{"report_id":"95864104-3c31-465d-9122-f8ee26a97875","version":0,"status":"done","tags":[],"date":"2026-07-22T10:35:59Z","url":{"schema":"http","addr":"rainbetbonus.net","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"77.37.55.67","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"title":"Rainbet Bonus Australia | Crypto Online Casino \u0026 Sportsbook","dom":{"size":200778,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10901)","md5":"16cbb3d9faf6b5e97f80e7e1f520e0bb","sha1":"afe7ace92c56bc7f39ff7bfe683dadf44cd741f7","sha256":"02b5f82a7ea6bb3002f55b1741d3023ecf1b69a2923b575c28ba52324204fb85","sha512":"1a9a0ed0294791568f64af63be376baa0b024fbb52495e6c4e25e833be79f07ac438f61fdaa2eb439f7191702b3435e64563c9a4d866f53424cffe5bb1c2aca7","ssdeep":"3072:4/uDOumzO2e0nJBJWm8lZBa446tIBmuEPKVCHNZ:u8O3elZZ","tlshash":"8c1498217676196a317f32cfc0432b0c518fdbe7d6a5abf5b1b34021a1b4d943ae7298","dom_hash":"domhasha0328263a02729f67680c3cbdd24c4c4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetbonus.net","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"77.37.55.67","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:35:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetbonus.net","ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"domain_registered":"2025-08-29","domain_rank":0,"first_seen":"2026-07-22T10:32:56.114623Z","last_seen":"2026-07-22T10:32:56.114623Z","alert_count":178,"request_count":89,"received_data":1657582,"sent_data":47410,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Elementor:3.25.9","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":4,"received_data":175796,"sent_data":2280,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":123813,"sent_data":859,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-19T22:31:15.74052Z","alert_count":0,"request_count":1,"received_data":488882,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-07-23T09:54:56.803589Z","times_seen":229374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-07-23T09:54:56.839833Z","times_seen":260107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-23T10:11:22.350809Z","times_seen":331167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"864a6eb1d68d46fbf3e09ddb4d8ee48f","sha1":"7f56232a22c1a053126dce3d6ac14af545324628","sha256":"1bac8f9c5a5a87ca79722e02502c815db65261a97a2201fa4a77ea02031cb6f5","sha512":"78b798388ef30b9c32046b1ff5a938e25af34dc5a87132e5569e87ff3e092c9799db94a6fe29f0d940de97248a26f8b2f0664e012f3b331835c582fc1e118f54","ssdeep":"768:hRdPtPLRkRzm5vxc2E1/sLXGmfVgXQvLLKEAzBc5GiTSebsvHWkAUppCj5UkdXL8:hRdBLRkRzmVxc2E1mfVRyEAzBc5tTSem","tlshash":"1f1308123182d466458f48b7b4330229b3765dddb402b49df1bdace6a4b1e8373b2bb5","size":44112,"data":"","first_seen":"2024-11-20T17:19:36.11487Z","last_seen":"2026-07-22T10:36:03.458664Z","times_seen":664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.25.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dee3221fb4fc93cf63b7d0093f91fc2","sha1":"b136c17d61d4b345c9ef3d2e70a8843d6349c4b6","sha256":"252ff47bdded7295123a3a968787365824d86c1039686f0153ba50e8e5d9ecc8","sha512":"f7cc5c716a33803e51cdf17830f2117bc5dbd0a42eeaaf3634c4d1b781a2783d673172e447bbc6ab09e1f648c20c4970e155d583410dd2e7dd4bffc20e869766","ssdeep":"768:MTQZhIK1YE6A5yLseTY9d0dbdTdGdJdWdDdILdUd1dvd6dfdMdxdndTdV1FUfv+k:yQ4K1YE6A5yLsSY9mBtI/ERuWfRMBKHA","tlshash":"d313a55071aada6941cfc4abf423264fb7329c9cb413f0d67afc8d82a464e97a350771","size":42908,"data":"","first_seen":"2024-11-25T16:44:52.220113Z","last_seen":"2026-07-23T00:50:26.704839Z","times_seen":2029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"61d7a82c724e07da04f8d95c0b92d0c8","sha1":"1cebe7344109962889de8b79386e1ebbbda8e856","sha256":"197014a0f5a24e1e970a8af490a2932bc822d490d34e86d1dd23b930af2f564a","sha512":"94d3c8c8c6188abef5eebf8909c549afe768b65a28ca33f9109b7c0ba3d7b0731669c654499085f0faf6070467a91b4bc37e681087407dba354b92ba757dda1e","ssdeep":"","tlshash":"7421f0e370a39c9e49df248b35621d57f1574d69b889901ef8aa08db3472e893362638","size":1360,"data":"","first_seen":"2024-11-21T05:24:00.716331Z","last_seen":"2026-07-22T10:36:03.453189Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","size":1846,"data":"","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-07-23T04:58:45.41207Z","times_seen":13794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"e282bd74879d4f552856b92a335c5393","sha1":"cf9fa1ebb7065644f909f98d06a347fe10c86614","sha256":"211c17f57ea667b824f123b80612c6cdaabf0c1af32a2b933d45583dbafadee2","sha512":"456db3db6d7c361326af96025522479f49935956aacd1e911abaecef9d91f980fe16e748f8d559dfe56be9c5f023cb553154d383608b08b8f75817797040b7df","ssdeep":"1536:XeAjA679C+QUVYNQAzeLHeBHmjk2zRNx4cR8+teA888Df987FO0Q5RSS80tQukV4:LAy7bcCWxFg2Z","tlshash":"bb33eb463212b4f70bef40e7602b510af21319e4740fb5997ab8dcf2a471d9a237ab75","size":54824,"data":"","first_seen":"2024-11-20T17:19:36.337572Z","last_seen":"2026-07-22T10:36:03.458156Z","times_seen":664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8bef73e07649e24f695b84b5bf91533","sha1":"dbc7c0d614211f5b06051bed629cb73aee2d97d9","sha256":"9e22a89d7a3e3873bd3e1dc763074402016bc593ca39e9319ab7f20f1d83d786","sha512":"779f047c11a965030adeeba66895042f53e4bc0c5ed2b8ece31ec648f746a6daf398a0a20d283db82b678cc729bbb9d34c8eb10fda4f8e59bb88db4f0f91839d","ssdeep":"","tlshash":"0561ba9e3775348b32b604d16a2f0e07fb7248361a88d034cab9e7141cb1463d37ae4a","size":3385,"data":"","first_seen":"2026-07-22T10:33:01.839367Z","last_seen":"2026-07-22T10:36:03.529736Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"616f62dea5d7bf5fc5cf234af688230b","sha1":"7114abf8a7941f2ef5dc69316c59731c9cf5af4f","sha256":"2e4d3ad8a5d7a2e1b246c27dbcfa1adb39cb857ccf1b01f590c5ffaaeb6dca21","sha512":"5592d814ae17b0a4b89e2365299e3334fe300c50b98a530b3c4ac246c6fec203417c29a5f7c0bbf00ea01c94b4c95df97238b961da12edef45cff3986fc4999d","ssdeep":"","tlshash":"eac02b8c210e0db241f727008b3ffa00b00132049cd0ab310c1d23044d20e03d748814","size":149,"data":"","first_seen":"2026-07-22T10:33:01.840774Z","last_seen":"2026-07-22T10:36:03.530294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-07-23T10:41:52.459786Z","times_seen":32055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"e04be0dd0188a36e0e18beef4e9b071c","sha1":"ae7eca76de5c8abc3072d1babb2d0b77986d621b","sha256":"fd996e5ed43fba47fff738ab926d7c5ad2db1365df6bcf1b5f8ae1b2f2c50bda","sha512":"3440b5de53f513f6b80dece0bdd4dae64d4a3450c6b3c4b658a6093e4011f3712d1cb0a601ae502f2438cb7ff127de85dcb014e1cbecab553de02521f6da66d5","ssdeep":"","tlshash":"6aa0228a30832800c08ec2a08e23fc00082020cb038fca083ae0ae30eaa0880b08322f","size":66,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-07-23T08:51:30.035269Z","times_seen":7989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cc9648306d0886d2b1086dc6c05fb87","sha1":"597dbd79741483117cb4183072f22e1782b223db","sha256":"2a6c0691e6a166dd838c39e52f8b353943f17d337c4fba153eef863fe5384654","sha512":"8041c9b79cdda3cf793663111ac5f85f1943f3b0f6e6b21ae81dfdba3f788fe5f5d46868f23e0bd980b92504fcb921e93e1241c588b9272d9d1526789f0331d2","ssdeep":"","tlshash":"fd21ed1a1a231e6043aeb7d961c63e6f48d4033219c4755c129ee46580f7eecf0693eb","size":1294,"data":"","first_seen":"2026-07-22T10:33:01.843587Z","last_seen":"2026-07-22T10:36:03.531833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"2972cb7cfa3ac552374e2539008746b7","sha1":"f72f0314aa31cbaa7a8e5f27b6d8c2d5e6a9a140","sha256":"e28cfd0b7dbf0da4d3af98d03d9fecad3b8dfcda3e3ae7f437b6035046f17330","sha512":"aedae6d5bc0490d8612ccbde6190b88957c6abc40940f5f1b70e8292f7401c5fe905de25380594f24e65221c436a3716636657349ae3778df6277c4255aefb37","ssdeep":"","tlshash":"9a51c52479016abf83e397957d13bf06697c04261040bcf4f4fd89ad11f6a39221be8b","size":3007,"data":"","first_seen":"2026-07-22T10:33:01.844918Z","last_seen":"2026-07-22T10:36:03.532533Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.25.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"6774098f366e0f830d0b7dcfea331cc2","sha1":"dd50eba2df8c3ee9038b7f881ca71b4bd0bdf526","sha256":"fdc9a433f5b281b04f603b4c887f28ef632a7f5421a160e02f784c7c9bf63041","sha512":"fece347d7be44b1022182ae29fd34c60baadb7228f009ae5224e0eda8749b937dc17d28e1de7bfec99b9ffd458af386210d3cad4b29ed5698ad0729aa5d13bf2","ssdeep":"96:BQIOhUwrx7KboFXMEO/HazYA44NNhsqnCml2qGVfFVKORYQGK0jDjY8k2:2IKUrboFXGaz3NN2yGDMOmQqjpk2","tlshash":"73d157980a489d5f26e43ad8b0576b741b3dd0323c1ad981e651eddc18fcfd183e6932","size":6263,"data":"","first_seen":"2024-11-25T16:44:52.230549Z","last_seen":"2026-07-23T00:50:26.659549Z","times_seen":2030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.25.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"38f29085ef1da9151bbc0880728d8648","sha1":"b40b6a6e6a2e268412e7d5f5129b9ea4ca86758b","sha256":"5f75229618682b638f81b324b803e9c4752b8eba4a5846daa094c7626e2639d7","sha512":"d4aaeb9e53617042210a0b66eb8e54d7919134196a193518b71a3444db537b0a45c9402ed4706fad489e2fb8c6b9d691f4eda0e61f7f471e8f37a3ca64a5ced6","ssdeep":"768:hxw+EVxFm6cKikdHd7taQ9HuGJswyC/pMTAQYtDTFHJiwqnWWN7KOljuOzQYqEbU:YtVxFm61ikpCQ9HuGH5iwqWWN7KOljuB","tlshash":"c0b2e9063153a87a50cf8157e067420e7b3748997405b0ed7bbc6cdba5b8d8a73ea335","size":24914,"data":"","first_seen":"2024-11-25T16:44:52.237207Z","last_seen":"2026-07-23T00:50:26.679534Z","times_seen":2028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/wp-emoji-release.min.js?ver=6.8.6","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-07-23T09:32:03.915171Z","times_seen":211359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d6d772c51b0306858b92f7cd3c3c910","sha1":"2b447952b34107ffd6ba081f99d4879fccdf0a75","sha256":"061918d0a4f95724e73ed3469513a4cf4bc92a27e768eadf4fd0c48e307e0dcd","sha512":"3e4910f4fad88ed41df1952fa6dc76236f69f120ed28591c1327ac98428428606798efdbb0dd84c989875cd6cb4a5ece7590e9541e0ea75b18000e81f2fd29a1","ssdeep":"192:44QA3vFWXbcfJ8X5Wy50m8fY9hI7a2pKbveZ+K0IGiwZ2uSneq1m+ntpKRxN+P6E:JycSX150m8g9hlbjUbXk2u3qYjv+fwrE","tlshash":"143294c5f185395647ff7024322f230a2337589ce4462858bc69c5e16df8e8e12b6fba","size":11286,"data":"","first_seen":"2024-09-10T17:37:43Z","last_seen":"2026-07-23T06:45:31.110281Z","times_seen":10616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-23T11:25:05.597842Z","times_seen":986980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VC1PCJ1PZE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"17246ec115a748eb19402dd6d4eee1f9","sha1":"2a39e29355835963761ab103e5772404a572adda","sha256":"100064ae5adfb7588d3e898714458be8d84685f9f2b4a01369c4e7631527d174","sha512":"f8fc5fb338453afc4e39ef9416ad9d03b03fcc1e05b7f6ac1786c4af9e51e4f75aec908867ef22bea804acfd2a566eaf2eae9b22e90513bc99030d615bed4c29","ssdeep":"6144:PWUejy61/DTIDuJRlYYZqusTYcSn9zUZ3vHIGeL/hiq3F530:PtehDHcWDhikO","tlshash":"30a4f9cdb3d674225396f478903f018