","ssdeep":"1536:AYypk/v2Wh9nPCE3C3JckvoXkvoZkvoTkvoCkvo/3JcwT49CH3sR6HK:A5+/vljaY3vCH3s4q","tlshash":"54632a73e1c4106ba23f83d9c510bb59f96d6117cf0546a4b1fc62a82f95ebb08bb64c","first_seen":"2026-09-19T06:55:55.563687Z","last_seen":"2026-09-19T07:10:00.40483Z","times_seen":2,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":266,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/plugins/tablepress/css/build/default.css?ver=3.3.4","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.189Z","timestamp":1789801763189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/plugins/tablepress/css/build/default.css?ver=3.3.4 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Aug 2026 15:52:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1560\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8064,"size_decoded":1902,"mime_type":"text/css","magic":"ASCII text, with very long lines (8063)","md5":"606c174d8ef9f56c42139a27c0e7cdc5","sha1":"25883f9e9cf6ecd202251a745afa43cf1b019667","sha256":"3a1fb13a37375360a4e8b7725fb3a2fc085cb5fd3abe9750d5549c89abd08264","sha512":"1ce8d23de2504c24c1b943a07603b9c62bff132f888bc9ca3e204b66f4fb57ffe8d90c5f31aa610d8a7f8495373eb4424acee2c369d60e3c01c524d8c61349ef","ssdeep":"192:iCc3qg4q2PcDnj2wThGI5vMRV+B0aw0u0b0d0l0b6a0P:i/Z0B0u0b0d0l0b6a0P","tlshash":"92f1eea2e7a437f9b2b3c11ab9f4be5db9206ce1f5811afbf05181700689d535fa1c05","first_seen":"2026-05-20T06:58:43.680192Z","last_seen":"2026-09-20T09:52:33.790726Z","times_seen":2134,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/plugins/thirstyaffiliates/js/app/ta.min.js?ver=3.12.0","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.195Z","timestamp":1789801763195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/plugins/thirstyaffiliates/js/app/ta.min.js?ver=3.12.0 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 28 May 2026 03:52:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1230\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3536,"size_decoded":1579,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3536), with no line terminators","md5":"957517127db62533618d8f8f8afd4706","sha1":"5a6112bd184191484482010362b0b81047142d8b","sha256":"3c0071fa6df97def7b87a712f08f27accff60d870edc403a06778144baa23e9c","sha512":"7a0aaeecd944794065943612a992c3e3cbad8d6ef41cdbe71bac8217732753cff3c368bd9f631b53534f4babf738adc372d17530f935de3ff47013c37a6f7cdb","ssdeep":"","tlshash":"7c71968975987c9d2c7b33886b4f620cd33361ab801c5a04d96f58ae5b31f4972a3f4e","first_seen":"2026-01-22T12:29:03.677577Z","last_seen":"2026-09-20T07:11:47.66959Z","times_seen":706,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.375Z","timestamp":1789801763375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbets-casino-au.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 18:10:46 GMT\r\nexpires: Sat, 18 Sep 2027 18:10:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46717\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-20T13:46:44.620205Z","times_seen":562189,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2025/10/rainbow-princess.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.385Z","timestamp":1789801763385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbow-princess.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 13 Oct 2025 17:41:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22744\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22744,"size_decoded":23051,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8f7db39d5e82e7958a229b043ae32726","sha1":"9796db5f51f3d0abeb435a08896c18b2e6f4645f","sha256":"8c616d137252e7ee19257128ca48022372ba3a207ee7662f8cb403b22950748b","sha512":"b61bea7ee3929beabe1e80018425592d90c199448004c5e373baca57b9e20672b9da4ffda172d40a4a42ed8cd68aaec169a848bc42271e65244482416c416656","ssdeep":"384:BIueRdFfxCjPt/nchXTyB0E64+f4NHxEfKFLNXMPLX3VmSBuduc9mOQXpJNAgAel:BIueXZcVPATW0qY4NHxEfKFSTXFyjKdj","tlshash":"fca2d030cb6a48a05b11dfd1501fff5517d56b4c9b43862838d6997f2038ba289e1fde","first_seen":"2026-07-15T07:57:09.980406Z","last_seen":"2026-09-19T07:10:00.406715Z","times_seen":4,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2025/10/fire-portals.