{"report_id":"9192575e-0660-47ef-9b4a-027943426a81","version":0,"status":"done","tags":[],"date":"2026-07-22T10:18:54Z","url":{"schema":"http","addr":"rainbetslive.com","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"104.21.43.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"title":"Rainbet - Crypto Casino et Paris Sportifs en Belgique","dom":{"size":290119,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7921)","md5":"0487baad3b7356eeeb91ec84ab1a2df8","sha1":"fd81b4197af5af8de921780746e96bc547c99a34","sha256":"da431567f60aab172ca746d7db38ba5acd9a3cd6f32d2a7b49c98bfb4a94ee02","sha512":"ae92012d36e4fc8063a7156a81bc55ea574b7c1047a9e278073a0cf98425f9f95fc0b27faf102bca57b816b23048d710723249b344b748133fcb7bccc9eb851a","ssdeep":"3072:ocWPHbOE25ClpPiatMcgzpKA5iNz/QDFypCMD2GXDLIfuV5qy:o5PH325AbgzpMcD0Uc","tlshash":"6e541d2b56e7349d2e77b27caf9e7209212d9003da05cdf4badec1485fc5a9148b2b4c","dom_hash":"domhash2b9e3676b9f1d270c84e4d9d3635605f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetslive.com","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"104.21.43.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:18:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetslive.com","ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-13","domain_rank":0,"first_seen":"2026-07-22T10:10:40.305081Z","last_seen":"2026-07-22T10:10:40.305081Z","alert_count":118,"request_count":59,"received_data":1179093,"sent_data":31881,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]}]},{"fqdn":"g10102301085.co","ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":72137,"first_seen":"2021-08-03T12:42:57Z","last_seen":"2026-07-15T23:35:21.267005Z","alert_count":0,"request_count":1,"received_data":779,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-19T22:43:25.336158Z","alert_count":0,"request_count":1,"received_data":60294,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"allrating.top","ip":{"addr":"172.67.203.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-11-13T03:51:59.857093Z","last_seen":"2026-07-18T17:25:53.446272Z","alert_count":0,"request_count":1,"received_data":425030,"sent_data":623,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-22T20:25:50.751727Z","times_seen":226745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-22T10:52:12.444015Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e88a401907300a9989966839f7ab52d","sha1":"c15dcbe7b4ab3c929d4caa40438bbd384babcf11","sha256":"1320fe8c1f2515e760ba2b7347b1c6b4ad4f1f81e268099beb8b0b9e30cb9794","sha512":"49c9fc5c37a593f329bb646f7a7b53407fe1a05f5e43d91e0adecec646734c22a0bc32b0bb69ac87108a379fca06a89a18c0f5c208dce06471aa8cedf7a8ebb9","ssdeep":"","tlshash":"dd01abc9b9d17914259f616c21ab611e7573b5013e0c0ef3d46556922e30686d23e1ce","size":829,"data":"","first_seen":"2026-07-08T11:52:31.647944Z","last_seen":"2026-07-22T10:52:12.484619Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-22T10:52:12.485375Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95f2a05e5ae6ace768625f9681c1a600","sha1":"130a15d98ad911168cec504323c47df8a56d16f7","sha256":"fa4fe08924aeb7be50fab76cbef2b007f1b96041bb7d29223d68f57257d07925","sha512":"caea853edf21b9e2851fe2760611762b9b4d81a019bf70662f36f764406388a1c5265c5b2a3c9b718d5aadba5cef71dbb586b5dce1eda217d6b57108cffffa80","ssdeep":"","tlshash":"72014066b3ac187143fb31a9d51f27c9a57d11fb7801948bbc0488451851f8d4678a1f","size":737,"data":"","first_seen":"2026-07-08T11:52:31.650424Z","last_seen":"2026-07-22T10:18:57.102679Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8eeb2070b57d4cf2dfd4000c77cc8d61","sha1":"ee0b30928d9e739b0005d9aac4570239aa2647e5","sha256":"a97afe7dea8d80e2e9a494cd6abb03bf68bdb2e43449f8c0fe3753d07b129193","sha512":"3d22d19ca21b2c4d99b2c8b3d86f6494e82f2bfa5e705b95715f31b7de33068536f6e4a64c36fc1926b811afff2c8669783d59bf2ba0e9f6259fd69be217889e","ssdeep":"","tlshash":"5431e186e7fc0c7586e6326f2e7466c9203c56737c02549ffc8c8d09666cf91862139c","size":1855,"data":"","first_seen":"2026-07-22T10:10:44.652742Z","last_seen":"2026-07-22T10:18:57.103173Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b75ffcdf480589f19cbf78ce373dea","sha1":"316b05245c99c1420895c28a0383802e6c5d74ea","sha256":"3cb8441193a5962c3af7a83eb1a4418970173e7a7f89bb085de078e3ac16fc0f","sha512":"10af5558f1abf25dbb1f03fe16b20efea15aaa4db054488e516bc625ee6fd0b36194fe7241573aa29f91513eab613c3a5cc0f423f1c8851b3aff77a84c56ac78","ssdeep":"","tlshash":"ab410768dbaeb662432ea0b62bfe12de143e147e7a414ebb7c38405048e48093715c7d","size":1934,"data":"","first_seen":"2026-06-07T17:05:58.287593Z","last_seen":"2026-07-22T10:18:57.103749Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7743212777ff977c03a791f8e801a0a","sha1":"1cf0a2ceb0b0ad13f74a1d9d983cb041aea1b6ea","sha256":"5d9789b7dd388bcab669fc2b715f60b87d85c3cf3f3c2d68c0c3a3ade5b8d4ef","sha512":"293f20fa3aa8c60a671bfb201cf7fc388f7e5878c6c3f65d3996d8ead0217515b3fa2075140ea672b43e5ba139d1cd4a2a00d7c4b3ca571fc2fa54e6444172bd","ssdeep":"","tlshash":"dd41fd35f3bd283147bf64b529e5269e2a3950823d878ca6cc9c9c0524c1e9d4875cfe","size":1919,"data":"","first_seen":"2026-07-22T10:10:44.658019Z","last_seen":"2026-07-22T10:18:57.104227Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa9a2e00541c5d978bbf0a6222ba76b6","sha1":"e3bbc246c652e6594c458f3eaccf859d9397eccb","sha256":"5c3b561854db1a9db55f57069bf0ef0b5b12d741130b1114a18f4c65b1a7d381","sha512":"88f6ed907a6edcba1ac4e7446911ba0b3b9aeffa748363bb42a31676c5edb62755f25a9adc29f495db93a874641ce13dc1f4b461b8ee4dc541e5692d66dc1be5","ssdeep":"","tlshash":"3611ce28b6be043286637129266ef6cc7979006bac11cd0ebd2d8dc80fd0e519db6df1","size":1071,"data":"","first_seen":"2026-07-08T11:52:31.654177Z","last_seen":"2026-07-22T10:52:12.489403Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-22T20:30:34.58719Z","times_seen":31607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dbc850e8b60fbcc28730892a854f776","sha1":"ee9d48ffe25ab2e795dc58855cf9cbda5c88fa61","sha256":"c19b2c4860382d74d99e5e9a3202649ab3440852b33272acab0d5c291708d92e","sha512":"7447b375e93f7e4a19091bd80928ba8243ca3098652082ab5730a37a83b83d05087dcd4fd7dda31d077cf7df7b63d2cc359b051c07c6288ac00989633fbed820","ssdeep":"","tlshash":"bbc0809ad9e82c4d24e5c158017c1325b1149517cf2f5f75b24e004c5ff80bdb5385ca","size":190,"data":"","first_seen":"2026-07-22T10:10:44.660473Z","last_seen":"2026-07-22T10:18:57.108211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97fc7ed147bbe856e7b751bccfb3199b","sha1":"35ae7b18125c1010f483cd446806465db5a2aa85","sha256":"fe20d7f030ddcd3b2e244dbc36f7c91776dcd911d157a752ad9c55097df17f62","sha512":"69374e4fcc540b86563fb4f75d242cfd116c15ba344d4afdace38bcd8a264b4e3ea11ad6f653398f632e00954ef1442d9f0e0de7d1c4d4760f4ea65fad3ba1c5","ssdeep":"","tlshash":"d0e0c2c0a25c1d94e193363b7f3645da283807b159a2d8acc88fad503052c4146eb5e8","size":292,"data":"","first_seen":"2026-01-17T04:02:24.395179Z","last_seen":"2026-07-22T10:18:57.108855Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0117036e5fac64498adedf65968f795","sha1":"9da137dc137cbf70da8d90f0c2d6e2f679d11501","sha256":"f8d2792004aa1a6203a114e6547799a10aeb61ebec152a25f456521ab5c5ed96","sha512":"1b8f4246b7b7dca2f86b22b37227bb27f190344f9000a4db9249bb0e1a79316a6108bec2ff2abb2a847a99b9abc9572cf793a56ca34330fe33d1f825dc687573","ssdeep":"","tlshash":"19b02b190ce01f0635c00ec40820a23611183431cc509c4096c3c8600064981497c000","size":122,"data":"","first_seen":"2026-07-22T10:10:44.662178Z","last_seen":"2026-07-22T10:18:57.109356Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6051558099bef991182997678760dc9","sha1":"3cd4deb331422903331fa3560e62b261b6a8bf1e","sha256":"53e458d817dd0a9459095f43bf4893a0d27c92740cd6abe8e2ba4e212148d679","sha512":"351dd0b882c56a1b84fea59a184f2ebd319439c12b5f5b3c269d9a3e33f39bbdaea62820c7b8492dc29f5e347e45b4897d3bf86d5be3b41abec9bf4e92b3ae57","ssdeep":"","tlshash":"1611c07b2d6d81fe4bc463d822485c1fa5dc5050e08acaacd6459c2841e836b5bce707","size":1082,"data":"","first_seen":"2026-07-22T10:10:44.663372Z","last_seen":"2026-07-22T10:18:57.109899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd29938f1ad524bd6ba87f4c0bdf291c","sha1":"ccce2f1c6e49b96f686e080b7b85695a08b0adba","sha256":"c98099d4cd33c13298dc59ce0c8cf912d68a0ab756ffe1fe733dd2b224f08106","sha512":"7a3a9237343dd8840f4d9788b4e88875c086b4ca6703759708bf9ae22e1d7d781eb0f9c96dda0d3d2d1b7a2ad3f2f73262ebf8c149440c5b4865e5cc2d5d803d","ssdeep":"","tlshash":"04f059db6b5c0432c25f305e105eb3cc3d7d803269412d67fc78c45248e0d98966289d","size":545,"data":"","first_seen":"2026-07-08T11:52:31.658162Z","last_seen":"2026-07-22T10:52:12.494352Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dbc1008a0655ecb932c1fde0eb72b0a","sha1":"2e64bf12bf7529f841baceb5ac9d5089ddfe9794","sha256":"2d65e312c8a0eed794d22cb196d1fabbf363edc0db34dc532345c58ade40c7aa","sha512":"312a05df4c4d92127ba8f16b8dbf05092762e348a050ea66d7821ce6b47f01415d89448a6e2d677e8167cfc76c0e282301761845405e54224c37be2933eac27e","ssdeep":"","tlshash":"d0216bd2f74c1532c4ff357eb45a42cc262d9071bc2018ba3d6c622c0172f8c55a679c","size":1378,"data":"","first_seen":"2026-07-08T11:52:31.658994Z","last_seen":"2026-07-22T10:52:12.495334Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56c9676ba030ad9d7fb5521ee10cee10","sha1":"f997465c15b5b5de8a53aaea553aa269dca9d755","sha256":"6da59ce6285ab9cc242e38eddfcf550026c0aaca760a6bc79a1024696b6092b1","sha512":"0849e329a05e8490ffb4aa7d72ffe67b63886370003ffddf0d4fa700a459cd399a928fc45eeb8f51016036ea1791c3838d7017118f74b7e68a5bd1ae402a7e2b","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiq:KZal0BKHWpkVM0KtmuECEh","tlshash":"2c13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc60e9bfb1","size":42015,"data":"","first_seen":"2026-04-07T18:32:07.00063Z","last_seen":"2026-07-22T20:23:40.816455Z","times_seen":4617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/pll_cookie_script-js-after","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a06eb2725227df12a6f912ef1deeff5","sha1":"e3d067d63053a497445461d4b1793901e311cd9c","sha256":"aa9b0049ac2d025901ff54577315c19e48e9099fa0da56475caf893ac4f28854","sha512":"89e28d2b8981a853be8b2fb9d1fbedbff715c498ae051d5b6fd535d1fa027f236ebcba2dbeb27aaea82983a13206b9f6d23a6b36c1431bc487b6567f90c4c2a5","ssdeep":"6:OyW/zF0MMHYYWKWWaF2V/xYJp/zq0GO08IFhE7Mv5l/w2:OyW7F0MM4YaWaFCS/+0JZIFhKu5l/w2","tlshash":"66d1c2c0e25c1d94e193363bbf3649da283807b1d9a2d8acc88fad503152c4146eb5e8","size":6684,"data":"","first_seen":"2026-07-22T10:10:44.677012Z","last_seen":"2026-07-22T10:18:57.11217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","size":8485,"data":"","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-22T10:52:12.453225Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/cmplz-cookiebanner-js-extra","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"122e317562f1be7f1803a1a3b0199a56","sha1":"6997a38103f25c7a494ff49b7b0ea42dc006b71c","sha256":"af7df690f0654b110ef4fafc480e2891443db83231dbf930084ebff4db417f1b","sha512":"7804d03dae26f7951b27c2ef848415d54735f39196e1d6d0423e17649a7a2461f4b1845ca702fb78a7f139dd7595f6f214117252c61b2aae2ea077b91467c3eb","ssdeep":"24:3RWNe+lBeyf+6GGaD/Qdi8qRPoKPcUp8fGFxEe7PUtO2:3RWGAeGvU8qRYU7FSbO2","tlshash":"20f1ad7bed6d81fe4bc463f826485c1fa5dc5050e08acaa8d6459c2841e836b5b8e707","size":7489,"data":"","first_seen":"2026-07-22T10:10:44.67221Z","last_seen":"2026-07-22T10:18:57.112691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetslive.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","size":352,"data":"","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-22T10:52:12.480436Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T20:25:39.634981Z","times_seen":403783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-22T20:34:29.148963Z","times_seen":8304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-i18n-js-after","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5177ce8ebe525a47e0dabc84305c2ba6","sha1":"7a80ff9137e4ccb98cd3a81e1cc213ec6dbe20df","sha256":"5bd1c62d4218fa84bb3a2c0798af5a3553d93fed74dee4377adf6e74cf36d4b7","sha512":"30e30ad2f5962d5f96a246e41a2ed2d0acecc220b0d4e39955875ede4a1175a2743b7fa491efbb653b725f74b0a08ee7cc009105ff5a123d5859ad4b7e855a63","ssdeep":"3:H6aUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:aBLxTqtGmVOiFM/KGNMJ2","tlshash":"68d112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6473,"data":"","first_seen":"2026-07-22T10:10:44.673951Z","last_seen":"2026-07-22T10:18:57.113249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/contact-form-7-js-before","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36b903d430f6b6f0eb28f8a9e301f768","sha1":"a3ea8b511478fb1bd358121c7a2c77f9dcabcdb7","sha256":"3f1c391438ec3339edef9ac170a0949d631fbbc9e40cd9aa40ca561571db4864","sha512":"ee7714d167c70977b576c41ae633597dad0d01e362431798603ee19757f4a4a05c83352afa420f95f1de116519fb0831cb4de4403ad92493c74159470880b77f","ssdeep":"3:HT6SVGDSiCmbFFlHrWcBF/FFhhzVEGUHsR5pHdFQhN9GEawUWKLlUFrQAv:HLiRhDWg1ulgpwLkuKZ4rQAv","tlshash":"08d1129ad9a82c4d64e5c178057c1225b1149517cb2b5e65b24e404c5fe80b9a5285ca","size":6571,"data":"","first_seen":"2026-07-22T10:10:44.669974Z","last_seen":"2026-07-22T10:18:57.113732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/scripts-js-extra","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ec7845553847a82be3ebc03b1fe46e","sha1":"1dca058cc375276a60b7d2d0b5afc157f3e34e54","sha256":"de70f94b46b1ee83858483b49effcb3ad8433ed60864540fb7bd927116fb07a8","sha512":"f8da2742b1a151415db6cc3583537b8f02fafd9a51720d8acd12341d4d4291b73c16f036d46e18521e2378836777300fd0444eb5874882e2f31f1fd75797dfb8","ssdeep":"3:Hz6EDew5vNVWgVgrTHnJH+LX/JTS0evKGY3r:P9x2gVgrTQLXzevKGY7","tlshash":"aad12b19cce01f0675c00ef40c24a23711583431cc90dc4096c7c86000a4981497c000","size":6523,"data":"","first_seen":"2026-07-22T10:10:44.675374Z","last_seen":"2026-07-22T10:18:57.114258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-22T10:52:12.472275Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-22T20:40:27.766982Z","times_seen":8124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-22T20:25:50.762161Z","times_seen":219113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"opt-in","filename":"https://rainbetslive.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","line_number":1,"column_number":22242}]},"http":[{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/Crypto.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.989Z","timestamp":1784715506989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Crypto.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Nov 2025 14:30:31 GMT\r\netag: \"690a0e07-d2e\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXEDr%2BWr0v%2FSfxDs1%2BAkT%2F38voMbyp7NkwKeV0nnn4r6R0e%2FJmoq688oz53o1sWa%2BnCCbkG7gilEJxTB9okBD6UnQPl42gRvqcxR56g1IQracOaf0SUqKbmNy%2FH919agyW44\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea829b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3374,"size_decoded":4165,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d163dbcb25a906f2ee2439b2e0c6d39","sha1":"c404967c633d727514862cee1f96efff0c02d2d7","sha256":"7f95cb99f573b868e81cf428b34b51365adf1dbab7b1d3bd5fded050fcd6f60a","sha512":"56a683cf6beaccbf16989e379b1f3d9774822cd77ee02f5414ab6971f19ef8da0c03f40dbcd5c25ad66a78e9ab8acc4e91ed469cd687a728765a9f866a966770","ssdeep":"","tlshash":"ce613d1dac5103e0064e72698cf9b8f4dd336949ccc05445a4d3d5db1d94e825b7b0cf","first_seen":"2025-12-30T14:55:49.043684Z","last_seen":"2026-07-22T10:18:57.004024Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/61c01ace-3a1a-43f2-b564-f37e55a17ad6.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.992Z","timestamp":1784715506992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/61c01ace-3a1a-43f2-b564-f37e55a17ad6.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:41 GMT\r\netag: \"691f6991-920\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vv3Pz31ldAtH276VJvy0rX17QM80miSyhFMF6X7mjFZgNhm8W%2BaMNb9x1062CCTmMkZmaI2%2BX81X4Mf%2Fvt%2B%2BS9mxFkD0PeuByGbF%2BM5pvNKY6AgUl1F9Pj8eBEC2uAWdwn8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea82cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2336,"size_decoded":3125,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f111f7ef53193e4da6880e13be80733c","sha1":"ec8caef1631e4f0b6f02e83c4913b7c908771425","sha256":"2700c2db71cf9307807a9e85fc2f8d85b0bed6970414f626ac569ab4f3fbefc2","sha512":"ab9ee5d79f8b5e6cb4902376e281a5992f07b2ed60481b489cdde28820dfde3f4367bcb6b8cac2581c9d97b5244d6a1b5ec2b0469b0f82a9331882a9ae283cd8","ssdeep":"","tlshash":"c441e92153550b1af95f1bf022a16f10eaf1bd75d3416e199243438357a02cd795f5cf","first_seen":"2025-12-08T04:02:28.680985Z","last_seen":"2026-07-22T10:52:12.46539Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/786f77e6-02a2-4626-9846-d040bdd0f0f3.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.993Z","timestamp":1784715506993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/786f77e6-02a2-4626-9846-d040bdd0f0f3.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:43 GMT\r\netag: \"691f6993-a80\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBobn5D5D0BpUQN8%2F%2FYdtZBs2qDcPvufeUKQvojzv6WXETnzhgSz9EIh8TZOTNPVj1JUfNt9XgTzIEhTEobDLwmcL6sb0XYEs1%2FyFEI7xsbhUUMJ5zJBo56qokA0qNRB%2BoQx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea82fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2688,"size_decoded":3473,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7bff080ce05d05842cbcb6fc373b3b0a","sha1":"a2239c4cc79de821a32ba099da91d2c5b1e454c4","sha256":"b7c7d1c41967de68e44a7f13795390b6e4f4deed1c26b467b00f944c47e41f12","sha512":"bc141f9eb06557930908f03a75464ae3c8ca755fb762bf28d4172dd149fda5e262ddfb19f67c6d9191235888cfcc22cb0b17d9102f40ba21b7ca3f6e2a1de866","ssdeep":"","tlshash":"ce51d6def376a259f12525b8a0d00bc3eba43d16875e8936e2d544368f382c63c8d296","first_seen":"2025-12-08T04:02:28.612551Z","last_seen":"2026-07-22T10:52:12.451413Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.941Z","timestamp":1784715506941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 24 Jul 2026 10:18:26 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRcJBgdSZ3ab4bOMzGr8VXa0o0CezbFyM1B3hEnFa4xGADrFH0iz1GwByCeeUEh4isrec%2Fa54syiPoTlekr4AYlYBgx80wOUO832Xa6JJUUHakr0E4p0lV2CjH1k3IqWuiQJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\nserver: cloudflare\r\ncf-ray: a1f1b38e5801b1b8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T20:25:39.634981Z","times_seen":403783,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.954Z","timestamp":1784715506954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IX3WeVJC%2BS1a1gdpAPMt8g%2FrDFA6qHZf2Eh%2F9tMmGElwhOoYp5NVkukwJDbGkMIl3trQMWdfSngeITqOWi8wJmldZ8mjypMi%2BMM0LKweeSO7uIqrF2jDhZpA8Ra66zCDfdRX\"}]}\r\nage: 497\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"660dd398-256\"\r\ncf-ray: a1f1b38e7810b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1133,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-22T10:52:12.444015Z","times_seen":43,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/polylang/pt_PT.png","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.971Z","timestamp":1784715506971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/pt_PT.png HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-53c\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9DhTgtp8DpPu%2BaOCPgRAPGUq%2F38Tgtc7YlJx8INDZTylgunFwjNY2iOqfYV2AKONa9zI7nkoUCqykS6U%2BgBU3UtXoMDmqPe9cuqWj5isMX%2B2Y3E2AG4kK5w6N71Quh57ZZVG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e8818b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":2124,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"af1547fd2a4f0637b14c97b9a00037be","sha1":"415583b94ef979b1ec469b59f7d2facac6cd3512","sha256":"a95ec412210a006e992d724d7695b49d843bb2ecec3547bd0be3f6b2b15a7407","sha512":"72becf4556091f88c0086dfc4efa0d36a9d42fbb62c58504d84d3a66ce979513e2b24672ca8510ee289c7c1c9db2f623c8f736a95ce3f36ff38c5c6939a2585b","ssdeep":"","tlshash":"05214e87eb813c81268ca6c254df803786534a80cae1f86e70cfd41b1d62ab118299eb","first_seen":"2023-06-26T20:40:20Z","last_seen":"2026-07-22T10:18:57.008383Z","times_seen":66,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/74de2455-966c-47c3-84c7-7202b4acd950.