ba57b29e2b448c899f189cce42e7469a8177f7c","size":488278,"data":"","first_seen":"2026-07-22T10:33:01.834402Z","last_seen":"2026-07-22T10:36:03.490929Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/nested-accordion.c3b109b714293a16bd95.bundle.min.js","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"661de0f972752fb8c1958ccd52abc7da","sha1":"f089fc6de4c7b5073a339d85170788af6c4ac3ff","sha256":"360d9dc98816a240aa75cdb1c2d6ded69badd574a8ca552127bfacb82cb226b9","sha512":"3086c603c67ef2527575cebe8f7d42d65659afe13c79431aa3406125f82c95978f02ea453cb074304480869e75b9ca10558537fb00bde777b1e6956a4b12e4d3","ssdeep":"192:DsPHlrf6Sewvu3HCQo4LqZy4b4LMPBWP/Y/id8AxcRigwC6y/tqOePaTNyD0eAd+:Ds/lrySewmXC4WHqMPBWP/Y/id8AxWX6","tlshash":"e422a612701d61a149cfcbef76060e2e552110edf42d759c3478cadf76b8a82a7fa235","size":10023,"data":"","first_seen":"2024-12-06T17:51:15.551673Z","last_seen":"2026-07-22T10:36:03.516687Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"c826e0d322478cd013c3b663f6c05f16","sha1":"d0e4da7611ab3e118822047e989a98c8b1538688","sha256":"ea8d8d4cf474982920ff82096a0a766482772862c31a9fabf428bbadc471f8eb","sha512":"971c5f9d2d30821de953540133a607ce425d1b181bc262523954ab5a27587e3fa1198b200c2a19cc5e725db4a1802dac69dd46fd9a7e76854cfd5ad612289f50","ssdeep":"96:BwsNt0jqf9fzrPf8nDmDyTlCjNVobVDPkqflkxwvT8S2:2sNCjw9fnMyDySN4FPkyXgS2","tlshash":"12b151d41a90fd6731e135c8a41ba731752fc0333c1ab8c1fa22dced58e8ad187a9972","size":5252,"data":"","first_seen":"2024-11-20T17:19:36.105057Z","last_seen":"2026-07-22T10:36:03.517274Z","times_seen":663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-23T10:25:42.859238Z","times_seen":905221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://rainbetbonus.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.064Z","timestamp":1784716530064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 858\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Jul 2026 07:14:33 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"26c9-68b5591a-5a434d523a206ad8;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: dcb37de1de90a5e473b5385cf66b92d1-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9929,"size_decoded":1399,"mime_type":"text/css","magic":"ASCII text, with very long lines (9889)","md5":"3a5fc18c7816d792bb7dd2d1b05db656","sha1":"fc388ce69f320a0841382845410526a7ffd22f53","sha256":"64826224b3f3a20720d59c01a5fcb9c6f73b8527b4478d97432e61681eb224b7","sha512":"8268ac9375ce0dd333fcc3fd9bdc366b9f6064e0a0cee09993ec9d0bec7786f80fb46cbc2a26a8315b76289e39fb84510bdb127d7fe78d4810886b614cada03c","ssdeep":"96:BBW9CIKzCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:HW9CIKCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"3a22d3917d63814e16ff641b501b184ca1d9d4cde9bbecd5e8a66203c6fbec43b31928","first_seen":"2024-11-21T05:24:00.63136Z","last_seen":"2026-07-22T10:36:03.447728Z","times_seen":258,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.330Z","timestamp":1784716530330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 496\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 19:28:04 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:44:31 GMT\r\netag: \"736-68b54edf-a21a7f6d13c5887;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9315bc4142c30cd71e967271cbf3779e-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1846,"size_decoded":1051,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (1846), with no line terminators","md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-07-23T04:58:45.41207Z","times_seen":13794,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/bnb.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.397Z","timestamp":1784716530397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/bnb.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 374\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Jul 2026 04:08:41 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:42:30 GMT\r\netag: \"31c-68b56a86-a0c05aa9d2c7234f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3fcfcf0d20a167d031ce2b9ce711034d-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":919,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca464e976d9523270dbd9e3a35bdf3f9","sha1":"ea8ca2104f778450d67710cfda6c7196ef9dd4d4","sha256":"52cf7596b02fac7b84b1c9003ccd6f0251e79c30ef01e3d7fadf2dc65edcae40","sha512":"40674c61c41418476caf5d7ad584fc21fa679c4263c128409fbdd8d7caba5cc5b7e2872fa8631aacf1d0fb2bf1239746adedaa869c8c40c459970482331e3afd","ssdeep":"","tlshash":"b701fdc1ca60a3d74c1c2bcc820a383218b238f4ef5c9898c2881f29774b83576fc2c0","first_seen":"2026-07-22T10:33:01.794107Z","last_seen":"2026-07-22T10:36:03.44889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Chaos-Crew-II.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.770Z","timestamp":1784716530770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Chaos-Crew-II.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14650\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 17:33:22 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:12:05 GMT\r\netag: \"393a-68b7f855-893e288625a00f81;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7fb264d465a2a44c3e0707d3287bb9b4-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":14650,"size_decoded":15173,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d9eb9f3a7ce69511639ffb79a390f170","sha1":"12c1d3297e8cb3460c0ffb2242351bc2262a94e9","sha256":"3a82d769e827bf9849e94e802eeaf88a54f5c86670909896fb8e89a18b7e9cab","sha512":"ee171ff56e9fdd34a0fa87a0bcc5a9e0a02be8e48447710bf88fad0a8821c7784ab9e6ea3f4251749e3ff19296891deee6e82313d2743b762eee39464188d7f6","ssdeep":"384:bPM3JzkkvDAVvMu01/9taYZBI4Fj6rNYPu9B8E:bPM3JokrAVvQLsYtFmxAu9V","tlshash":"a562d14d2571d64cb9c87802680ac228971d77891eadc9927f5d6bc4d8e79ab7e0c3cc","first_seen":"2026-07-22T10:33:01.810233Z","last_seen":"2026-07-22T10:36:03.449541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/mines.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.781Z","timestamp":1784716530781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/mines.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8780\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 07:07:20 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:47:05 GMT\r\netag: \"224c-68b80089-8916508b26f0f5db;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3d0909d59ada7c563863e64c11f6b474-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":8780,"size_decoded":9302,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e194129f820af4eaf728bea18657402","sha1":"08cf24ea20efd0de296bfc3bb0858c9f6c16c710","sha256":"641eeadb29fe669694d2d96e6e706e350f8f07426ed81c3511e8594eae8f2d9a","sha512":"c196d1a286bce9fb9e3c2eebf6b7d2318b18b6e40c214f39a5583c6612bf2ba1dc3b8fc5857d57246bf883a580e637eef54093db3265af4b0add31705dd61c11","ssdeep":"192:JESYkZm3oaojaS67lEymMAJjehXf2ZJxxtk:ySqojupuMOjeo7xxtk","tlshash":"e602bfaf93c34321a782b658fed2d5df862d9b5814c0b2831cdb551044e2be2bb305c8","first_seen":"2026-07-17T10:04:37.468069Z","last_seen":"2026-07-22T10:36:03.450517Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Fortune-Spin.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.800Z","timestamp":1784716530800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Fortune-Spin.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11670\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 19:28:05 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:05:46 GMT\r\netag: \"2d96-68b804ea-204c8ceadda3a384;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1903691cbc9e01a1f7f2c6ba70bf3ad3-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":11670,"size_decoded":12193,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"febcc0fed89a2bd650d17628c49ae78a","sha1":"dfc08db1a92a5ff1b16a7e4cde3e57c440d8edf8","sha256":"9c8fc327175545b26c806d99a27b2e7d10fa33ac6da5ab17e939b648d7227467","sha512":"390d7bdbf500128ddde61ed6de9de5ecb2ba7bf45ad59fcb4b5f07ce7ec4e8dc1668e28b569837504c2ac69be524326623302137741a1f7e9903aedf5a058347","ssdeep":"192:qb8FqDTSJh0A21t3C8YviXCdobtI+yxO2mbAn4fRGIX2HysAV75a418C:qQF3cA21t3rpXCWbtOmo4pdj1L","tlshash":"3732bf6373f096f5c58999445b06ff4ab136a420f4c05f281ec5ce6b2f55e03e2de518","first_seen":"2026-07-22T10:33:01.700983Z","last_seen":"2026-07-22T10:36:03.451224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Guardians-of-Eire.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.802Z","timestamp":1784716530802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Guardians-of-Eire.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12408\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:05:46 GMT\r\netag: \"3078-68b804ea-e242b8eb6e475ae3;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d0fa2acb1bd296226d89e4b6a1b87f99-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":12408,"size_decoded":12931,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70e45b3736c69dd8f28b22bf761bc7c0","sha1":"783a140faf56cf4e565e8df74f2a16b9c16ad37c","sha256":"d84bfefc9a04cf63643833995a4ff71ed46ad08f6d3ee2cf08d9782f3b8aa07e","sha512":"d34d2973df2c672903791cb4af06faf80f8f38d8da4bffa28d8b5fc2271302346d1128705469fa24cd71b43454463041ad9c3dc649198bf59dc4d2cea56366e8","ssdeep":"384:+A2yix5DyiCdoEq6YjFdXI93QkKaSPlHTqrzEi6xlbO:+9y+ilqBFG93Qkn2uv6x","tlshash":"a542b032664a3484e4d4a2b05771d9c9e46d6f43684d807640c7ffe394acc9edb6fc0a","first_seen":"2026-07-22T10:33:01.796781Z","last_seen":"2026-07-22T10:36:03.451879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Coastal-Cash-Blast.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.806Z","timestamp":1784716530806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Coastal-Cash-Blast.