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.387Z","timestamp":1789801763387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/fire-portals.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 13 Oct 2025 17:41:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21286\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21286,"size_decoded":21593,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7862d4ffc7dabe14658491d7e96e3ae1","sha1":"7e404831a318c4879498665adda6aa651386cfb9","sha256":"8e5be44a8723b5972c526cb69598862d91afc5e6ca38c37d23fdf44a46c603de","sha512":"a0f444e370435b59b5d3c527a6ba8f231883d8dfef7c2e0e352d21b6ac25b80ca211c36b9742248d382103ddd4b7881a8def8454500c3946a7417faadf2be246","ssdeep":"384:f+U0Hw1yxdqXdf8xaeHtdkW6tCa+w/IyDX3O16ZVZQVLhAWOHBPn944kGhHj:P0Q1EqXdf83HtogaHAyDX+1BLaWOHBPh","tlshash":"6ba2d19c61f2ef0eac01a51b61a507e4c4c1729b976423278dfaa1ba45ca490ee4f493","first_seen":"2026-07-15T07:57:10.013703Z","last_seen":"2026-09-19T07:10:00.407311Z","times_seen":4,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2025/10/fist-of-destruction.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.388Z","timestamp":1789801763388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/fist-of-destruction.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 13 Oct 2025 17:41:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17996\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17996,"size_decoded":18303,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f1aba18d8c05e2ef88d09cbe87fd4cda","sha1":"f76d0433b7bc1fa275c802e8e7dc1e9aa88436c4","sha256":"10446f6079dbf99eecf655f89a38382f99c0c2b3bbf9a3455461af7952b4fdb4","sha512":"a46a608f0be58e027147aedc75543ccb1bb133afa10d4a34543c53f52d420d3c7a12d63ba504cfc976481a76ea2af458242ef1016dff4181e4e60dd9387c5782","ssdeep":"384:MFlFrw88C1Bp01T6YgJnr1OYJ4xFJn/Gdtpx7FIfZaUMTyH:Mx18G0V8J1OY6n/Etpx36","tlshash":"9282e1d30a2f4949cf3447b03645e904b14a08d9f8442a24bfe43db6d1e95b2b6b2187","first_seen":"2026-07-15T07:57:09.983001Z","last_seen":"2026-09-19T07:10:00.408124Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2026/09/cropped-favicon-192x192.png","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.467Z","timestamp":1789801763467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/cropped-favicon-192x192.png HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Sep 2026 12:37:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13210\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13210,"size_decoded":13516,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"18f5560afa028a236d5544e062155332","sha1":"23cca25ca04c76d4daecfe993e4f0aade53706de","sha256":"1de66080470ac0ee5ebee2eb9ed8adbfea2e44f596f8888f5e91d9d1b8cc5b39","sha512":"9e3bab32c58c792167184204d8f15d06d3c868e6f1d75d01cf218c5e6d6a99f721f14427474f7ca65c798dd7a9eb3e3b1803aa27c0d631fa4dd444452fde1856","ssdeep":"384:dpaYl7yw+GImbuWI1slgoYA7YqV4I8LhMmH:Dac7yvGLbTnljKJNNMmH","tlshash":"4d52c0f50dc9ce800507294755b44b716bb6d0cad346c1cf8e1708594e3b64dbc5b6da","first_seen":"2026-09-19T06:55:55.5533Z","last_seen":"2026-09-19T07:10:00.40886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.190Z","timestamp":1789801763190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29744\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30094,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-20T13:41:49.22254Z","times_seen":1062945,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.191Z","timestamp":1789801763191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4678\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5027,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-20T13:43:23.71035Z","times_seen":971658,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/themes/casinonova/assets/js/common.js","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.198Z","timestamp":1789801763198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/themes/casinonova/assets/js/common.js HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 25 Sep 2025 10:45:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 42937\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":126140,"size_decoded":43287,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"6cd19e3af63dc257048243baed3a569f","sha1":"7d96336aeee0ede2c413b45391bb3b30f6485252","sha256":"7b4ffec9ceae987f472f26d287c1c6260a29a598844295404705e55588d15735","sha512":"c6b331e70f294d78112675057fa4b88cb963705ff76a0fa8fa24a2773da73a571ad1b367af1996cbd3c5cb95b9e79d6e244c0c5e9fdcd64d19f59e15be420760","ssdeep":"3072:vHNwcv9VBQpLl88SMBQ47GKDrKPJfpIL41i:vHWK9VC78UBQ47GKfKBxIL41i","tlshash":"2fc308df7295703246bb20ba006f510af236159aa80d4540f17de8d8bfbc95a427bf6e","first_seen":"2026-01-23T17:53:59.534802Z","last_seen":"2026-09-19T07:10:00.410856Z","times_seen":5,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2026/09/rainbet.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.203Z","timestamp":1789801763203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/rainbet.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 01 Sep 2026 12:47:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28054\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28054,"size_decoded":28361,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e0504849a96e2ee4d129dd46e23c693","sha1":"3a3870f0efcbb62937803547604dd3ad0152a175","sha256":"3888196b7e5f65ef8ffe21f85966355aa76befe77fdfe7083dcf4cdcbdf4dae8","sha512":"0d3f1f2fe6e71dad3fbc0006f69f9b7e1fa0b926796f4c4136a959b1c945ff169aa79672ef2ffd0f082a76a7c225f4a110012f8429dcd971048a35e468faf529","ssdeep":"768:yFzeiXF7UHPZNofSxrOgnlWTwCW7KxDcAm:iSiXF7UHvYurOgWNW7H","tlshash":"74c2e1cd6583914224bbd34136f502cb9ee4b4bc9bb92fd00d1e9729552c0ceb379a76","first_seen":"2026-09-19T06:55:55.577334Z","last_seen":"2026-09-19T07:10:00.411277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2026/09/cropped-favicon-32x32.png","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.469Z","timestamp":1789801763469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/cropped-favicon-32x32.png HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Sep 2026 12:37:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1301\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1301,"size_decoded":1606,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"279aba2eb76045ad2f2422da4c7a0ef3","sha1":"4dd3de4305a7000c1ebfa4285bd9a57f990347bd","sha256":"b159748e7d94ce94f38857007a4c017fe1f1de98263695a8b41d354dc16bf275","sha512":"37deccc082c0ddf0cc05be38ce1d233994825357972992e2c089394c9a383ea818356802adcd70332e7c4ec5a6e7fe8312db0c641e63fffe28300a9597d71f68","ssdeep":"","tlshash":"af21c8583e4085b5ea1f9d43b8235eb1d4ba9603e038f13ac5d6c812a46054ce649a47","first_seen":"2026-09-19T06:55:55.559201Z","last_seen":"2026-09-19T07:10:00.412056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-includes/js/wp-emoji-release.min.js?ver=b5a096a1240ab6fdc4e412bf7a74e862","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.589Z","timestamp":1789801763589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=b5a096a1240ab6fdc4e412bf7a74e862 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Jun 2026 05:07:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4974\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5323,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-20T13:54:31.745336Z","times_seen":58533,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/themes/casinonova/style.css?ver=1.0.0","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.186Z","timestamp":1789801763186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/themes/casinonova/style.css?ver=1.0.0 HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Oct 2025 13:15:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 754\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1855,"size_decoded":1095,"mime_type":"text/css","magic":"ASCII