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.003Z","timestamp":1784715507003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/74de2455-966c-47c3-84c7-7202b4acd950.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:42 GMT\r\netag: \"691f6992-68a\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ps3S9e4mi8tMxHBp1rxwMfBMiUyF9Pqoe7%2F1PrgVV2FFUTEjZnehkTqe4hqrn11ZH3cBxM0lJO997f58FCVlzzZ1qZTWmOENUfYu7kFDOrNaNaZku1ARQX5VSBBgHWbm6TWa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38eb835b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1674\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1674,"size_decoded":2453,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb744b64324949b5c5d2df2f7b141951","sha1":"b9bca1aad1c94ac40d60fdab1515537c26520184","sha256":"0f5d25b1df3bc12f960ebe7124c82f3b583232dd5d386911b5c1cdec9c82faec","sha512":"82250e10b04aeb461838e53fc1e84faa15e715abd2f56428ebcaf089a80b721c0fc6d349fb3863bab02709761bd7a60bc5141334508f64cca83582bf865a5df6","ssdeep":"","tlshash":"9931d76413b02b0be1527ffe00e35bc6829d1c10c69f9743e71a8a776724ae5298c75e","first_seen":"2025-12-08T04:02:28.60794Z","last_seen":"2026-07-22T10:52:12.438957Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.147Z","timestamp":1784715507147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4bc4\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2NztKZAOfzoYAC0peOtCvsyFdYbfDDUYZ9FeQkArav3ViM0bKJwdXQwtShmeOFUUD3rjwLx1t3qV4MRhBh59L%2FFSeUGVxWPRURyqwZ1v%2FtuHD4i8PEoxSQdsKn1QFNqiFVP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b38fa86fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":20182,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-22T10:52:12.441304Z","times_seen":151,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/be.png","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.965Z","timestamp":1784715506965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/be.png HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Apr 2026 08:54:41 GMT\r\netag: \"69e88cd1-110\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8nNZyBUvGx6olfmLnlfc7cNmnHToBSH6aFfp6B5t80zCUA%2FT5kufZUGKqi8Xo3RtwezsUu5xXqB8kBcK0%2BkiFdc8wpBoMZ7nheXSMKmzxTFFY0gkMANylQjhOnZcHEanTad\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e8814b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":272,"size_decoded":1051,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"c110ddb748c542b725956c20e952f039","sha1":"4610c72d189c48a1cbd892c89ddc4600bb15301b","sha256":"158dbb93307e0f78dff134debb341424e9ccfdc11784459f26d486fbf65b968b","sha512":"d9204ca763edd05925344ba14c3effd622fea101a6241f067d73cac8cccd67ce2ab6bbca0154f978ce06d84b5966672496f60dbecb65396eed3022207078dc65","ssdeep":"","tlshash":"8bd02bcbf32e5c38f36c69bb631540558d05501d581c818ad08e31405747c3078dc195","first_seen":"2025-02-26T19:06:02.919898Z","last_seen":"2026-07-22T10:18:57.02295Z","times_seen":19,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/OnlySpins_300x300_background-1.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.981Z","timestamp":1784715506981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/OnlySpins_300x300_background-1.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 11 Mar 2026 14:48:41 GMT\r\netag: \"69b180c9-169e\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WgyIDLSUAhKX8pjA8oNyIkFWL1%2FtUkteCepdkvi%2FlAQ6nY83tpJhihQPQsCuJnfRpJSTNXHfod1wqP7wzCLW2JJRBIg7ahCacNV5TByUq1v93QqAqe%2B37HJa2GiTmBF%2BJQX1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e9821b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5790,"size_decoded":6576,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d33767d4e03c16feb1e6053be1afb9a","sha1":"c0a67c688babef375a8b8cc5d31a6b4f9a0f17ec","sha256":"9c4c20391367781e3dc0f3bd51c18a7e3cbe45f4096cd468ab1418aad105bda9","sha512":"77a7ae702ef81eb17ccec0fe07c96ced90cc620ef167a6e2adb599b07e0f30b52f7653b8e4fc7214ab81c036b0384dca3e95cba3e86c8be70ae50c92e67373dc","ssdeep":"96:bElbw+iKodZ9fyo8WuSvgSR68OOqb0WGls4YS1N9IlGjKOUbWPLt0c:mw1djyo5/gSR6DOqbes+1N9JYbWjtB","tlshash":"fbc19e46c0a5a7f2d4b35970f1a31e9abad0de856f1ca09d46563531110de6f8d9c822","first_seen":"2026-07-08T11:52:31.572138Z","last_seen":"2026-07-22T10:18:57.024601Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.144Z","timestamp":1784715507144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGIHQJNeh%2Frt0GPzyk28RveOE%2FCnHG1mF4CEtxZhE0D9wSDoEbOdI0FKsCU70x1lxV90tii3QnWXacFO%2B%2BpPiFXU2pkF0BnWJlGCcpHyTdgMcZKZ4IMs4yAzDU0wMSapIRYG\"}]}\r\nage: 497\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a5f38e8-11a\"\r\ncf-ray: a1f1b38fa86bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":976,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-22T10:52:12.436633Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.413Z","timestamp":1784715507413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH0oUAk8dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4d38\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 498\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r33%2BjK9pw4E%2B%2FexoU6yYMauwgLn64bmP6DujKFtDukxHYNCw7rKO2hZEllpFyrZ6QRmbV1gQ1V%2FZhRw0exAZoqD7XQBgjMRtxTI7rU7MbtnlD3OvELwnYtVGpLmevPu73384\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b39148c5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20558,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-22T10:52:12.460348Z","times_seen":187,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.929Z","timestamp":1784715506929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drzxzFZ%2FEmdGzk5n8Jx9gkBioDFfCMXhkIessSG94mcMViiZUM1LkfVGKCuRrKrdLbeK84R%2BDSS0ULWDtM7x1a8WSrWfWNSSwGfmxy9odK2aWEbJC3j0Z6Rco5QCrHutDHdE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e4ff9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1027,"size_decoded":1250,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-22T10:52:12.475709Z","times_seen":45,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/Bezoek-officiele-site.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.984Z","timestamp":1784715506984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Bezoek-officiele-site.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-a0be\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NFoe79T3f02Q%2BQmLYRBbD1nCQhlPqI6wo1a5Ka12P5mszYjzjWVfH719SLBjJGM4XTVDgOW8%2BjOIingHkx5CY6svbDQ%2Fznn3XHBQlcFmzVy%2F7r13Q%2BmEimm63LIgeulZIdC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e9823b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41150,"size_decoded":41939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5acfa8a88e76d16dc55cfe91460a759","sha1":"6f8a7720120e578bd0534c0e4d5bedd6711b48fe","sha256":"bdd79eace956f7a2017a0e0a435518f77fd3f49d2bcbc565c46632194c7c4668","sha512":"71b2425a483e69257438f62c74de961e2c4b3089a89f58c082f7f3d56b29f6e4009991ba34462d1455e7d304bd5bce0e8c950ff5000cf37a5cb5c8ccdc35e679","ssdeep":"768:zSvgMAyzbaGC2WRon/stP0TM+qdboiY9coxWK8wRpaVBT69qCH9q09pvJb1ZrvHG:ztzk/oPDdbtYGy7pW6Nph5ZLmJ","tlshash":"9c03f11db4825bc185f92a245dd2ada6fc3bdba5ae11a007cce352f71f140f16a4736c","first_seen":"2025-12-30T14:55:49.08495Z","last_seen":"2026-07-22T10:18:57.042575Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/rainbetfav-36x36.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.244Z","timestamp":1784715507244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainbetfav-36x36.