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13620\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:05:44 GMT\r\netag: \"3534-68b804e8-135a71b0460fd82e;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e9844622791509038449feaaafdf5d83-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":13620,"size_decoded":14143,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b08a5bb4aa76fcc9e58597af657a7473","sha1":"159b0609dad0cce528925d7659a559c68cf353d9","sha256":"8938e2ce3a329cf370d04372a7bd112e7b4f33a09dbc57374171bb8191268b35","sha512":"5b8e3872779d9298e6884ae117b18bceb5808911afac04ec3c522b3e5814c23371de99fb1288da9bea7b3c1e40e845ec1b11098fc04aa9b1e8622fdfe7ad42ff","ssdeep":"384:AG/s1toT1JDIW5fo+FGtKgEtIOw/U+drhDsswX:AG/S+TvEoowsEtFws+Ysk","tlshash":"f152c05eea668025c258af0cbb1383ad28b4c86a11efc733de5184de05e5711153df7d","first_seen":"2026-07-22T10:33:01.789047Z","last_seen":"2026-07-22T10:36:03.452537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:31.113Z","timestamp":1784716531113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nCookie: _ga_VC1PCJ1PZE=GS2.1.s1784716530$o1$g0$t1784716530$j60$l0$h0; _ga=GA1.1.1743077217.1784716531\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 601\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"550-68b5591a-c50c2acc7d2ec3be;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1924\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 63d648b63776d15e0882915c4669d116-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1360,"size_decoded":1157,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1320)","md5":"61d7a82c724e07da04f8d95c0b92d0c8","sha1":"1cebe7344109962889de8b79386e1ebbbda8e856","sha256":"197014a0f5a24e1e970a8af490a2932bc822d490d34e86d1dd23b930af2f564a","sha512":"94d3c8c8c6188abef5eebf8909c549afe768b65a28ca33f9109b7c0ba3d7b0731669c654499085f0faf6070467a91b4bc37e681087407dba354b92ba757dda1e","ssdeep":"","tlshash":"7421f0e370a39c9e49df248b35621d57f1574d69b889901ef8aa08db3472e893362638","first_seen":"2024-11-21T05:24:00.716331Z","last_seen":"2026-07-22T10:36:03.453189Z","times_seen":576,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.057Z","timestamp":1784716530057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 1259\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:49 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:44:31 GMT\r\netag: \"1c0e-68b54edf-44c25115571ecc72;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 266bb84c93d0199a30637c4a48c9c0b8-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":7182,"size_decoded":1801,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-07-23T11:00:34.731073Z","times_seen":46531,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.069Z","timestamp":1784716530069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 493\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"1b9c-68b5591a-aafe009cc02a83db;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6b575704ecabdb0f85657a61cd59104f-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":7068,"size_decoded":1034,"mime_type":"text/css","magic":"ASCII text, with very long lines (7068), with no line terminators","md5":"028d6da407084ab417b141f6578f81c8","sha1":"f22bdd1cd1c9e1def2785e3253186d3468537c3f","sha256":"dbcfa5b88d853f525bf14ec9ef3e1227b62a8579cc9aa4796c72b655d6a98532","sha512":"6424aa72a5a594d399104bcfdfa5fa1141f77d002b656e308c96e9a138648894dd9e8980ac7fdfcea9780f44009cde162baa226e6e0a106e086287fc5a608f8c","ssdeep":"192:lozzzlztzJTIeIUI8IxiEzWEznI1zkamdz0zaz6zGsIXIBIhI6iJzLJzQIuz9LrC:KnhBYXI9YY2+JhS1qmwsfBOd","tlshash":"6ae1b5757f1b6a398d6b2c5b1397a05e768090e99182a382c04358039cf7fda7fb857c","first_seen":"2024-10-01T17:12:33Z","last_seen":"2026-07-22T10:36:03.454234Z","times_seen":2914,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/eth.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.389Z","timestamp":1784716530389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/eth.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 259\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:46:37 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:46:06 GMT\r\netag: \"23c-68b56b5e-4bf6b4280f687d18;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 08c93c11ba560bfacd7d0dd6b51b076a-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b6af34345ae8b714df55a5088283db4","sha1":"f613e16d1ebfd3c83caa92115e08e4d701794037","sha256":"93e5d33c68d8b4ddf83caa99eeffba0c29ef95749ecbd8ae82e67f1a7511aa47","sha512":"19fcc8009d3fb667f8b41305def44446f8d7ae4cd888b9109d2abb7878e07db43010d63c28f8cc0593d660807b2a3c7fd2a4698fe4f47673de7717037b519710","ssdeep":"","tlshash":"30f04ce859285598a42d1fecd67e7493312371fc8f3d08e9b1401952e942e971ca26c4","first_seen":"2026-07-22T10:33:01.761623Z","last_seen":"2026-07-22T10:36:03.45475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.653Z","timestamp":1784716530653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetbonus.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 16 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519472\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T10:27:11.143723Z","times_seen":240753,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":32,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/case-open.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.785Z","timestamp":1784716530785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/case-open.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11222\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 16:07:56 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:47:04 GMT\r\netag: \"2bd6-68b80088-d8d1611a24db7e1c;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cf0151e7e4e6c08a9f3f748384c96223-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":11222,"size_decoded":11745,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b30d8277c39708cd6fc75fa1dc446de","sha1":"a66a41c570c0237a26adcd3f46a23b725fbdf719","sha256":"2d1ad52e9d55dc320992db187a7b5457e17708fccccb87969a1093e2e76cbcd5","sha512":"7c4ebad65c465fa70d58e039a7fe5eb80b56542442ff024c07c4662cfbf36d7bff80b16014d79d9203b03a29d1117e871aad9096962648db75b28b76fce7e1e9","ssdeep":"192:VlQb7SCJSWqd3vze1h6rgTehSHs/7JWFM1Szyceh5S39Yw8BG7bO0mU8RMFgi:/Qb2FWqd3berpTeYM/7JOCWFeHStY96H","tlshash":"3032bf360f9098d195791a11ac4a780372d61d6475b30b9f2b1ab5f17a488aa9337336","first_seen":"2026-07-22T10:11:52.914304Z","last_seen":"2026-07-22T10:36:03.455856Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/valorant.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.791Z","timestamp":1784716530791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/valorant.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2948\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 17:33:22 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:14 GMT\r\netag: \"b84-68b80416-91ff31ae4ab8a803;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1d29459ea70008d42aec283e1a6d257e-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2948,"size_decoded":3469,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50eb336d81b173dcb66b15623ea00548","sha1":"3de40047f8ecbea5a5aa8b34206661d43415141b","sha256":"a76c3ef96ec068b026e96c57b62c73752e239900ec8f90a9fb3ac2f8b58ac7cd","sha512":"091166d282cd1e3465943868296847791b1cd62837ba9a43c9063898b38a0d49a5f897f2f22f4fdb5cdb39fda2a88fe0fa80d39c846ce702d54f09d972e7495d","ssdeep":"","tlshash":"09515dff0cc67011e82c1c2090b65b066335a87e908ef533a791c16df95666797fdea4","first_seen":"2026-06-14T08:39:52.558227Z","last_seen":"2026-07-22T10:36:03.456519Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Candyland-Jackpots.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.804Z","timestamp":1784716530804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Candyland-Jackpots.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11402\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:05:44 GMT\r\netag: \"2c8a-68b804e8-f898a58d6d8128fb;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 382036982c806dcafadc1ca6b4014477-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":11402,"size_decoded":11925,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cc71f4d224afcffb71d365862cf88d01","sha1":"2743fb088a61334b743294f8d9e3f78bef3ea7f9","sha256":"2ebf505452a6fd9272aa150fb62389d69a44870525e93bccdb84c7ba2583d498","sha512":"a4294f670e8cc60328055c879b62c3df720430fc8ebb1ebae7ca90c33e3523f0e53fade4df99c70f07d69cc88ada57305939af948a99076c8442a6c8240b31de","ssdeep":"192:aZsnVIhCyCqXnjVmwOm8TtKl6RfpWWc457Dh29C2nbKE9ApBZbA/X:QCKhCkXnxBORwleNc679yC42E9AzZa","tlshash":"ec32b0c69b850ee8d57e5c101e85d69d193e24621c6796dcddf0a9d38bfc3b61040a49","first_seen":"2026-07-22T10:33:01.821115Z","last_seen":"2026-07-22T10:36:03.457034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.8.6","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.324Z","timestamp":1784716530324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.8.6 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 10:35:30 GMT\r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123129,"size_decoded":3877,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"725d4e1ac8ab3a2acc7596fdb86c0903","sha1":"29361c3f4df871d14f7aec27e4ca9906dddfaf06","sha256":"183acc0f61d3a0c381a60ad8386229e4433a5d0f189b54920c759dcba5457965","sha512":"11485196733a8fac7d79606762ab6b869a0cb985139b751b93a58ef77396847d63c34c11556d250df6385a148afb4616dccd38c46cdd75b68ee69467d93a773e","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULh:GZQDSVUvWtALyl83uRt","tlshash":"d9c31d91041b5440ab834ce223cebf75fe5f92507141d0b9abfc9babaddbc62126835c","first_seen":"2026-02-19T23:35:04.827171Z","last_seen":"2026-07-23T10:41:52.456946Z","times_seen":3305,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.336Z","timestamp":1784716530336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 15286\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"d628-68b5591a-f68e00d7131256c3;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: dbbd66f047d2e9595264c911c1663bb8-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":54824,"size_decoded":15845,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54783)","md5":"e282bd74879d4f552856b92a335c5393","sha1":"cf9fa1ebb7065644f909f98d06a347fe10c86614","sha256":"211c17f57ea667b824f123b80612c6cdaabf0c1af32a2b933d45583dbafadee2","sha512":"456db3db6d7c361326af96025522479f49935956aacd1e911abaecef9d91f980fe16e748f8d559dfe56be9c5f023cb553154d383608b08b8f75817797040b7df","ssdeep":"1536:XeAjA679C+QUVYNQAzeLHeBHmjk2zRNx4cR8+teA888Df987FO0Q5RSS80tQukV4:LAy7bcCWxFg2Z","tlshash":"bb33eb463212b4f70bef40e7602b510af21319e4740fb5997ab8dcf2a471d9a237ab75","first_seen":"2024-11-20T17:19:36.337572Z","last_seen":"2026-07-22T10:36:03.458156Z","times_seen":664,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.341Z","timestamp":1784716530341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 12863\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:50 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"ac50-68b5591a-70a123f65edbf6eb;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e2d735a3d719d2a8d47267a95a343c0f-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":44112,"size_decoded":13422,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (44072)","md5":"864a6eb1d68d46fbf3e09ddb4d8ee48f","sha1":"7f56232a22c1a053126dce3d6ac14af545324628","sha256":"1bac8f9c5a5a87ca79722e02502c815db65261a97a2201fa4a77ea02031cb6f5","sha512":"78b798388ef30b9c32046b1ff5a938e25af34dc5a87132e5569e87ff3e092c9799db94a6fe29f0d940de97248a26f8b2f0664e012f3b331835c582fc1e118f54","ssdeep":"768:hRdPtPLRkRzm5vxc2E1/sLXGmfVgXQvLLKEAzBc5GiTSebsvHWkAUppCj5UkdXL8:hRdBLRkRzmVxc2E1mfVRyEAzBc5tTSem","tlshash":"1f1308123182d466458f48b7b4330229b3765dddb402b49df1bdace6a4b1e8373b2bb5","first_seen":"2024-11-20T17:19:36.11487Z","last_seen":"2026-07-22T10:36:03.458664Z","times_seen":664,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Spinxiety.