text","md5":"7de9ec1d2b161dfb5818d319962a24d9","sha1":"606a3345d4d7710ea0b483560f35fa1cdb6a7698","sha256":"571bc9c345a5ac22c7db61b72424854351d094c4b05d1212d24434c012a9f02f","sha512":"363326039548f90f10bab237f989b3d7068a1af9c6b10379bd2388bd79aa77dd020801edbbf070d897d68f5c71f850360a5d6800bf74793c9d755ea89a0d4499","ssdeep":"","tlshash":"9f3154885d326223b066cb76239ba2d5db3bc2d313d12068bd7f524d914177d21bef14","first_seen":"2025-12-09T04:02:10.200688Z","last_seen":"2026-09-19T07:10:00.413435Z","times_seen":23,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2025/10/sweet-bonanza-super-scatter.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.383Z","timestamp":1789801763383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/sweet-bonanza-super-scatter.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 13 Oct 2025 17:39:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20140\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20140,"size_decoded":20447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"271ae549e39c0699bd2940647709a1dc","sha1":"7c0f5e4256d9b4a2e7cbd8af0c437014ce45b104","sha256":"d429f8fc7b96c147003d018d5d5823fd2897eac92f9396114b07e5ef534434a6","sha512":"236fa7f8ceb650a9e4a80af234285e3c1a5addbbf09b6010fba17442ccfdde28f5aa9711853972050b50d5d3114a8864498a16dc1269c309f7337df02efa1b3d","ssdeep":"384:pjAJLJcmaMzF/lVlXTleOJNZjgg6AK/qdPBct3aafckv9lFBME1GrbrJUPKbF:utJUMp9VFBeOJTj4f/qdPBcpaa3vVdm7","tlshash":"d592d11913c6c3fe319a64328fe30b19f319ab8653e5b521ea52700a917c21fb495b6c","first_seen":"2026-07-15T07:57:10.011237Z","last_seen":"2026-09-19T07:10:00.413978Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-casino-au.com/wp-content/uploads/2025/10/rainbet-aviamasters.webp","fqdn":"rainbets-casino-au.com","domain":"rainbets-casino-au.com","tld":"com"},"ip":{"addr":"31.131.26.42","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.386Z","timestamp":1789801763386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rainbets-casino-au.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 11:26:24 GMT","end":"Wed, 25 Nov 2026 11:26:23 GMT"},"fingerprint":{"sha1":"7B:5B:00:88:5A:3D:3D:7F:54:64:E4:E0:1C:10:35:2A:A6:1B:64:D2","sha256":"C3:32:13:2F:27:0F:A8:93:8A:A4:13:AD:F3:DC:95:CB:9C:68:95:99:C4:35:58:5F:7E:C0:8C:25:E8:F6:C3:81"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-aviamasters.webp HTTP/1.1\r\nHost: rainbets-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-casino-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 13:09:23 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 13 Oct 2025 17:41:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14370\r\ndate: Sat, 19 Sep 2026 07:09:23 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14370,"size_decoded":14677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x480, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91869975a960e6ee91950a04c52ad883","sha1":"4de1e3a0537a5f9009192bab48418aa340ad16d9","sha256":"99261e3901f8b771cd6d4ec5c5e9a564dc22370a4e48466e4a533d5bad547fc1","sha512":"89e4466903ebf60453f4e828e8359f45195d79f41205eac82d206fffea3c6f62bfb52eb4291628d99c195931715fceeb8468649577d43c2dd5b855928b12d1a9","ssdeep":"384:8HLG267tUFIUGkpF7jfZmwbYdbQf5qcvuW8:6Kr5GjAwRf5huW8","tlshash":"0d52cf895c18cd04fde6b1222d89ca2b3a89a43cdc446cc7eeeec55363d589883e1ddd","first_seen":"2026-07-15T07:57:10.008259Z","last_seen":"2026-09-19T07:10:00.414716Z","times_seen":4,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"rainbets-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-casino-au.com/","date":"2026-09-19T07:09:23.309Z","timestamp":1789801763309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbets-casino-au.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 18:10:46 GMT\r\nexpires: Sat, 18 Sep 2027 18:10:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46717\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-20T13:46:44.620205Z","times_seen":562189,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}