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH0oUAk8dRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:09:35 GMT\r\netag: \"691f676f-382\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74OjIBQjFM%2BaIYeWDUkRpRVTFWJCPuIG4Fs%2BjsnF3%2BPlEM8ThNiQhr3aAolsVXGPuEH6ImwDZoxp77bD8dX%2FJf0P51%2BOAQdfSn9%2BJu4v9rdMZrhDgyBUWTrsKWTL1M77Fy6R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1f1b390489bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 898\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":898,"size_decoded":1689,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de31e0848aea8621fce848599a2f837f","sha1":"3c38f36c3e1e50bf29f15db7399f88debc350701","sha256":"b9aff756ba31a26aa6100d3c928baad608d06924a23ba037f80423bd0667b297","sha512":"04fdb663704c06bd569a9ebbc895e27947192fd3c5d7587f0d45965f32fa0610b89b57bc0c07721a7e6051f721c970ee5280ae530aa578d7182d2b98b1d22277","ssdeep":"","tlshash":"6811203fa3785b5ee0087d7461e91fa2e326ee07c227872a814487a20b244c2f96c187","first_seen":"2025-12-08T04:02:28.610897Z","last_seen":"2026-07-22T10:52:12.470565Z","times_seen":13,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-includes/css/dashicons.min.css","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.748Z","timestamp":1784715506748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 08:50:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f32e1-e67c\"\r\nexpires: Fri, 21 Aug 2026 10:10:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yznOGSweMHVsB6yGTQblPncntBXvwXBfS9VTVWsC0jY%2F7VDbneh3RFfzIZGZk%2Btqkq4ut6xSTmmuysOAW%2BaxLaEuX9NpUTYJgLgbZ3SZJ2shKxsWpX9%2BsprVpv6iNC8S9VfG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38d2fcfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59004,"size_decoded":36532,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-22T20:46:06.774633Z","times_seen":63263,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.947Z","timestamp":1784715506947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Sep 2025 10:01:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29e10-30e0\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQuho%2FxCQXzZJcmgRQTg1lQ10aBwXEC3QWJubZB0POh0RTE2P9LOZwHO0LKrB7KFyRIQR0Ua13zNOX3m%2BX%2BtB8EW2LDnWOgOF2pffxt1WPRc41y63yXC0dpXpNSpM9T8L1TO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e680ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4322,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-22T20:25:50.762161Z","times_seen":219113,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/polylang/pl_PL.png","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.970Z","timestamp":1784715506970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/pl_PL.png HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-8d\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icCsAjg1dm1Fzz3vgL6zk1GLCINBNIOHJ8NWpxioo9DzCkbSoKCFZRtvo85hO7Mq6DlMeyT3lH30PGsn6xQAYMYUkEGhwokIbSuGzKUMR67IhJHtwb565b3ezg9Hf6diUuo0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e8817b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 141\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141,"size_decoded":915,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"4b53fa04377e83e3e32e6713243e6743","sha1":"bd52136484ef01d10470a0f5c3212cad0d816525","sha256":"a40dbff14680cf16f097a83cb8ae65e08bd804c8710e4de15babc1f5d6f558b6","sha512":"1e30059982cbc85f51e16cf09f432d7710af21ca819cb7e52ea4e851da7ea18f23b86e78658e7819f38ac803902d2bd9856a1dda7f2e662df2bc55d32bbf4d0d","ssdeep":"","tlshash":"c5c02be353122c56c1d99033533f0012f85138292131024348870f2d3cc770443dc067","first_seen":"2025-08-13T16:04:47.955542Z","last_seen":"2026-07-22T10:18:57.059855Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/Invoeren-account-gegevens.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.986Z","timestamp":1784715506986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Invoeren-account-gegevens.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-3f1e\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rx2krvAiXRde0rZ%2BHrVsq5rFsqT5tfDCIBJmTB%2F1a%2FKLgXocNPz4ALTPHxx68t0ir9QeyB%2FbpFRkkmDQvX9uBRkw7wiJaPoroBs%2F7aJrZwyKaSRoVeqDZaQ1s9x6MwjmPINS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea827b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16158,"size_decoded":16947,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ebab33d7fdc0ddf5dc700603b2b676e","sha1":"72f8d28337f2ab2de390414237a9c1adf3490dd6","sha256":"aedc7b645e9546410df1798e515f120d5485819cdfc02efd2837a7ac429fac94","sha512":"fa4910c3a465c726f742e7ed1b2bfa97314e06355cd81549801f96ee49169c0bbfb42ca07ceceb41a31738e5ac33b545aff246a7ae493727b8a19c26846cf004","ssdeep":"384:bGSvgMAVcFdV1HGyD4hLzBvLlyN1q9YTS+hLVg9lFAY74YwU2DOWp:iSvgMAyzuvgHrJg9vZ74YwpCw","tlshash":"9272e039ae6117fb026e524a44fd218ac7774e2af8c6a0267487de7754d68006b273ce","first_seen":"2025-12-30T14:55:49.056297Z","last_seen":"2026-07-22T10:18:57.06047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.411Z","timestamp":1784715507411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH0oUAk8dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4c7c\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 498\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkJK5HFK1VAxu8hCeQFkLZVHa6lObP4T0KI9mXe%2B8rZRutc740NCGeVYvdE9pJuBXS5pxcq8QEZ%2BUydGN0Wg47ITUMzbbwel7zNs496efKkJ5UQOH%2Fddpemn1o3XDvy53SvS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b39148c4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20368,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-22T10:52:12.442241Z","times_seen":180,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.972Z","timestamp":1784715506972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f38e8-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2Fs%2FFhXOPN04p6qkW57q4jHoIH%2B6aLilA4GeXCe1SBJBseFuQT2qWjajlSag0OnSPOPK7EJfvbAvPrSW5u5YlVQhD4bTeJsFO%2BXB1xMFQubD8gdn5H6WH2ndi4BnUHx%2Fy1BX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e8819b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1542,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-22T10:52:12.450548Z","times_seen":58,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/legionbetlogo-removebg-preview.png","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.979Z","timestamp":1784715506979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/legionbetlogo-removebg-preview.png HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 12 May 2026 12:40:41 GMT\r\netag: \"6a031fc9-18dc\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqBz7RM5BYWQcaskJF7Pg1OzXXtj1TwW3UswzR9ty%2B5PkxUh1T%2B7Ow6H8Hd0GqKujaHkLlXAFU%2FKg84Fa%2BSVcoeKYciPO%2FZ2lied4ErdV1KvFw9LhMYNhIs1m4v5HTDtwYBy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e981fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6364,"size_decoded":7151,"mime_type":"image/png","magic":"PNG image data, 119 x 28, 8-bit/color RGBA, non-interlaced","md5":"b7370aa0ccffac49558538fb439037b5","sha1":"47998847f03d452c02ed2bd1e97dced4109469b5","sha256":"c5698aad4bd453efa7e27e92ac4c607385f0ccf0741e67b94d8376490b094f42","sha512":"56f54e2a63ce29499e3f87d9f06b7b23bd95cff62bb6034fc7685b2442448d82f43cb0356ad811752fe09d58fc891154edd95cd686b60e06e9902032a283fc26","ssdeep":"96:p1CHsMy9UB1W6rLAYZdlzEue+BAaMT4gNZxfKPtxFnWVzULiQ1SPBD0uyA4P:p1BMwR6jlzEue+BAj/Z1KNWKiQ1SP14P","tlshash":"33d17e4615837bf95dae170610bac0fad1acc22107a53d9c1af4e8d802df2aad8b534a","first_seen":"2026-07-08T11:52:31.622868Z","last_seen":"2026-07-22T10:18:57.069268Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/fat-pirate-logo-1-6.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.982Z","timestamp":1784715506982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/fat-pirate-logo-1-6.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Nov 2025 14:12:00 GMT\r\netag: \"69207330-27d0\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rYbTOVVdaZEAM999cf4Y4AeCKSx9cwOE2%2FPHaEe8kKBkr9yw5Mfsv38T8APPjSaq8N9GCarBPErdNw4B8afwjqpIj8OcfUk9rlgzYv4L7CKn%2BNZModnxpMd2sl8azugIrn6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e9822b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10192\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10192,"size_decoded":10975,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a5be47dd772d2864750c67733f7d32d","sha1":"46ea13d83a6db3c708881856c58b2c5cb4032153","sha256":"1733acd63538aa668e85d88647f3f90c458689e1ff485579b0e9b094c58f5e70","sha512":"34fc9d7a2843ce0c5b50f957bd9116a3ecf6b8e3ac2b7e6f917e0eac2d59f9afee8904746ee0695eb2aeca5bdf2e5cff0ef227174504c59e432c842f4672941e","ssdeep":"192:vwT9cKAJo9hSHQf5H4Q+uKTNZukDM7oTLF6EnCbdMdT9:vwTTVoGYQkN3DM7oQECBMd","tlshash":"1222bf32a3ae5c08e947f1b355a71740ee7c3e7593bde550b007ab0bcb8ea85216584f","first_seen":"2025-12-30T14:55:49.042003Z","last_seen":"2026-07-22T10:18:57.070418Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/images/rating/badge-4.svg","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.225Z","timestamp":1784715507225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-4.svg HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH0oUAk8dRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f38e8-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIhXy%2FPyWwsw%2BsaZn6ASH7Dh2FN6LwhCFpyJuDSX6C1yFtxf5Tmx7H%2FrZ%2FQc6KYWuCGtkdKpUneFKkzyVsmq9ADBdU1CzRMr7dY2KcED1FhrsmwD6qvJdR7ziT9BsMXuONXw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b3902893b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1536,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da49c60a038c21ad060f0b53ff910426","sha1":"174fdc729062994bb104f00c9c6072a0cf4faccc","sha256":"addd89150ca262be3c0335ee993d4559fb1d5ce30ac6c25c6c3bdccb7c49e9c5","sha512":"38a85e0737612e812633a5b3f7f66a8bd9609ff6d24011b479ad55027f61373b54cecb7750d75d45fd2765931456920866eeafde617bc6e6d018cdc206d072ab","ssdeep":"","tlshash":"cd31957ee10d2c2af12885bcae52d478047abdfb4cc2000044e1b9abd0a24c60cebe5b","first_seen":"2025-06-05T18:04:56.85468Z","last_seen":"2026-07-22T10:18:57.071232Z","times_seen":31,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.408Z","timestamp":1784715507408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH0oUAk8dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4bc4\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 498\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWSn3ZmHq6WYirkFavSBc6tSxeZ%2FntC7zd2jIDyecFnzxoRmb8JAqLoxlawZERity8sm1I3y%2FBE6yRIJwiLj0gYzu2HDLm00mLyKG9YNWej3FoYpxKzIm6Kwg1aA0iRyo5zd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b39148c3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20182,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-22T10:52:12.441304Z","times_seen":151,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.923Z","timestamp":1784715506923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Apr 2026 05:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f1918b-ade\"\r\nexpires: Fri, 21 Aug 2026 10:10:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZoGdF3VoApydyh74bAvaLk6CG9JC0LfLiYuwVKbk0yVhfn5rBPaZeoIwZGwbxoPM5CuxhwTkR6d8%2FN9z2zGM7%2BNbUOcqy7IFJ64rnpgfBNwesUrx7A57KsJg%2B6XxIjAIQuHf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e4ff5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2782,"size_decoded":1512,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-22T20:10:29.916159Z","times_seen":30805,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.953Z","timestamp":1784715506953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Apr 2026 05:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f1918c-a41f\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qcKS01YvSb8jaG2U2KZrLkLVJzBfnyifYNMPCj0KPng7fn0nBtCowsG2f8HxUt6NlWoNEYBe1luczzvLSt8sBNhUHP3ZwZCu6dgyVBFXgL%2BOoZYIeqUdXES%2FVJ%2BgkcaZnK6o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e680fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42015,"size_decoded":11753,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42015), with no line terminators","md5":"56c9676ba030ad9d7fb5521ee10cee10","sha1":"f997465c15b5b5de8a53aaea553aa269dca9d755","sha256":"6da59ce6285ab9cc242e38eddfcf550026c0aaca760a6bc79a1024696b6092b1","sha512":"0849e329a05e8490ffb4aa7d72ffe67b63886370003ffddf0d4fa700a459cd399a928fc45eeb8f51016036ea1791c3838d7017118f74b7e68a5bd1ae402a7e2b","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiq:KZal0BKHWpkVM0KtmuECEh","tlshash":"2c13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc60e9bfb1","first_seen":"2026-04-07T18:32:07.00063Z","last_seen":"2026-07-22T20:23:40.816455Z","times_seen":4617,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetslive.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.975Z","timestamp":1784715506975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9508048080.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 23:47:34 GMT","end":"Tue, 06 Oct 2026 00:41:06 GMT"},"fingerprint":{"sha1":"33:85:DA:27:B6:E8:23:41:7B:FC:54:07:F6:E6:0C:F7:14:8B:79:09","sha256":"20:2E:77:9F:D3:C2:12:6D:43:BA:E7:23:70:C5:CD:D1:2C:F0:B8:C4:D9:42:EA:A4:B6:AB:24:B0:98:11:19:A1"}}},"request":{"raw":"GET /gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Frainbetslive.com%2F HTTP/1.1\r\nHost: g10102301085.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate\r\netag: W/\"160-9XoKTHJPhkwR+uq3SOUaam5YNgk\"\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: 0cc2efe6c7aacf2484731a1143f10019\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\nserver: Google Frontend\r\ncontent-length: 352\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":352,"size_decoded":779,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (352), with no line terminators","md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-22T10:52:12.480436Z","times_seen":22,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":54,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/582486df-f28d-4a38-a46e-6563b5b23e27.png","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.980Z","timestamp":1784715506980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/582486df-f28d-4a38-a46e-6563b5b23e27.png HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 20 Feb 2026 15:40:19 GMT\r\netag: \"69988063-227f5\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSHNpeY8jZoUH6ZUH8he4I2YjZPkjl%2BV4FHai3qTkr4L291RvlVEnAFiKaSE2DsASL1npZSrRvDOCWf1OclkQCG78y8c4iLSD5Qrh3d%2Fg3%2FHegDZ763jBfZpPTkLrheYG3z9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e9820b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 141301\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141301,"size_decoded":142087,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"24f8cdb94fbd5488c5204875faca005f","sha1":"8e4469b176a132674b485c78bdd40b5a500a3268","sha256":"204cd11b0fd6716084e7ddf0f4d5dbf594c06c38e153e683537c59cb7f849624","sha512":"4d39ac63d9016fe3fec26c02c4365b4e09cd7f840a4c4a4cf96d4900bbb6048e2adb55e3b9d8b58c6f531ad42389ab5fc4fe40fd58945f5a309daa3cca40300b","ssdeep":"1536:SSnTKyKqfIHwAqSJjeTLqtYZHbB5dQi3umZ7U1yqk4nKR7SehpBBNJxrfloMt/T:HQEIHwAReXSYJxQFme7nKR/hxNJtdx/T","tlshash":"39d3aff0bf4fb5cbfbbf58fc032a2b66263252c25fc5295601be07412564a235d76868","first_seen":"2026-07-08T11:52:31.594476Z","last_seen":"2026-07-22T10:18:57.073597Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/092657d8-8e83-484a-9717-442ae1ab7886.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.001Z","timestamp":1784715507001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/092657d8-8e83-484a-9717-442ae1ab7886.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:46 GMT\r\netag: \"691f6996-a5a\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgypsGzQQsBsFvG9AgicsB1MZuMgB%2F06AlJVPNPyO2%2B4VI0VNq1krkvk%2FjANGHBBgZul0b%2FcxNCQ58SL9lFNdOdcqt2RzejhI7yCkvi%2B6HeA5mCksBauKXxjnphAv4To3wNg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38eb833b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2650,"size_decoded":3437,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0cd28c3b7fd01c4bd0a91491643354a","sha1":"68f553857f319be3598b919912eacc9723a1b995","sha256":"cf5f2c4057c53433704fc056bf560ae224b401741bfd2c41f020c7bd68d7aed9","sha512":"c5fe40193e39969119a7b8ea330601a20c993ecc818e8103d081109e1a30aa35fcacff691f591ba06db37271e9b5604853c181a0d5add84f7fee638b66e6b563","ssdeep":"","tlshash":"44512cff1f64860ef10426bd68aa8deef5c9ab1289587f54b2d3012d4b13dc06c6538b","first_seen":"2025-12-08T04:02:28.678906Z","last_seen":"2026-07-22T10:52:12.481382Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/rainnlbg.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.142Z","timestamp":1784715507142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainnlbg.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:32:00 GMT\r\netag: \"691f6cb0-21b14\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlqrfE0B7gC2J5E0AqYZEx60duRJ%2FHjsiUpZdf9mRL2xJ18EdkiMooVR384hJLBmEOO2fmLQkL38TvKXnZAw7XjvxXLK8XNhv2IaxaSmMKQw9BkfzETFH2HUcJuwyierpdtM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1f1b38f9869b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 138004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138004,"size_decoded":138787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6584c1e7682f2fe10536c22bf82ef8d6","sha1":"0a0e70477361c2f7a560631e192d09c6fe25f8e7","sha256":"d50e3a04a9a35cbd9ce26d5f171929da259cdc39b81b2861bafed3b7c0f7a67d","sha512":"53bae8d58053181781cf4e009c6cb88bd259003a6e3c7164f2550ccec123bbd339153af398853a88498649512f4c20643b745acac67ada5a9294fe4bdbe78362","ssdeep":"3072:1eo8Jf5qJSzW9uWxOICNpgk1SaUAeNlBorDeuOO0UZaHQHj0:1oJf5qUzWZmpgkAaUjZAPOMoHO0","tlshash":"5dd3121da7616d8fd7698a339fe1f852903afadab38c466d90b0d104f01524e3798f6c","first_seen":"2025-12-30T14:55:49.045249Z","last_seen":"2026-07-22T10:18:57.074766Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.148Z","timestamp":1784715507148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4c7c\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuvgsfLmMXlZM6kas%2BKJUM%2FvKDrGd3VZDdh2IWrO98OitWf9cic%2F7lr3RmbKjfG%2FlJ4AVOfub9C4eeEcavJdmD5R%2FCOeTUSbcglV8ya8%2B%2BLNHMIeIEJwZZmRl7J5s2wvw%2B2p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b38fa870b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20378,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-22T10:52:12.442241Z","times_seen":180,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.926Z","timestamp":1784715506926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10462\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrK2pv8YSpCEDLEbgL8xjeDk5L%2FvqtrEQP11d9Xo5kJg8FPK0OmVH8iXdkJ5Bf3fdHfYdKNrSamJ8Gx3CQnHwKNNpN9xLARqdY0g5RDv12UbNdew%2FJC7YjtQoR2xDYhmvWXogvCN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f1b38e5e415690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59305,"size_decoded":11451,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-07-22T20:53:55.186869Z","times_seen":46470,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/84182e5f-bf10-4af9-bc9c-8a55ff649655.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.996Z","timestamp":1784715506996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/84182e5f-bf10-4af9-bc9c-8a55ff649655.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:45 GMT\r\netag: \"691f6995-a26\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekgwhp8tyPD%2BcdBQOu9SgMh8Z3koKMaw2B%2FaAcepATiVJ8hCehiQ%2Bf%2B4djUE1e2fg1uYQRp1UvJTxA835mMYZ7NbF6vtdzcjPjfpFfG5qZxO4pOhoUFw2RIPoJiYol3sNgHj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38eb831b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2598,"size_decoded":3383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a69313e28331ed4a0029c7cea05d82f","sha1":"bd7538d80e7246d6c41eef75ca8a539a345c4aa8","sha256":"c28b69fa77da238487da5eeaea9f36141f09a10e0598ad4298e2136872456624","sha512":"8daa63f76dee4f1a9eccbffdaa3fbf8252f1fb7f26e5a25b91ec80109bee1b0c8c37e42cdc8c61f012219f5d47fda052a19b080eb7d70e342914a215f9ab2833","ssdeep":"","tlshash":"0d510a5a77286b66c90213f920c0b3a6fbc83e578e83d95044c146846f66ad756ec44b","first_seen":"2025-12-08T04:02:28.672912Z","last_seen":"2026-07-22T10:52:12.437692Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/18.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.004Z","timestamp":1784715507004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/18.