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.807Z","timestamp":1784716530807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Spinxiety.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12382\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:06:54 GMT\r\netag: \"305e-68b8052e-bc1282feab5ea9b2;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e5e2bee55870fac3b33a65d2e7b2c623-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":12382,"size_decoded":12905,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5baa0b35c9644b3f3cab8ecb42fdd912","sha1":"22821c4d6ad96842bc98850dda20764a72b0dd8e","sha256":"704e952a4491dabcb143bb19fdd4272ebd8cecd1280495a7b1a647bcac27964f","sha512":"7aba74dd34e61277eb1e4664803774f2680623b88f87731f71c42c813ef231b067556f495912ac9b1756501ae0bcf307bfcb4515852c787bd132f66be4cb99ba","ssdeep":"192:oZVmW5nA8HLAmvOhO8YAEzL2TXYdKRVnxbtXCOyLdwfw/EVymHKX2HGiCf:iIyv9WD7JeKLxsbdwfoqymqoGi4","tlshash":"ab42bf4e2b2b3efe8d82f27ff613343b65493306212a578b96874603a4761f938f1554","first_seen":"2026-07-22T10:33:01.791529Z","last_seen":"2026-07-22T10:36:03.459186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Rainbet-Favicon-150x150.jpg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.959Z","timestamp":1784716530959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Rainbet-Favicon-150x150.jpg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nCookie: _ga_VC1PCJ1PZE=GS2.1.s1784716530$o1$g0$t1784716530$j60$l0$h0; _ga=GA1.1.1743077217.1784716531\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1876\r\ncache-control: public, max-age=604800\r\nage: 1922\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 82d262a6e874ad77a33a576fd6955a38-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1876,"size_decoded":2181,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f52d7e480e261a6f106758ca8a1f2d74","sha1":"03dc7d0bd42b6676716f57221d3e841fc96a6aaa","sha256":"66c412c0d75304bd624e1133a3a98330142c1472ed1222177f48c4bf793df101","sha512":"b0d040e5debfe0eabdb3d584873bfb636373c413e43f3b8ea61e8fefa1a1fea83f2871b8dd855b0057ba482c7cfa4ac3c90d9e806c3037c8cd20407e61b14847","ssdeep":"","tlshash":"40312d07615d5b02e9324db816bf43016158b84af6295304b037a9db5ca7c5c97d6bd1","first_seen":"2026-07-22T10:33:01.799081Z","last_seen":"2026-07-22T10:36:03.459792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:31.001Z","timestamp":1784716531001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nCookie: _ga_VC1PCJ1PZE=GS2.1.s1784716530$o1$g0$t1784716530$j60$l0$h0; _ga=GA1.1.1743077217.1784716531\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3475\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"2c16-68b5591a-daeeb1e528b504a6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1924\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3f3efa3a31913e026fe9ee59014d85ba-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":11286,"size_decoded":4033,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11072)","md5":"2d6d772c51b0306858b92f7cd3c3c910","sha1":"2b447952b34107ffd6ba081f99d4879fccdf0a75","sha256":"061918d0a4f95724e73ed3469513a4cf4bc92a27e768eadf4fd0c48e307e0dcd","sha512":"3e4910f4fad88ed41df1952fa6dc76236f69f120ed28591c1327ac98428428606798efdbb0dd84c989875cd6cb4a5ece7590e9541e0ea75b18000e81f2fd29a1","ssdeep":"192:44QA3vFWXbcfJ8X5Wy50m8fY9hI7a2pKbveZ+K0IGiwZ2uSneq1m+ntpKRxN+P6E:JycSX150m8g9hlbjUbXk2u3qYjv+fwrE","tlshash":"143294c5f185395647ff7024322f230a2337589ce4462858bc69c5e16df8e8e12b6fba","first_seen":"2024-09-10T17:37:43Z","last_seen":"2026-07-23T06:45:31.110281Z","times_seen":10616,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/link.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.395Z","timestamp":1784716530395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/link.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 381\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:21 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:51:30 GMT\r\netag: \"2dd-68b56ca2-ce553be506fcff8;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6a81d0a4af2c92bef922ddb3ecce6d9b-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":733,"size_decoded":925,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b0888711d9713b42bd27152491bfc3a","sha1":"bf418f43734b12a0dc13d2563b8d41ab13d6311c","sha256":"4b5dc518e9edd2e7067e471e90f6374782d005ef3fed36014c3c9641e64e9507","sha512":"f3a2968350cbf6fec81c4c934475592a9fd385558f37b8f1138e151b86b454a957721fafb3fefa507d9db6e3087bb8b549334c6a09c477fe68802310351903a2","ssdeep":"","tlshash":"fb01cbe021f8b3ae48599b0e522732607511b4fabf1c444422d11e7c3c1b4ee7e6c9da","first_seen":"2026-07-22T10:33:01.82409Z","last_seen":"2026-07-22T10:36:03.460969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.651Z","timestamp":1784716530651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetbonus.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 16 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519472\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T10:27:11.143723Z","times_seen":240753,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":26,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/ice-hockey.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.793Z","timestamp":1784716530793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/ice-hockey.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4504\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:13 GMT\r\netag: \"1198-68b80415-f64cee35d2be3c8;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 810d06cbeebb6a65f394f15400f67979-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4504,"size_decoded":5025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08ecd819a15b12e8d4a286ab0f466e2c","sha1":"a2d34e66c8d31e7a1a7c86cf35e50b1d093eca6e","sha256":"aeac2bea7b14449c0118874cf9f030f39eb45ea2ddb2deafb4d030a80d056bf0","sha512":"53331e7f693673e7248ff59ab9c2daff4d44af5b1c0fd690043b1aac39f27cbe77a5f0fa4cb05ede440795ce1cfb4eb34f3672177da5b87d40b75fafb6bcbbcc","ssdeep":"96:jQ3B4YdR9Cs7xdgHEPWqm3gJCsRP4tVH45LT0HRZBIQbTXZu:KB7us7xd0Em3ABRQttkTvQfZu","tlshash":"7e915b5a552eb6c06ae1ef0c2f5d0dc79809dca15c813a07c3c1694af6de27512ea8e3","first_seen":"2026-06-14T08:39:52.434383Z","last_seen":"2026-07-22T10:36:03.46154Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.25.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.331Z","timestamp":1784716530331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.25.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2632\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Jul 2026 07:14:36 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:13:09 GMT\r\netag: \"1877-68b54785-56f57428eb8012ba;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cf79f59b9bc6d8f639c0577ceb6c8023-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":6263,"size_decoded":3190,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6219)","md5":"6774098f366e0f830d0b7dcfea331cc2","sha1":"dd50eba2df8c3ee9038b7f881ca71b4bd0bdf526","sha256":"fdc9a433f5b281b04f603b4c887f28ef632a7f5421a160e02f784c7c9bf63041","sha512":"fece347d7be44b1022182ae29fd34c60baadb7228f009ae5224e0eda8749b937dc17d28e1de7bfec99b9ffd458af386210d3cad4b29ed5698ad0729aa5d13bf2","ssdeep":"96:BQIOhUwrx7KboFXMEO/HazYA44NNhsqnCml2qGVfFVKORYQGK0jDjY8k2:2IKUrboFXGaz3NN2yGDMOmQqjpk2","tlshash":"73d157980a489d5f26e43ad8b0576b741b3dd0323c1ad981e651eddc18fcfd183e6932","first_seen":"2024-11-25T16:44:52.230549Z","last_seen":"2026-07-23T00:50:26.659549Z","times_seen":2030,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.049Z","timestamp":1784716530049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 1575\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Jul 2026 21:14:36 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:44:31 GMT\r\netag: \"1550-68b54edf-240beb8bfc63c27a;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 227013b638048bbab43400c1902bf17f-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":5456,"size_decoded":2117,"mime_type":"text/css","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-07-23T11:12:26.436203Z","times_seen":42482,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/elementor/css/post-111.css?ver=1776751625","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.081Z","timestamp":1784716530081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-111.css?ver=1776751625 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 4681\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Tue, 21 Apr 2026 06:07:05 GMT\r\netag: \"1266f-69e71409-6fb6606413e925a7;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cf935811365f4072c5cdad7099c83bd8-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":75375,"size_decoded":5224,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"58700aefa5889533e3ee4b9e3a8a4c6d","sha1":"695d3442e9471e796f7ca2b169a7ecf52c1cb1f9","sha256":"002baa6fee8d396bce1bdc252555208d0fce7ea69926dc25cf0266d26286d94c","sha512":"2d9f64711dd9b7d4cc22a932743dbcf3fff298d2a2e0ed0b336973a75e8895861e4ba0e998321b4b21caaabf904ae9371dfe57a30478252585ce5e0fba4e8990","ssdeep":"768:pLssZsYOpb8gNZu9nPOBrtoxRDIG7oVz1h1M11eCcQtKa9OCsWeSSZX2A+jfvECT:isZsogX6xRDIG7oVz1h1M11JYMh1M1Ze","tlshash":"067304603d03922cb17f552f1563e69d25248ccde67e76caf862212bf0bad9633b0a54","first_seen":"2026-07-22T10:33:01.75507Z","last_seen":"2026-07-22T10:36:03.463015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/elementor/css/post-383.css?ver=1776745019","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.322Z","timestamp":1784716530322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-383.css?ver=1776745019 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 393\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Jul 2026 14:36:01 GMT\r\nlast-modified: Tue, 21 Apr 2026 04:16:59 GMT\r\netag: \"576-69e6fa3b-69c8167513fde887;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 526d2b9a33bed4ebf4f017bdfdd9a6b0-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1398,"size_decoded":933,"mime_type":"text/css","magic":"ASCII text, with very long lines (1398), with no line terminators","md5":"7bef6daa09cbc9137851a2c9043b5adf","sha1":"c32c8d849683e0574be6c770c517d7e951d24ae0","sha256":"a01b38869a6665b8fac9bdc1be2bb3cbbe0bcdbd8fe333cfc80d8a42b4519612","sha512":"651818fe9604dea455243c45506215a5ee7fd172bd53d79cac72037337d12edad132b23da7f51d1e599e2cafec696b94888ac6a05bf10b2bd507a41faa23a44a","ssdeep":"","tlshash":"2a217c443c279636f07f101fa54bb1dc101dc8c4f31e2ae5d8962227a8f6d9473a1958","first_seen":"2026-07-22T10:33:01.76905Z","last_seen":"2026-07-22T10:36:03.463776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.334Z","timestamp":1784716530334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 29531\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Fri, 29 Aug 2025 12:13:33 GMT\r\netag: \"15601-68b1996d-6408c096915f6d67;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: aa266daf2795ebeb1287debec11ae4c0-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":30091,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-23T11:25:05.597842Z","times_seen":986980,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Aviamasters.