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:40 GMT\r\netag: \"691f6990-47c\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1njAYWkh7uJRx%2BILvd3V%2BxvakhtkriZCQOLfs0%2FxwEDt85rknkuGJwRIgkSFhYZ8whBah6gGhuqNgsguIxIsz5lbslOxI%2Bgs3AJoA%2B8eEVLvaJJfVvko%2FXLdkB4GBNwFhHa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ec836b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1148\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1148,"size_decoded":1937,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdc831b6b11226f06fa66ddf16669fa0","sha1":"bc15af299bcf51c7f9799f324cca18f916ee4a70","sha256":"a9acb299047f1409952793a383a1685b151a3fc57a999a9cde69e73198036afc","sha512":"74f9f13a33628f71a2fc92f112f220da14cd129aa183114bdf8d888d22c13579f74ed27f152e2fe4a93044b98b6f207d1dc17551fe2bdec6181585087ec51856","ssdeep":"","tlshash":"5e21652f93156349d90a36f520c42b82eb2d7c399253b6bbd38a03251b04ad6698d0cb","first_seen":"2025-12-08T04:02:28.682592Z","last_seen":"2026-07-22T10:52:12.455179Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/complianz/css/banner-1-optin.css?v=1737","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.169Z","timestamp":1784715507169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=1737 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 12:36:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f67ca-3def\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F09Hm50DStjIhHd6kbjcQ%2BNaAL3eGbWdoMh96%2FIHCwxv5NXDQ3dvQjQj%2F7v4xFW0l5CIttj83L7eViCGr6HZdUMvzVFUnNc1zK6oFZvLt5RFpGJ5%2B2He92VlWTKDeVZw3C0%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38fc883b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15855,"size_decoded":3731,"mime_type":"text/css","magic":"ASCII text, with very long lines (15855), with no line terminators","md5":"6429eaa306c83c6f689222027b0fb19e","sha1":"d3b0447ddeb3030844ecb6aefbb1b8d6b2331112","sha256":"be6ed808fd23fd2851de453ece45530b68aee1a13419bf2dd98e6b5a0af5d72d","sha512":"298a39cd48cf738d80ef2822bf96197a952cc09a259046b0b6cbe648423cea76fb8b30e13ad36ba6373dfb124b61c7aad7cce4e4abdd37184d69af1aaed86a04","ssdeep":"96:su9ppeDJpne6ngZ1csUi5p8Z1cAvqlIWurrkTobudlYLhf8Iqb56qlym6OoLBa/e:f0SHWDi5cWi2IWRzZbZ3sMBg","tlshash":"786220a99e0c1164d2cfdf1d3baa9a0e9114f731b29d1af824a17850f2fe5d11d2e387","first_seen":"2026-07-08T11:52:31.574224Z","last_seen":"2026-07-22T10:18:57.078256Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.949Z","timestamp":1784715506949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Sep 2025 10:01:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29e10-348c\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp6ejoRee6HOGWqvQ8Az3eNxcspKE6hOERlg1q6bjp87%2BiAfsCvoWVp9cZPX4EA%2Brl%2BhJeRwHt5CYH%2BGV1gKdHBfclDwlInDrcqg7XskaV6zitiBibCK36UPBkSl%2Bs8l%2BxfQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e680bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":5090,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-22T20:25:50.751727Z","times_seen":226745,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.952Z","timestamp":1784715506952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vQ6R8iEXa4yPcgQAe55dwBz1vjgcRgks86hLCOJEFIEYZNDXMq8yqRoibUjVzbWFqyHcbq%2BfOQydrH311eFIxpSi5vzrv21ge75loOok8ClTSZIQ564ByXqCcNiRJ8zIP%2Bh\"}]}\r\nage: 497\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a5f38e8-3d8\"\r\ncf-ray: a1f1b38e680eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984,"size_decoded":1083,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-22T10:52:12.472275Z","times_seen":41,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/casinolab_logo-12-1.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.976Z","timestamp":1784715506976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/casinolab_logo-12-1.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Nov 2025 14:12:00 GMT\r\netag: \"69207330-75b8\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xocEBq3CJIn5QAiIIObrD4F61Zoad2ZiYiYoSXsUShBK5kiyxNe%2BLXWpWvaXVEuJObbbkxbQmmcPuvcPhOyl2atUBkp6UV8EN9iiEdFhuU%2BBEjaD2NspFI07fLAqeTQHp1xv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e981db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30136,"size_decoded":30919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cfd2fc22a4e9f16905b157c3a6de81f","sha1":"bf64dca4c27074725a2f2b1582c9e666a73da733","sha256":"010a1a736b1a0a7eff1510542948c18acc28c6e74e6c55c7fe3736b74c41bcc5","sha512":"9ca4b6d3f928a6abecf791d24c6372134f1ffe398f87ecf68c948061f9cb76ec66a9fe66bc06b2ef13a5f4448062154c3d70daab4e4f9547bed8791624a0abe4","ssdeep":"384:VwTFaG2Ydy4WmMZ16V+RswvKIxhjgjO+UTi6VAtI04FBxm1QoFDMs9AS7k2lP8Tp:KT7djYZUOfDc2+6VAtIDxEQQjkCETqS","tlshash":"11d2e0c51cf606aff11c0038a61d1a66f5713ed86c0362a5f1826bdd1b59caf4b2a1bb","first_seen":"2025-12-30T14:55:49.03169Z","last_seen":"2026-07-22T10:18:57.082899Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/Kies-registratie-methode.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.985Z","timestamp":1784715506985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Kies-registratie-methode.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-3778\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HV4okfZvXiBDpo61cMWQJZLiG%2BmTIk0eQWyLlzWn6Jn%2FJnsXYwKd8%2BYnMurM6oJGmt4nEFAOQP6xILcbvzoUQQkw6hkHEVqf2QHoJ9Rr3D%2BKJtOOG4LQPVsCri%2FPFCkRMFM0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea824b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":14989,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14e8b8701829ca0ce0e85ad87695340b","sha1":"6633ba74fced80f7170ddee0208fb9d7b8dbf2d5","sha256":"338d3ec9aca81cc29c15d1b0fe3b3dc6515c7f4988c4ec56534af82476e55189","sha512":"d58ed0a8a0ff9596aa818d1fa2fc6d8c305679e21ab99cf415901938e7648e9c1bed2b6001de68ae1f12becf34b58935cdfacabe2bc80b7f7fd06875bd027e4f","ssdeep":"384:pGSvgMAVcFdV1HGyDCknCa5ztKRlrFXK+ameqR17d2HpkK15bSOP+oL:kSvgMAyz+eCa5kgmFRRd2JzSz6","tlshash":"bd52c0686a3213d64b65278e48f0045ed4338a41d4448caf7fd788736ea70e7ef7d295","first_seen":"2025-12-30T14:55:49.059035Z","last_seen":"2026-07-22T10:18:57.083471Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/10188811-41ab-4cbd-9226-64fbce346b00.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.002Z","timestamp":1784715507002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/10188811-41ab-4cbd-9226-64fbce346b00.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:47 GMT\r\netag: \"691f6997-7bc\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7H6NxbWbZw%2Bj7y0Q9aZarvJ7%2BGdUezbHzDF3X%2BNCifMo8GjSWvlrmtJLa4hjaWtlOPAQDyXRjtb7noo5WwIZsQ%2Bs8pJQqzQmYX13h7GdvFLP0RtjpcLPeAB2Q15wR9MuQTy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38eb834b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1980,"size_decoded":2765,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cba74cea8fe6c59a4d939e2e94615c6b","sha1":"33a5aae92cd699f24df8168e8cc0454a5912c0a7","sha256":"0531737cf8ef31a4669653610977a5529ff633bd38063c7aaf2dd9f4a0033a60","sha512":"ee34165999fb2d0b059472964a7ba8071692cb19153de8c09d81f21d67c25a350c6a20374fbb5adbc8011e1d2628be52af8859e3adc6f982c1a7e22c86332e53","ssdeep":"","tlshash":"9a41e92817a80308fda16bb471d51f56f7e4b53ac6414b4940829f2a2308df87cdc4cf","first_seen":"2025-12-08T04:02:28.616426Z","last_seen":"2026-07-22T10:52:12.454109Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.151Z","timestamp":1784715507151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4c08\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UthdlmFoHfAZZjnaO3jLVb1zmJga0buZNNu%2FNYPzqg6AZ2SEmnTZ3UP2m8IbZW2NLnY3wojdyILI%2BWulo7vP5U53le7xMIkjSNd5QDNinRXRbQzCmhFTMwC4acKFSqWc7brK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b38fa875b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20250,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-22T10:52:12.469753Z","times_seen":176,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.946Z","timestamp":1784715506946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Jul 2026 08:50:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f32e1-1664\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg442cDWnxvx44Y0OpStRLTzNPJD4d3Dcjk7aZFU4bs6j1FRX1i9Mcf8Wx6OgT9hQ9vGHEocCnmlJ7FHtJQaum9UPe4fXqV0K3FW1tAuvacLwHyHFT03F%2B5oPPtxXTR26nrD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e6806b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5732,"size_decoded":3280,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-22T20:40:27.766982Z","times_seen":8124,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.974Z","timestamp":1784715506974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f38e8-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfb08ApKMMETFDQu6PQxZAh78LKINOeCZQje0xAnOGOmBsI1H5M2EBZJKeZ1452ZbODzC0dpVGCiQ3giQCAK59dP4tTCpwGCrhqrD4wf565NaCkBav954%2FHCxtS1jM9AHF5e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e981ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1534,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-22T10:52:12.463712Z","times_seen":59,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.978Z","timestamp":1784715506978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f38e8-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZ76HV6hIpPut40U2VAH%2Fn8E7lmRhTsRNKch%2FqoaYAlLi3pGG86WnbYghOaEGz7ceajKZu4hkPYy2YOtgW3Y4mNjWG48WSczEGtkKCbVXVzQu4E10uBcisUo5DwWYwmksuFu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e981eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1537,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-22T10:52:12.476612Z","times_seen":53,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/Email-activatie.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.987Z","timestamp":1784715506987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Email-activatie.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-25fa\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNeeXxyY4Kor3SW%2BLOj1RoC4f2Siq%2FlDDCLFOtv7556d9NdG2NcZYm3sd2e3dnrqEYS%2FF5KUKP3n9gsPzPnEmndGuwchNR6wcc6P7o6edEdX78tW28C8eOhus5dMjxngxvHv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea826b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9722,"size_decoded":10506,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8fff16c5978e094c1a51fd95b5ae621","sha1":"001d63e1f4333b0d7b7982142e330061ac60df10","sha256":"4ac6fe9e278a666766f5fa24872cc9332bd990bf4fb7a2b377a8da34670b4bac","sha512":"8353f52923e3ad415c2e40ef8fffdfc2da69cfb0a6c60568db07d9e647bd11069590672ce38ac73fbc85cd980b4d7086f6aa4c1c17d740b57dcbf88497317d24","ssdeep":"192:9LHCSvVOMAVZyFdV1bjuVlAD8t4oNoPq+ceeYyt1pnzrq4Mbj5Is:9GSvgMAVcFdV1HGyD8+oNo71eXnKbj5p","tlshash":"4f12ae17981a72d2c78e971a8efc0cf4e573af58cdd1c48351d1cce782056a16eea28a","first_seen":"2025-12-30T14:55:49.066765Z","last_seen":"2026-07-22T10:18:57.087885Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/Start-met-spelen.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.988Z","timestamp":1784715506988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Start-met-spelen.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Nov 2025 15:13:41 GMT\r\netag: \"690a1825-3ae2\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J48AZeWpBFNe903mavmzaCqjV3H0BH7uM3OZ0H54Bjp%2B77ThJ4zfPSINaUJ81YtlU265oKIfPoU8eDG6nZ5B9Z11ZsjvAGEdZXAz1UMZVhp3DYK%2F7IVtTgTbPea90nfcnGH%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea828b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15074,"size_decoded":15859,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b833ac1fbbd2c7fb2ccd59fa76b6ca4","sha1":"d706a02078e632b4b077f7a8591e5887560b7fc9","sha256":"d0f2e6b962f99e8cbab62655bcc9a55cd385bb16dff29dfc26cbd19c14c0961e","sha512":"f2a626e5b03721bb372fd401526d294eafa1f1e75c6eae1446363ea3e2578a42ba5a014503d599905825d393c8cf7f3fd65cb0ef1c02373ebe5bd5be1e0bef8c","ssdeep":"384:QGSvgMAVcFdV1HGyDs0O1jOaROMHY+rOCBdMSKGJ6PwrmlXhktz97EXLZsL:9SvgMAyzonjOaROD+C0daGJ6oryRktpD","tlshash":"7162cfd22a4113c048a9bb4f4cfc15dc96575b5291b0509a6cc7c9630c95df9ecee0cf","first_seen":"2025-12-30T14:55:49.091866Z","last_seen":"2026-07-22T10:18:57.088817Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.415Z","timestamp":1784715507415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH0oUAk8dRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4c08\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 498\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulcmGx3krNuy2gWf%2Fwv%2BkTtAeqUWUAt%2Fkwi6anJPTBxnxzKOr%2Bp4RPVZc1tOaoo4UVM6dVHiZZTI4iGSHf73wQDu6rfQ66Uj16yLBAvSLS7RYML%2F%2FZsfiUasSXLD7LvbmLS9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b39158c6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20258,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-22T10:52:12.469753Z","times_seen":176,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.950Z","timestamp":1784715506950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f38e8-2125\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FPIYTn0ktGMSnNNTkbNVEYfp1a7jn941FGdO40wXz6qcMamBAMcWZafAZCu0Yvd4modtFQpyMf%2F7IjcfVOYE%2BAgxZxphrvNMNEzlfBRUu5QIRx74qcF6aX%2F5sJ9qucVSdWD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e680db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8485,"size_decoded":3479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3531)","md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-22T10:52:12.453225Z","times_seen":15,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/rainlogo.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.963Z","timestamp":1784715506963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainlogo.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:12:22 GMT\r\netag: \"691f6816-ec2\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zebkeGsIIlJT4pI3DRIgGml2pjmZXBd6bjU6v0q3vslzCPqa9Kaq0dcVXiJBLPQk7KfjzLER%2F6YfiqdPDwIGRSjrICMNB09k7TUDSi31wCjtowbIlhVe88BK0xWievY5SlGb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e7813b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3778,"size_decoded":4557,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3f1559f7cb6abcbe9a23fc75173c304","sha1":"87b231b2ddbaf4a2cfb71d9bcf0662899d592c65","sha256":"97b00246ef0fe09b6eb39f12cc43179c32c25b0fdb2ceb5bd2a4b7617533709d","sha512":"2ba56e0cf730294aba137e6ccc5b1841e5f7ee1c657acd1416e3a25f4c8cd20f5ca410fbe917b4ea4855b9c111677ec1afa6402a7fe509d308b15f8ad8b0c9b9","ssdeep":"","tlshash":"da713b66b324973df022b5f5016917daea84ac00818bfbf522c441602b38bcc61f8a1e","first_seen":"2025-12-30T02:21:12.811036Z","last_seen":"2026-07-22T10:52:12.482277Z","times_seen":12,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/polylang/de_DE.png","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.966Z","timestamp":1784715506966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/de_DE.png HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-165\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUoAWfYadZw9loWiZgfWfb6Kwsis0UZSvrgTc29Ek57E7RV6yd0DMvIDIMH5g%2FCXiP1uPi0XlpsmpOHrwj2zHuxXfyG22a9CJ3er3WqcEp9BXPUTm5L4fzR5NtiJQatmBK6Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38e8815b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357,"size_decoded":1134,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"c8366d209d63b7cda8314d4258c36807","sha1":"6adb58ed9c1803599601de3f3645b0181c23709c","sha256":"6434052af0ddf6b0203fc314c95448d2148edc35dab8973128a46430fd6152c2","sha512":"9a78f5c6c4d95d2e73ee6a8b3e623660592a00713ba8461d5f772f689d6f0e6baf1aa0ce2b651e401dfb75ec3fa73e3784e0a0c0caf03f8e17657e1ef9843a30","ssdeep":"","tlshash":"7be0c0d01560ed29e2815af9449e4181d07b24be40ca16871c16cda90a4ad7b82523ad","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-07-22T17:56:58.283829Z","times_seen":493,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/interac-e-transfer-logo.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.990Z","timestamp":1784715506990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/interac-e-transfer-logo.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Nov 2025 14:30:30 GMT\r\netag: \"690a0e06-13c2\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gl1mPkbzgiFsS9GPrzqE5qQwtgVjYjySxAvQ645Pk%2FCV6y53n5ImYD9K3JasU4I2aCQeJYeAHaTI%2B3TCtLfhb1grbf2v7c6AGpFe%2BC3Ran8bS0my1YuMK9BQTg8lFzTojROO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea82bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5058,"size_decoded":5842,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d48f85a5a65c4b455396f3f4573cbc3f","sha1":"50e3d8c488ba9abc321ed9e8b38cfc516f120773","sha256":"a4552c0f5ee0b81b0e13cb21df070e00483f227c56baba89d16932884d8af105","sha512":"8a52749235fc6366e784aca624db5fcdc01d3cea21607c5df3e81cd3ccb6d45c20bee606d635830e2fc58f103a78a9843f739b1b62ef80bc3783a8d42326fa02","ssdeep":"96:r+unH7jccuMELTUCwMMR7HAr4Ln2dFaKF1vR9U2uuxG3QaYrcgaqxdINzy2Lt9wr:rp8rxhMRtLnu9p9U2+QVj4z+IY","tlshash":"eaa15d643cf7228299c97a914cfb7ccdc6b3c165c88815daecc68c674b5098256fb7c6","first_seen":"2025-12-30T14:55:49.048683Z","last_seen":"2026-07-22T10:18:57.091751Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/fb1e50c6-45db-42ce-93fa-2244a05711cb.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.991Z","timestamp":1784715506991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/fb1e50c6-45db-42ce-93fa-2244a05711cb.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:39 GMT\r\netag: \"691f698f-90a\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lXZvoFJx4S3iBY82EiI%2BrQ7tvZ%2Bhr1hX5yOWxomhs5laUAlegUWbvyIGl2r9Lg7GWFaFQlVOpQm%2BTDTvVs3NBcboPqOtUXH995TiAx2tQIiPWQvNCGtIqasHNU6IwwSH%2Bnt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38ea82ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2314,"size_decoded":3099,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9e70e0a4bc1dfd97eb4e1a28029e4ba","sha1":"0a9b9d28ce85f116dff79468ca118eb9c9d87e47","sha256":"b5aef05c2d335a0d53a69a79c1bf59222ea85435714b5a46a2233c4eb8c536d5","sha512":"b8ed16f84b5fb1abf52103fee6adc1c628ca350071394b3601004dc84b9c7817307641896ffb6047054d67095f04da262ba6e5789b4ff597bb1824a7451ca87e","ssdeep":"","tlshash":"6a412c2743b58b28f58e2db470849b0bd7dd790126836b79f1c4817d07886c2be4a10a","first_seen":"2025-12-08T04:02:28.666378Z","last_seen":"2026-07-22T10:52:12.4629Z","times_seen":11,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/822c111c-69a1-4978-8284-4317ae125eee.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.994Z","timestamp":1784715506994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/822c111c-69a1-4978-8284-4317ae125eee.