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.772Z","timestamp":1784716530772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Aviamasters.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9896\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 17:33:22 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:12:03 GMT\r\netag: \"26a8-68b7f853-644407456ce49bc2;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 799a008915717f24cf2bfbc43b8e8300-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9896,"size_decoded":10418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2f09e83fe723159543d450c22216353","sha1":"9a76107bf244a8dbd442870b61b6c88724d35ac2","sha256":"9fb582ce0f2c991e42371a5aa7a307afdd34591503a01dffbb0b28aac5fe6476","sha512":"4250b85180c2b882631a3bdd0e3ec7b9a78d2054817718cd63a5963a737618ae709f99c9b53b0d936db5f4e829af61daab8ae8b2e9db3026b0c53fe2d6b386a3","ssdeep":"192:bL+R3q5aRzuMG/z2Vg+sRnr7LpMJbcY3DYxtghmQS1uSjOnAH:vJwJhOSG+sRn/ahnrgN1DkI","tlshash":"fd12c08a0e739745e4009b32af8b19063da7458cfc2c7ac15dc26d4f1b7bc8a5f8e984","first_seen":"2025-12-01T11:28:00.237419Z","last_seen":"2026-07-22T10:36:03.46996Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.076Z","timestamp":1784716530076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 881\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"2814-68b5591a-a832a76f519ab4a0;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7297b8bb943b8bbcba8c697423153274-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":10260,"size_decoded":1422,"mime_type":"text/css","magic":"ASCII text, with very long lines (10260), with no line terminators","md5":"f9a4d42bf66491dd2e49cd5a425bfc4e","sha1":"3cfe595ab53edf4ad7ba7b66be50442521f78dd6","sha256":"9bc52b3c4e9973d64baa482f332ed895f80d0cd2be37e6a49bf1a2e831eb5ac9","sha512":"92781fb595e1e551dc4425744692b61a1624ccfdd1c668842cddba252303a9d97f713b4ccaa828e196add56d10d912871b43aef3228a574eef4140e96858a0ac","ssdeep":"96:Vf0HhGhmdGtlDNURY5hs64Wcg3LNB7uo03z5VN:VAhGhmdG/NUkhs64Wcg3LNB7uo03z5VN","tlshash":"662252823f831123a36f4e5b282357bca7284dc18947b9aad2919c86d2f9cf5375fc50","first_seen":"2024-09-06T09:58:58Z","last_seen":"2026-07-23T10:41:52.445873Z","times_seen":12579,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2026/03/LEON-Bet-Latest-Promo-z.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.398Z","timestamp":1784716530398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/LEON-Bet-Latest-Promo-z.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68960\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:26 GMT\r\nlast-modified: Wed, 18 Mar 2026 03:14:08 GMT\r\netag: \"10d60-69ba1880-f94debb44437538e;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5655b4211e552e14bbef25c508cb830c-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":68960,"size_decoded":69484,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3031cdf59321a11d4aaa1114d9c751b6","sha1":"14129399416070354d7c78f2688db0c46737874e","sha256":"29834e97d5d47928b833048176a87b0a6a0775f3d3de54170e5b28d45b336e98","sha512":"19e1b30dc3f98b617667bdd9377f9bf0892203314ed8941a2a3219306cbb8abf50f9395a6664606d71e7fced7613004eaa0e548167744d50dafa8eba150ab5de","ssdeep":"1536:4rd2T/kTHdvaWeViaVavh8dZx82BFXI3jbGfi4T9UXVxjDhT:v/kTHdvbeV7avh8j5FXI394T9UXVZDB","tlshash":"0b63022bbf7256e9cbc2683ed1c3959a45334707f9e533f029ad9c4ef95d460942a8c0","first_seen":"2026-07-22T10:33:01.837729Z","last_seen":"2026-07-22T10:36:03.47117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/soccer.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.786Z","timestamp":1784716530786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/soccer.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4010\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:15 GMT\r\netag: \"faa-68b80417-c57d78ab8fd5aa91;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: eab1e9e4ff32449189e391694cee3d4f-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4010,"size_decoded":4531,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"741cfe68aa0d61a68ccbde853a105cb6","sha1":"a31130d9a3e3697688543143747cfbbb404d879d","sha256":"de18feb939734bfcf3ec3a02d29493534d71f9dc3094287cb17ac004db47b117","sha512":"456d1e983a4dcac74b1d3684fafccc4421bb4aa4552fdadaab2e48f175d39846288d174687e11f086b876cc0324b4de5e04592896ef722e5ecc654734d9e0754","ssdeep":"","tlshash":"a2818e0348f748b1e67e95a84eb5ea8f10888b728204c7ca4919109adee99f4c2d2357","first_seen":"2026-06-14T08:39:52.553339Z","last_seen":"2026-07-22T10:36:03.471814Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/american-football.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.787Z","timestamp":1784716530787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/american-football.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4188\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:15 GMT\r\netag: \"105c-68b80417-78a12f70ac1a6776;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: eefa3527afddf2c868dffd6c705a24d3-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4188,"size_decoded":4710,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46ae386840a01396dc05f3f54456aece","sha1":"3f58edd64ae9501ad1ea7df6d7b76fb58953b969","sha256":"69a500a23b28f83932d16d2ee2e87f37784c68ff59cbeffebe32e633d12a40ae","sha512":"d3c4042d8dd3317f7a9d1d836244862fcbe1ae6ffdc8b2db506321e39dae459f0a5e145cf550a902ef7fbf86d823203e8bec75aee407a8240fca077bb49d9cce","ssdeep":"96:tJNMTAeuf3CQe8EkuYlvILUBoDnGkYDMBj+YyCX+d4m:tk0te8EIAg2Dh/jQCuim","tlshash":"87817dd6a5a9423adb95831e0108d371b5dac5c8b94fceb9c1a3fc48f3bb80c5b58145","first_seen":"2026-06-14T08:39:52.568569Z","last_seen":"2026-07-22T10:36:03.472383Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.335Z","timestamp":1784716530335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4671\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Jul 2026 21:14:29 GMT\r\nlast-modified: Fri, 29 Aug 2025 12:13:33 GMT\r\netag: \"3509-68b1996d-e883dc13a7adc554;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: edab74850ff7168dcb151cd8d2c0b538-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13577,"size_decoded":5229,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-23T10:25:42.859238Z","times_seen":905221,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/banner-casino-copy-1.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.385Z","timestamp":1784716530385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/banner-casino-copy-1.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 106012\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:50 GMT\r\nlast-modified: Wed, 03 Sep 2025 07:47:28 GMT\r\netag: \"19e1c-68b7f290-4480048ebe0826f7;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5008d44bed22c3074da84376a46b9da7-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":106012,"size_decoded":106537,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44b9bb2ba90cb879893cbcd449e477ac","sha1":"9506cdf5a7e527fea16f5ab26bb6a86d937c7aaa","sha256":"782e7ff55fe16bbeda5650995b785158c590ff3415e46a9f26f3b69b0d3dc08b","sha512":"35b1bc1547ce102a148c1ea707935865001e9139bc9ed701f0b7b429e9c3d5662ccf99268a817774056860d7ec8311592d4406aa26ac73b2d48f1ca21a8bd5a9","ssdeep":"3072:ONM1qqW0w07hqx7R+6YZrGmY0dQjT+eyyfGvr3iRo:8Os07hQgkJTnyyOvTiS","tlshash":"4fa3121d0e611a4e7de6330dbf68143f8d5db8d0812818709789586ecae9d83afcf1ca","first_seen":"2026-07-22T10:33:01.758924Z","last_seen":"2026-07-22T10:36:03.473712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/btc.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.389Z","timestamp":1784716530389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/btc.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 553\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 17:22:00 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:44:23 GMT\r\netag: \"3ca-68b56af7-352d4fb7f6d89404;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 401254f0f200d6290eca9453bb2b38b5-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":970,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6f82f9c7ac1914190519caf8f65ff75","sha1":"58965c4ea2ad220f1d60418875c789d69c1e7e32","sha256":"4c3929eef29b78374fa7bae0b774b1b373843d8deb90336529963e624cdb9912","sha512":"1a0d7c14c0cced5063c86cd4f74a915a9a70227073c7d93dab5cb960b36ef4222c5f05bc8a6dd5664a862110d8748ca82568a0abe901213c0af8ae9326fee041","ssdeep":"","tlshash":"571198dd1274954c699f8d1cfb2bfc163012f1bcc52e5ce4aaaf7c5470c2ae13110554","first_seen":"2026-07-22T10:33:01.725304Z","last_seen":"2026-07-22T10:36:03.474718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.646Z","timestamp":1784716530646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetbonus.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 16 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519472\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T10:27:11.143723Z","times_seen":240753,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/wp-emoji-release.min.js?ver=6.8.6","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.763Z","timestamp":1784716530763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.6 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4717\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 02:28:45 GMT\r\nlast-modified: Fri, 29 Aug 2025 12:13:33 GMT\r\netag: \"4b33-68b1996d-a836b9bdb91ad454;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 29205\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ac220e8df3795cc79135f753c1e9a167-fra-edge4\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.168\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":5304,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-07-23T09:32:03.915171Z","times_seen":211359,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Recent-Win.png","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.766Z","timestamp":1784716530766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Recent-Win.png HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53186\r\ncache-control: public, max-age=604800\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 27c93113020a065e318751c991bdd07c-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":53186,"size_decoded":53492,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e303852605c078264ed41329943c8a15","sha1":"44ec11b09b1b794917a66bc5a4cbde1259969d7c","sha256":"ee6b80a76b0ac518cc95536837781e514e1c75d2d24fc4acfea8fd7f3a9657b4","sha512":"8b7f360b8925bd8e70e62809dbcedc0dfec20b215090c2cd89a7332f1e9ea06d17eed5a6ff212f3adb0b0922da156e97c0c99446cb7080979b8a2ddb41b68d44","ssdeep":"1536:C1VKi4Zo2HNHXJZzwhnp2+zoeDnLdXniGzo:C1VN4Zzl5ZkVp2+1DLd3vo","tlshash":"283302ec858a183fcc22677833434392adb8bad6852addcd5eb8daf43ddf5839251111","first_seen":"2026-07-22T10:33:01.695625Z","last_seen":"2026-07-22T10:36:03.476643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Grimms-Hansel-and-Gretel.