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:18:44 GMT\r\netag: \"691f6994-820\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FtKMzXRXLQaOcdCZDBIyE13g%2F%2FnRhUCcRacQEos74US%2FaAih5CV8Y%2FoW4aTwK3XZwuvGuPBldAtFyVxqlwhnnbFr1Ti0sQYqE70Je6Pko%2F7MZRrk8j26fA8HqQ1%2BND2b%2BrP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38eb830b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2080,"size_decoded":2873,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25bd97ed63cfcab632649a9f1886b27b","sha1":"ae95f1d196dfa3c01032c49fc496c1ad1e1734c1","sha256":"0b4507801a93c0414ea01d747d4f56aa6c3bb6058def83fca97fd2c049d5477c","sha512":"78bcef71cc4576df1a6d70bc119c7aeed2aec94ccb3705006b246803ef3f2e29d77a7dcc496cad9e65f3ddf26335fbde21c17557feec24f2f2337f5a7bbb0623","ssdeep":"","tlshash":"3141ea56a779679fd4230fbc22c50f41c7d52366439495b0c70852716f992dc79ec4f2","first_seen":"2025-12-08T04:02:28.613589Z","last_seen":"2026-07-22T10:52:12.435557Z","times_seen":11,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.150Z","timestamp":1784715507150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\netag: \"6a5f38e8-4d38\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3ZWVgJw02SmdS7Y4EiaNQICCHixZKE%2FfcB80CLqGTDjN3s9DeRu4rmUQIjr0Dq2h4Gs%2FfIEWZJCXIDb4I4bifOGZbwGTIwyRKColdtk2M0Vh95LND%2FRWH%2FOov%2FzVyKHCtht\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1f1b38fa874b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-22T10:52:12.460348Z","times_seen":187,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.746Z","timestamp":1784715506746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Sep 2025 10:01:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29df0-d0f\"\r\nexpires: Fri, 21 Aug 2026 10:10:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SI38ADfdx0zIV%2BpV%2B8qAuKF6Eas8%2FEPvtl3RAbohdCRQg7AOJhMPLB6W%2B5yNhIXONFj9hY6IIuVdHI%2FrbFrNAv9nWLVP6%2FpLk3EFb85mbCsyKDt7IiBei6jOVvH5wmsUdgvg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38d2fceb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1620,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-22T17:19:59.828653Z","times_seen":4518,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.143Z","timestamp":1784715507143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ag7RPtQZiCc3Sp4z6R67THPira%2B%2BMGX7725gsX%2FATpGoKpuOdUYwS%2B9cAniAgaxdqD%2BKzPVT4nukMnDtplLAe8eU51Usw6zlvex5UAlyV%2BF62FJ18nlmEtEnPqlnhGGVuedj\"}]}\r\nage: 497\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a5f38e8-df\"\r\ncf-ray: a1f1b38f986ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":942,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-22T10:52:12.47412Z","times_seen":50,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/uploads/2025/11/rainbetfav-300x300.webp","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:27.242Z","timestamp":1784715507242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/rainbetfav-300x300.webp HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nCookie: pll_language=fr; c2_popup_unique_name=GVgRBVsdH0oUAk8dRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 20 Nov 2025 19:09:35 GMT\r\netag: \"691f676f-eb8\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NfmiMDg6Dbtbtr1WEPR4TqWbF1V4hzWYRLcMNUXofZkU2x%2Bxw1zCdz6A0MUd5aUs9IoTTrHrfUwkYpYLfSqtvlEECgLobfMPDKFCYlkwHelM6%2B7ernEnV1Bhya2M2JSi%2FGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1f1b3903899b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3768,"size_decoded":4554,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ecd14b4037aab18af49c0c24bd43d97","sha1":"34174cb594165b8aa92fa4fd28114a00ef779f8e","sha256":"b47701b3befdef1d213d351741c2f7ef6a4c88d3a26854f041b760f46c94be29","sha512":"03b0c1ac961caedba30c69b8b85267e8de2568e13a02599b3ea0dbe1bc456fa137e0997359ff13fd3c154df378331d7fa11f985443b429fa5df0d677ece25ed8","ssdeep":"","tlshash":"38717eb517376779c6701eb4e06036e2ebd07517ca023566a0280eba03407c17d7f5bd","first_seen":"2025-12-08T04:02:28.687932Z","last_seen":"2026-07-22T10:52:12.458725Z","times_seen":13,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allrating.top/wp-content/uploads/2026/02/ChatGPT-Image-23-%D1%84%D0%B5%D0%B2%D1%80.-2026-%D0%B3.-12_19_42.png","fqdn":"allrating.top","domain":"allrating.top","tld":"top"},"ip":{"addr":"172.67.203.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.973Z","timestamp":1784715506973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allrating.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 23:21:08 GMT","end":"Mon, 07 Sep 2026 00:19:41 GMT"},"fingerprint":{"sha1":"B8:A7:2E:94:32:9E:88:87:CE:0F:AB:6E:EC:23:A4:CA:01:43:9C:2E","sha256":"B3:36:32:AB:6A:92:11:C1:EF:D4:A0:4B:AA:3F:2A:72:8E:D9:D9:46:1B:94:1A:E8:AE:B5:AC:FB:19:B3:26:C7"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/ChatGPT-Image-23-%D1%84%D0%B5%D0%B2%D1%80.-2026-%D0%B3.-12_19_42.png HTTP/1.1\r\nHost: allrating.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:27 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 23 Feb 2026 10:19:56 GMT\r\netag: \"699c29cc-67944\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nx-server: console-manage.host773\r\naccept-ranges: bytes\r\nage: 497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BTfDHCFUe7XBJOFYoEOOpG3VjuGS0gKqXp0VEK3qwydUDiUNfsayzarT7XSM1Qlx4q%2BmlWAn4b8At0OeuoWwh2f2ZhRYszwhHeSDvJ2OzP8E%2BwhOobdbJ80naWeb7dP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b38eae2d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 424260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":424260,"size_decoded":425030,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"192e6472dcee1df90b1d449cf356ca6c","sha1":"161fa302f4236f85aa53e4b5bcc50998caa1f068","sha256":"f13f96de1645b5632de6df80f8040c66f1fbd5a74d1798f1089885a017c5683c","sha512":"c5082a3945316fc872f081476b799e2309835d9802d3c3bffd6f446120d0917ae96bf547ab10756cb136b8174986355d6c8a5822c6a14f96ad3276c419fa24e0","ssdeep":"6144:rc4Dh+TWY7M8S0hhZu954dk0EBclYutKcJ5z6WRB/QiG2LPj/EoUQO0R/w:hhA+0hhI9Mk0E2Yul5z6u/QQLUo+","tlshash":"d594def5ffcfa6c6fb6faafc035e271459b066c20ec00511487b524a1aa5b170c3697a","first_seen":"2026-07-08T11:52:31.591007Z","last_seen":"2026-07-22T10:18:57.096721Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-content/themes/aviator/dist/styles/styles.min.css","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.928Z","timestamp":1784715506928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/styles/styles.min.css HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 09:16:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f38e8-90cf\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCLnLv5C38pGnlxgbAFAKdS7mTzJTfUTp1UY5zyaX6%2BcwSSF3EO5tawW%2BsZTfo3Zm8Mlth2bQXsvNlyWZkIvExTkd%2BvsqafTKI%2BboBWX2OWScrYHyU6dAQU6aKsU2BI9ekip\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e4ff8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37071,"size_decoded":5985,"mime_type":"text/css","magic":"ASCII text","md5":"b4ff3bfe226d51aa7d62c65d9dc21b68","sha1":"feb0060ac2a89a7e6cec259fe4fa2abc6554432a","sha256":"81adf3d9093244663cca03c502058b0131408962a15d9a035609f7908249f3fc","sha512":"9183893095c0cc667e25a3015080ecced33778f4cefc8d49b639875cc053b59945f2942b8606ba193e39bd68a30570d4d8ba0fbe852ad3ef95cb37c762b835fb","ssdeep":"192:/NqClYjXbiLZmBOll/qnewojZ815/t4ssaWZZ+ya76kCaZQF7hoCkiufoSfufTGG:TZs5eoQFlN3svBeb7","tlshash":"9ff222216ab738d9651ff018ef99260621585007f14addf8fedde2886fce29484b1b4f","first_seen":"2025-06-17T02:00:31.753232Z","last_seen":"2026-07-22T10:52:12.466248Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetslive.com/","date":"2026-07-22T10:18:26.942Z","timestamp":1784715506942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetslive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Jul 2026 08:50:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f32e0-13ba\"\r\nexpires: Fri, 21 Aug 2026 10:10:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 497\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwF4j9bnv0iBm8tHZgqP6HDvMf4Xt2bWzMFeA7WdIW%2Fdtm7ywq5H97MPfdCs5d8W7NTCVT8LN7UVTz1peo8YqgOTD6rkUCPfnXtGltFJmJNIqMqZ9oy3NwDweH8kdgOEJ90u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b38e5803b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5050,"size_decoded":2644,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-22T20:34:29.148963Z","times_seen":8304,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetslive.com/","fqdn":"rainbetslive.com","domain":"rainbetslive.com","tld":"com"},"ip":{"addr":"172.67.178.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:18:25.469Z","timestamp":1784715505469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetslive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 07:38:24 GMT","end":"Mon, 19 Oct 2026 08:36:50 GMT"},"fingerprint":{"sha1":"68:4F:A0:3F:D4:0D:4D:36:8E:0B:FC:68:C1:32:D0:EC:BF:B1:91:01","sha256":"F3:F8:C0:C2:32:23:F8:E3:5D:4F:B2:8E:08:B6:35:99:98:62:0F:C6:10:13:EB:E9:A7:FA:AE:48:02:3D:02:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:18:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbetslive.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetslive.com/wp-json/wp/v2/pages/18079\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetslive.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIyPFEePEF3TCpannbHOVIvzuuCqwoakOXGBkqKPq0kPF0lS304aJRxyvVaylfs%2Fa92YuKYRPK1EuwtWflBzqDDyEoh1WdeqruxmCbTbn7giiPeFKWPUFL5k9IA8JIxA0mDx\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f1b3855e84b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]}],"data":{"size":293798,"size_decoded":55344,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8069)","md5":"d026e0e45a9346ffc4af457aaceb1b09","sha1":"cbe3c75c48412bf34c8b978863770dc6837487e9","sha256":"075f9c23f23aabe96b501befd6c5ca1ea52a5ec631b8fe85378a6296b240a263","sha512":"c3a611d7ebce41114c8a0bea44f279a08779141613cc32238e2d40c0193e7162c65ffbbda4f9fca9f18246c3321ebe4377b1c59f95e60a3bc04528d0a708501b","ssdeep":"3072:Fcu2ybOj25ClpPcgzp81yv+DFjmKM+zn5MxD2GXDLIfuV5jQ:F52yE25A+gzpU9mxc","tlshash":"7e541c2b57e7209d2a77b27caf9e7209612d9003da05cdf4baded1484fc5e9148b2b4c","first_seen":"2026-07-22T10:18:57.100818Z","last_seen":"2026-07-22T10:18:57.100818Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1167,"timings":{"blocked":-1,"dns":9,"connect":14,"send":0,"wait":1048,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetslive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}