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.797Z","timestamp":1784716530797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Grimms-Hansel-and-Gretel.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14050\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 14:00:40 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:05:47 GMT\r\netag: \"36e2-68b804eb-a64f703edc4cf4b7;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ebfbbd310c4f06263912f0bc911e7078-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":14050,"size_decoded":14573,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f3d948e6edf286588165e49320d1ac70","sha1":"6741dbf22eee51e160b4bcd81a5aa7afd9fd6679","sha256":"d72a972711a85a49b6c5bf4097b0ebbb9bfb55af762bda7071cd266d86d27219","sha512":"4217f8721958a02b75a1b03c8b344804a557201bbb98a5db73a6a24026298c8e5a72744cc9b3204e6f8d6b190975317c720f50fdb0d50d5a04d880f519478b94","ssdeep":"384:XF+aAR19+IQjjs4/pj1oDxxb2TdXPvOpGjUWp5+Pc:ejxQjjsUJ1oDxxexOkjUWy","tlshash":"3a52b03b0b2d2958242565652d33f0227af4a52ca71bca1a75f3fdfa85e8f0410e5ad8","first_seen":"2026-07-22T10:33:01.732156Z","last_seen":"2026-07-22T10:36:03.477681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/interacLogo.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.388Z","timestamp":1784716530388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/interacLogo.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:45:02 GMT\r\netag: \"624-68b56b1e-e30cef56b6e84045;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 319dfc71616a2596c9e100982617144f-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1572,"size_decoded":2093,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fccb9ed3d705e983712f5094f0f5acae","sha1":"21178d3a021f2ee91059d5d31c3062041a45d612","sha256":"f9c584f0adbee2b9b404d09e530eaccd1374bf7fcabf35e61a3afdc2414017c5","sha512":"10861439e657a5908996bf0905f67fff9aab62c983647618a53238f18dc8e9d86b4c8fc532c9dbc12067629c2f8399e04ffe6d41bad4232cdff0ba8cf5e787a3","ssdeep":"","tlshash":"e431e79022f6f605acc6783c4bc98656a946ff950de7d8c18117eeb0116723031a4983","first_seen":"2026-07-22T10:33:01.819172Z","last_seen":"2026-07-22T10:36:03.47921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/sol.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.393Z","timestamp":1784716530393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/sol.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 730\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:43:07 GMT\r\netag: \"6cd-68b56aab-fe20e607529bc3e8;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 88e8fb52553833269001e81ff14897a4-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1741,"size_decoded":1275,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76d48be36edada1edd3c0729c07d31c4","sha1":"5cad30ebccf6f7e48011e078edca1480283bc051","sha256":"20a00a214f669b4e1b0ad30bd27d60ea166ed555058b059ed20f448d4ad4e1c1","sha512":"48bb065114a8d6f668824ce0f0fa2cf125bf447071c1e66966b2ca786628c3f6ff46bc3906e0e044889507370bfed58f67f1be825ed16c21f70d51b9b3c8c1b4","ssdeep":"","tlshash":"8f3198f6c1d5a7e7d31cc7a89c65ad75229120be9ff08098a3c16e94e86a1dd1c4c442","first_seen":"2026-07-22T10:33:01.727465Z","last_seen":"2026-07-22T10:36:03.480127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/basketball.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.789Z","timestamp":1784716530789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/basketball.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5082\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:52 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:15 GMT\r\netag: \"13da-68b80417-249dfb2394192a3a;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 05447d9e11a7b2d679f6f2fe022e40f6-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":5082,"size_decoded":5604,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"029c037ea92daff730a114afd84881cf","sha1":"f2fbcf9010757f99a59a0e2b6401a79c779acbf2","sha256":"008c0d5331682e810894cfb824376243a068a57bc0001b3913e07cb4f8c30a7e","sha512":"0c17381d3d1fc57fcf008f5eb5739db3474af1541fafe6c418f586259528ffd2ef27ddea6a6aa13d6ad989014aac9c7a441d3dc21d0bbf5a471a63e38cd9dd4e","ssdeep":"96:xPuwbUvjWNM7wiXA3lcQ+v4JA2fOjM8LMpFZddBKvPIRH8958e2za:xQWMMiSlcQ3ARjMqsoIRHo8eQa","tlshash":"50a18c4bd270859319d9af42ab43736ad9374cce71e0548b3663af31ca4a52204cb9fe","first_seen":"2026-06-14T08:39:52.377879Z","last_seen":"2026-07-22T10:36:03.482829Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Bill-Coin-Mummy-Mischief.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.799Z","timestamp":1784716530799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Bill-Coin-Mummy-Mischief.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10860\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:05:46 GMT\r\netag: \"2a6c-68b804ea-eed1033cb016aabd;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1f171f5e6bcf5a9baee2af5e757544ed-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10860,"size_decoded":11383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6ab18d9b54de3cbcba9e145d5aea1067","sha1":"1b90844ae8b013c30841ff3297ebe05a395f57b4","sha256":"7e44e532ce1ede3452f1a76afc2482bcfe34322f6aebf2222cb76c78dab028ee","sha512":"666782bd2e7fa479a6effc6f74bbf04a3f7aba8d3b997961791353934c7cba7cc16c5c8cd5122deee54d3c2cb20b9fbcc392f698a453a95e7f614c2fd64d3e8c","ssdeep":"192:d5Fp5LE+MbZ5A0MF4oFImMiQIC5inibRT0Ytl2XTP9ZHN7r3ALk35O1IT:VTLE+o5BiEh5iniWYn25NNHQz1A","tlshash":"0d22bff1eaf19c3fd14e58442720625323a9abf40a561e7a11cc8e357ca7d88361a7dc","first_seen":"2026-07-22T10:33:01.81331Z","last_seen":"2026-07-22T10:36:03.4837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/conditionals/dialog.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:31.128Z","timestamp":1784716531128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/dialog.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nCookie: _ga_VC1PCJ1PZE=GS2.1.s1784716530$o1$g0$t1784716530$j60$l0$h0; _ga=GA1.1.1743077217.1784716531\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 1346\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 19:28:08 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"3c5a-68b5591a-6c168dfb9745f1c5;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ee998b1a6d5ceb7dfc27e0f57420a9b3-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":15450,"size_decoded":1888,"mime_type":"text/css","magic":"ASCII text, with very long lines (15450), with no line terminators","md5":"1d7f1edbf61690a0ccf2682e95a31eb5","sha1":"83ccef9dd7cb11913a884d89fe9e08372d290c34","sha256":"d25fe3839ef9a5356f1b5ece4ed4cd40254e6ffa34cbd3ae1e7b7491baeae857","sha512":"9567b18ec706872422e13932e695aa798644983ac58fd3eb0f47816f2a01ea83c0fef269b4dc09f2096333fb7090d719f0f39ef7da1b9c919ad83dab4d680526","ssdeep":"192:VgtEokNI11JxDGNlfCYlKV+H4anWBnEOQKWa:VgGne","tlshash":"fc6271c7686d264ddb0f1b3e4c0ea8c9e6d451d2d902af9f14c6e0eb03e9465ba5b133","first_seen":"2024-09-10T20:55:58Z","last_seen":"2026-07-22T19:25:12.809548Z","times_seen":1873,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.062Z","timestamp":1784716530062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: W/\"fe-68b5591a-b2dc726e410f1d2c;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8ee983a56134786fcd0c09160536bb65-fra-edge4\r\nx-hcdn-cache-status: HIT\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":254,"size_decoded":649,"mime_type":"text/css","magic":"ASCII text","md5":"3b3d65c0907be27decdbe53c0e945cb2","sha1":"dbb6e42c59196f61c9cd3379b1c15a30e07f44ab","sha256":"56aebedc3cbd4bff5447a6e9a59baa2597019373582f3ecc6baf9b47cf68f081","sha512":"a5d543290b03e8af4a40567331214340961f0a4b1a2599421a71b6ab2fe1dca3d2bcc3bc4f3cf71373da3a3d2b5d8cb72974ae482421a754c2be535cca9987ca","ssdeep":"","tlshash":"42d05e40746b4382301e49692abb2a9e2cd01ddde346eb90dca162566abacc82772120","first_seen":"2024-11-20T17:19:36.132224Z","last_seen":"2026-07-22T10:36:03.485813Z","times_seen":501,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/elementor/css/post-27.css?ver=1776745019","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.084Z","timestamp":1784716530084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-27.css?ver=1776745019 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 1596\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Tue, 21 Apr 2026 04:16:59 GMT\r\netag: \"37e7-69e6fa3b-499eefcfe7a133b1;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2dae80723ca9f315cc775de54d702303-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":14311,"size_decoded":2138,"mime_type":"text/css","magic":"ASCII text, with very long lines (14311), with no line terminators","md5":"a4f9211b5da667c88195b9a56746719a","sha1":"1efb058bbc7403d7ce19c66fc798d48c23b72de7","sha256":"fecc3990ce287df2522d401357433bfddf97b480d47fa94ec1d500274a1dcdb7","sha512":"b24ef3cb3adb672d6efc6a817759319a9082e8cd186ad111836685f478af5c8983971963586ce26c7a8e1e650df1ff75104a83103a4ecee321c1d72d2a515ea0","ssdeep":"384:NJ+q0GSjbKjG/4fvJhfE3ELf5DOY/8Lm7M7vgTkfEVsC9a8u6OwX0HuPsFwtl3X+:NJ+q0GSjbKjG/4fvJhfE3ELf5DOY/8Lh","tlshash":"915287927c139129727f508f2007b99c2428ccced93fabd6f9621197e4bbc5533a0b69","first_seen":"2026-07-22T10:33:01.805052Z","last_seen":"2026-07-22T10:36:03.486596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VC1PCJ1PZE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.326Z","timestamp":1784716530326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=G-VC1PCJ1PZE HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\nexpires: Wed, 22 Jul 2026 10:35:30 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166368\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488278,"size_decoded":166972,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"17246ec115a748eb19402dd6d4eee1f9","sha1":"2a39e29355835963761ab103e5772404a572adda","sha256":"100064ae5adfb7588d3e898714458be8d84685f9f2b4a01369c4e7631527d174","sha512":"f8fc5fb338453afc4e39ef9416ad9d03b03fcc1e05b7f6ac1786c4af9e51e4f75aec908867ef22bea804acfd2a566eaf2eae9b22e90513bc99030d615bed4c29","ssdeep":"6144:PWUejy61/DTIDuJRlYYZqusTYcSn9zUZ3vHIGeL/hiq3F530:PtehDHcWDhikO","tlshash":"30a4f9cdb3d674225396f478903f018ba57b29e2b448c899f189cce42e7469a8177f7c","first_seen":"2026-07-22T10:33:01.834402Z","last_seen":"2026-07-22T10:36:03.490929Z","times_seen":2,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":44,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Rainbet-Bonus-PNG.png","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.327Z","timestamp":1784716530327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Rainbet-Bonus-PNG.png HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10530\r\ncache-control: public, max-age=604800\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 562a79236f065529a273e9e6b80bd657-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10530,"size_decoded":10836,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ac346649627d2245176d58208a3ea61","sha1":"243f9e21f34a88d1fb46fec9ac63915f7d8175df","sha256":"1cfef2e7c8ef176823e525999e07cfc9bca3d54620348e1b2f7922669cce2fc5","sha512":"56dc67111837a82c173ae6801e7c63be67e6271e273019275fd1f2cc3f7db67f9c09e439eb3dbe685335512cd070ed43f33e4d71419f1e60aa2d228030d87de2","ssdeep":"192:33xEkzIgU19du9pvr/3fSVxc/FeLkM8e/3oCd7kCBkDdxJ2Y8mZctY4zo0hv7afi:33f5UNElrf3ukAoCdnBkDfJj8ng0ppdz","tlshash":"9a22b0b41e405331dd57093255ef5b24fa6f4d882f402fa6ea3856288f98d7b5e4c486","first_seen":"2026-07-22T10:33:01.742736Z","last_seen":"2026-07-22T10:36:03.501625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.340Z","timestamp":1784716530340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6784\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Fri, 29 Aug 2025 12:13:33 GMT\r\netag: \"53d8-68b1996d-ae60aca2a23f9f0a;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 83f587bf6f8d7516f3596920a4f8e95c-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":7342,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-23T10:11:22.350809Z","times_seen":331167,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/trx.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.390Z","timestamp":1784716530390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/trx.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1015\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:45:49 GMT\r\netag: \"7bf-68b56b4d-a4e37a10ad7c2f78;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a4c0ad0339716b9bd6838955f563eb21-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1983,"size_decoded":1561,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59860f6b138ccf7149ed01ca40ff661c","sha1":"a6abb601c444997ab41b4940e886d9f47f61989b","sha256":"346f5f54f8a1cc02e462fdb2c2cc147bbd3e3022ac9dde3d73347ed3e1ee268c","sha512":"5274ee7007f26a8945d5750f876df0c2db0fe2ca2b312fa62c167e9cb45a8c8c828e6bd3f3bbb9b185f06d78553b68befff8aa9f34e05b10675ed225400cb2da","ssdeep":"","tlshash":"0a4123ce2770a3d87989c15eaf0beed4501ea4aad5b742c999c64b9cd01fcd4f204a00","first_seen":"2026-07-22T10:33:01.835883Z","last_seen":"2026-07-22T10:36:03.502922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/ton.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.394Z","timestamp":1784716530394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/ton.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 430\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Jul 2026 04:05:30 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:42:58 GMT\r\netag: \"363-68b56aa2-4370e6aef73b9543;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ec62445447fb38f419da35d0757abb94-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":867,"size_decoded":975,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72e9272bdc84772ca60a2064d30f71e1","sha1":"9037af043846c929a84df3556b14fbd1416151de","sha256":"3c35af9e0812ba9144b23d9cef4cfea14e922963d39b4f95000a2f12001b516a","sha512":"a0e600dbd5c0877c6ada79c4e25f5da7a22346690fe3409cfc351141639d1c8c60e112b4240022e2bc310d62f3f34c086c336d45a531f8a4b3a20cc38ae223a0","ssdeep":"","tlshash":"7311eff6c0a4e18f531c97780129b038262f24e46abc460096d6096d79ab62fcb18ac9","first_seen":"2026-07-22T10:33:01.714595Z","last_seen":"2026-07-22T10:36:03.503555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Spinmanz.png","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.767Z","timestamp":1784716530767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Spinmanz.png HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16132\r\ncache-control: public, max-age=604800\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6d51159f6706d52e648cd75e2fb8f1f0-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":16132,"size_decoded":16438,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2bb8d6a97eacfcde2199f2735f85006","sha1":"aded1a66128f99cdcc6f3f6f6743d801d15d669a","sha256":"f0e81d708ce0b6aefbb40531be532d151b849ccfb183ae75e7c6960fb630f5d8","sha512":"b4b41f2ec730effaec3582156c3a9b89fc34461764fc6aa988dc663c4513e40eda4cda81d0b90dd535e133f8c4b158b6b70070311356e743d0ccbb6501017704","ssdeep":"384:KcFhrFnY4iWI1xzPgAYRjeRGZmAuAvN1oloRyiG034W:Kcb9iD19PgxcGZhbNuowiGu","tlshash":"0572d02617310a47a56ba9355d00a9d2970bdcd301cb301b8eda3c5bccbce90ed9c1fa","first_seen":"2026-07-22T10:33:01.751119Z","last_seen":"2026-07-22T10:36:03.504409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.078Z","timestamp":1784716530078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 635\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"276e-68b5591a-294180e195372356;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 651ac30c1462a901140fb4c2cb30e8ea-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":10094,"size_decoded":1176,"mime_type":"text/css","magic":"ASCII text, with very long lines (10054)","md5":"2ea83436c720eafd48d27a25d1550bbc","sha1":"fe68736d505378d3d342f5592e8ee8e5b21b476b","sha256":"f0ad37e9a1a6af5d91c6b5465ff0e7889a8dac51b970ec53f1fd9a85595247ee","sha512":"f2b74ab90a6452fd1b156b78ec3ba779bcc0ba7b959fc00c8a60bd87190545d0d13da3ec835c07af97aab942521d9faa5d5dd23f895b968d9787d2369a19f6b2","ssdeep":"192:mNEbs81KSkX8fVaAxTJXPEhc+ZFuEKeuKU:IU","tlshash":"0d2260463d6751066a2f951b5b83240db06048d8ece7ed96f891e903dafedc93b13c78","first_seen":"2024-11-21T05:24:00.626563Z","last_seen":"2026-07-22T10:36:03.505137Z","times_seen":106,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.337Z","timestamp":1784716530337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1571\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 19:28:04 GMT\r\nlast-modified: Fri, 29 Aug 2025 12:13:33 GMT\r\netag: \"12a8-68b1996d-66811464c949ed9c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d461cc1fe9020ce8626bd82aa20e2009-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4776,"size_decoded":2129,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-07-23T09:54:56.803589Z","times_seen":229374,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Flight-Mode.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.773Z","timestamp":1784716530773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Flight-Mode.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15374\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:12:02 GMT\r\netag: \"3c0e-68b7f852-891eff1e8dc77586;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 45b0405d6188e08bf9412321552f0593-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":15374,"size_decoded":15897,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eec251fd4b75f57f18ffde926d092cb3","sha1":"c24c373c918c78f3820ff3d606f31c2bde797726","sha256":"155ea5530b87ed25ccb75cfa2dfd33c1ae1ef727f9584d16054d75dabaa36567","sha512":"979a08b4c5db72c7814b8e1ecefa70a4caa409c64996506cfa1780d56b90ca7c5bb97309c4f13d7ad424332856f0f518839487a717d019608b27b39ab3f40634","ssdeep":"384:xgEIflSFeMHr0WcUsBTCcxeTTT7AYOwo8f9ZcMrj5t3B+S:xKNz6r0WKTCcxeXvTrljfgS","tlshash":"0762d1474fb77771d41975ec35c4b3016d41ab890c89825d6802af6173b2eca212ff96","first_seen":"2026-07-17T10:04:37.530053Z","last_seen":"2026-07-22T10:36:03.506255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Alien-Fruits-2.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.774Z","timestamp":1784716530774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Alien-Fruits-2.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9940\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:12:01 GMT\r\netag: \"26d4-68b7f851-d9c89bd76004bbd7;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3e435d680d152169e71a0f71b251da95-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9940,"size_decoded":10462,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0bc87f5198735a84fea4898de7c85c54","sha1":"b74f33285f59f5f0f43d956f4b3b56b24baaead7","sha256":"a9ffa93c8a10c1de875c379be8a7b140b8b5c9314dfbf551618d70abdd812beb","sha512":"363022bd4900b297f646cb355607529226c8f052477f5fbd4db6c098607c8e28d6b5d3d2f95aa9932f21899b8d06489774879a20d808ac8b8e4ea4d2588fa79d","ssdeep":"192:EskVKagkoUN1ofrUB3WFUtCNrCXxk1I2pMc9enH3z0pg2xX9f5i33GsD0JBGVY/+:EskVtwkoTURWFU4NO6R9ID0pg2x83Gsb","tlshash":"9c22c0c306f6d9635fad214817a83f4eec9b015ab6db92fc8f6d03857ed89413236606","first_seen":"2026-07-22T10:33:01.698231Z","last_seen":"2026-07-22T10:36:03.506924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/plinko-2.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.777Z","timestamp":1784716530777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/plinko-2.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27030\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:52:34 GMT\r\netag: \"6996-68b801d2-b302106578dafa2f;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 67328bf75c6aa99bc9372681f347595c-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":27030,"size_decoded":27553,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c63798bf32cd9c857670338b1f95cded","sha1":"e57bbba08e71b6de09ada0c0b8495ed46a6a5377","sha256":"9348d8a15c40d64cbafe2e381ff447719cba3e85f253408c3198b2a28affa93c","sha512":"45d655e2920226819f8ea8fa6cebd55b19f243dcb86072c744459185fe9aabc43aedacbbf679e52d02b5269b64fa9eb8470cd903200c8fd1dfaa427a78056f05","ssdeep":"768:A5e3JXpBcTC2M1gqCkzU79Pu6FQYKtLoeSY:geZXPc9ugqC8CJLY","tlshash":"2cc2e05e9edbb29d499ee516824f8598d28e600e765c90bdec7b428788f1006157d202","first_seen":"2026-07-22T10:33:01.686422Z","last_seen":"2026-07-22T10:36:03.507648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/case-battles.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.784Z","timestamp":1784716530784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/case-battles.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11308\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:47:04 GMT\r\netag: \"2c2c-68b80088-2e6a0801bb83be3c;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 90a4adf2b8fb66502fd656e9019de496-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":11308,"size_decoded":11831,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03c96ddbf67b04728d315816234dbc42","sha1":"159064384093b9da301be287d0a9e21692844b10","sha256":"b08c9456704eac4ba264c93acd5179724e085e04980fa7a9fc12e15f2f6d8ecf","sha512":"1e838d6277da984a30b595c936312f3d03ac53c7f77c2f49e25dcf82b209b34698a0514fde7f6d1fde658a245cafedc73a0923fa8e58f39994e63d9437ee0d97","ssdeep":"192:LV+cCTtERfeigSjOKXebL/DmXn+e3RiXYCxbWSaAnMsoX7Av:LV6RE1eAeEfBoLaAMsoX8v","tlshash":"ba32d19d059251d89831d3d3a728312472e721ee729f8fc871e2ab47087da78a54737f","first_seen":"2026-07-22T10:33:01.7743Z","last_seen":"2026-07-22T10:36:03.508239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/league-of-legends.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.794Z","timestamp":1784716530794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/league-of-legends.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3714\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Jul 2026 00:37:38 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:13 GMT\r\netag: \"e82-68b80415-87a447af3a49f36;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9472bdb6a147d35f292f8ddc9488bd1e-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3714,"size_decoded":4234,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"504f522009cd64e14ffc3ee80c5bcf94","sha1":"87c2386dd36e6f1cc03a798c8c695f0ada1a379b","sha256":"d6a6dbc24796126dd7d3e104a33072552d103e3f4a07e472ae3ac3cae9f5b180","sha512":"e0f475fd69a04f8b94443cfb8bae16a906ab39feb088cf63adc11eac42a9c33c59aae0728688c5e8b57660e0ac90f7c1cebcbdc9914e42891fa3d6d507eb6a33","ssdeep":"","tlshash":"b7716c6e73b773712142b41759886c5f192eecc1b81e2f5020266ae3d0d40652bbcd9b","first_seen":"2026-06-14T08:39:52.57357Z","last_seen":"2026-07-22T10:36:03.508864Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/boxing.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.796Z","timestamp":1784716530796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/boxing.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3582\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:13 GMT\r\netag: \"dfe-68b80415-7e8d61608c019020;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d4b9001944679de365ac93c9c3fd4ede-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3582,"size_decoded":4103,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9572d18ee1c9f9c1b79b3ac272f6f17","sha1":"5fe10484dcfd7cce9db1f24a1d33b4a8f3f53181","sha256":"08632011487b645e9c21426e3ead1516ea6d42adbe9887b8bd1af1d95b7c0dd1","sha512":"325dd393c659fd065eb78849608d2686e807c8167c4fbd975def95ca1ee6d99ad043f3af92d9564b06d6750d0941d4ec799b24f13867be7830dc8ed08238631a","ssdeep":"","tlshash":"23716d37896fa681ba15dd2b8e584706a618c8b345dad3054d123feeecd585031ba9d0","first_seen":"2026-06-14T08:39:52.603155Z","last_seen":"2026-07-22T10:36:03.509354Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:35:29.709Z","timestamp":1784716529709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 10:35:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2.31\r\nlink: \u003chttps://rainbetbonus.net/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetbonus.net/wp-json/wp/v2/pages/111\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetbonus.net/\u003e; rel=shortlink\r\netag: \"20-1784606063;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 609\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 581bdc9f670eb4ca63c321f74f5bab2a-fra-edge1\r\nx-hcdn-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Elementor:3.25.9","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":199271,"size_decoded":48673,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (10901), with CRLF, LF line terminators","md5":"25f455e0efd3dc1b0304d03c0853a5c3","sha1":"7a1a8258e30e80c64e70473433ec855c50c5bd27","sha256":"1245a89be513e4899745378f4ca46f8aa9913fe08305c2b5b66d0f9d0904a27a","sha512":"b5cba887b833060023178aaa9c95c5f4126d3d6f555755f7e18b6784348686f01ac5bf3869ac05d9dca01abbc18288d60aa8ccec697e039066aeb70b5eba182c","ssdeep":"3072:697Fvlz22ppnJBJWm8lyBaiz6tIBmuEPKVCHST:S5vjp1Z","tlshash":"3a1488227676186a317f32cfc0432b0c518fdbe7d6a5a7f5b1b34021a1b4d943ae7299","first_seen":"2026-07-22T10:33:01.70731Z","last_seen":"2026-07-22T10:36:03.510228Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":38,"connect":20,"send":0,"wait":20,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/elementor/css/post-19.css?ver=1776745019","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.083Z","timestamp":1784716530083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-19.css?ver=1776745019 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 3001\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Jul 2026 21:14:34 GMT\r\nlast-modified: Tue, 21 Apr 2026 04:16:59 GMT\r\netag: \"b3ec-69e6fa3b-257ae09d2719bfaa;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d32c67efb507c0b45c24a5369718a4e5-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":46060,"size_decoded":3543,"mime_type":"text/css","magic":"ASCII text, with very long lines (45350), with CRLF line terminators","md5":"9cbdb2fb176aec183fc7a3376de9b714","sha1":"b5e154acabea45d2f8b85a9089178b4fde83679e","sha256":"801cb8ee0735d5c4277caf414c226fa3576041d668ac9c500953f6dee3ee00d4","sha512":"d8fc19b8a5641d3d84b83f0f772032736551f43abb02f2e9ac4a6e29d34a4ce7e918ff4622df24b3d04a5a5b333befd7522a410fdb80723e4524987747ffde1a","ssdeep":"768:zUiA7JoUpUDiiJvDM/JwJGJplLDMzFdu4KdtHJ0Dh2RDbY66br3zRqhDLswkL7cC:FvDMxoqplHJ0pH","tlshash":"0f237bd07e53921db27f606f144369cc2028cccee5beaae3f8221613f575d9577a0a68","first_seen":"2026-07-22T10:33:01.781444Z","last_seen":"2026-07-22T10:36:03.510824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.338Z","timestamp":1784716530338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3541\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Fri, 29 Aug 2025 12:13:33 GMT\r\netag: \"23b5-68b1996d-f5001e0b743ac8a3;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1d28c5f62a6590b9f5bc1f1a816782ac-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":9141,"size_decoded":4099,"mime_type":"application/x-javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-07-23T09:54:56.839833Z","times_seen":260107,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.25.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.339Z","timestamp":1784716530339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.25.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6417\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 16:07:57 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:13:09 GMT\r\netag: \"6152-68b54785-50f3455267a62c9d;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3f302db6f99b8bd5ad9680e22a258346-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":24914,"size_decoded":6975,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (24870)","md5":"38f29085ef1da9151bbc0880728d8648","sha1":"b40b6a6e6a2e268412e7d5f5129b9ea4ca86758b","sha256":"5f75229618682b638f81b324b803e9c4752b8eba4a5846daa094c7626e2639d7","sha512":"d4aaeb9e53617042210a0b66eb8e54d7919134196a193518b71a3444db537b0a45c9402ed4706fad489e2fb8c6b9d691f4eda0e61f7f471e8f37a3ca64a5ced6","ssdeep":"768:hxw+EVxFm6cKikdHd7taQ9HuGJswyC/pMTAQYtDTFHJiwqnWWN7KOljuOzQYqEbU:YtVxFm61ikpCQ9HuGH5iwqWWN7KOljuB","tlshash":"c0b2e9063153a87a50cf8157e067420e7b3748997405b0ed7bbc6cdba5b8d8a73ea335","first_seen":"2024-11-25T16:44:52.237207Z","last_seen":"2026-07-23T00:50:26.679534Z","times_seen":2028,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Tiger-Legendsz.png","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.768Z","timestamp":1784716530768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Tiger-Legendsz.png HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16408\r\ncache-control: public, max-age=604800\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 189bfa2450645b3175a55f9e9ef2ad85-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":16408,"size_decoded":16714,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7090b1bc6ae2cf8e131a930a7df71139","sha1":"6ceb5b9a289e7df642289941f94073919aca7f40","sha256":"9440c5b78d67b0690f5490b98a702e3c376fa267e9b02a779d3fd5def5920cfa","sha512":"80084b9dfc09e0cdb1be087a57141656c3aaaeabf4af8314f2850b70d431779bb848e11b95c5faf4d53dbee89a7674eca45db83e3c9797b67c1e2f6b8394170d","ssdeep":"384:+M8RugUDOV2faKEVRUxKePZOiY9BDVVqhbxWQ79DRciJTw84W:+M8RZpnVSOi6BJ4jDpuGwU","tlshash":"ae72cf3d4402398a906c51f26674b78a3b3cde99b3f8fbd4fd83558399ad498b25d0b0","first_seen":"2026-07-22T10:33:01.825663Z","last_seen":"2026-07-22T10:36:03.512399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/keno.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.783Z","timestamp":1784716530783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/keno.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7996\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:47:04 GMT\r\netag: \"1f3c-68b80088-538c251dd47f407b;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: dd5bb8f538051e43910c01794e670bd9-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":7996,"size_decoded":8518,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d7b8cfe460a00a188a7f3aad7779a6","sha1":"eff39f2ac03bd64a842dcd4f9aed080eb078f0fa","sha256":"abe0568d75ad0a31229b4c9fd971d3e87b07424fe3eb554758870427bd1688f9","sha512":"a006f010530092549ae93fb3f28f08a9192311630350e4efa1861d747658971ac9acd1add1e274257b83131b0dc50c94e8572ab1f4cd50706041c56660079b3c","ssdeep":"192:ZLsjNrUtWG/+F8CbTVWBdsCUMdWGQceqwOJcpO:ZLsxrUME+CcIBdsxCeqwcf","tlshash":"b4f1b083c5ae7a1e43d39e20363d551e83a1ac0549eae98e06d60c1e84a7bf30c457bf","first_seen":"2026-07-17T10:04:37.461574Z","last_seen":"2026-07-22T10:36:03.51302Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Boka-jamba-10.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.803Z","timestamp":1784716530803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Boka-jamba-10.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14928\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:05:45 GMT\r\netag: \"3a50-68b804e9-e7252077d7a7620f;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 024cce45c3665dea363999f43547eaed-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":14928,"size_decoded":15451,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ddd7c39aa137396cbe4cd69d9b5f17e","sha1":"d40bece5186506d4110b536702c58a34df4899c3","sha256":"d93e4d9ee49151df75eec7a91489db09b350926e2943d1893f1302286c2152b6","sha512":"552a46dbff4172aa15f5afd7d0e411a1a0754111dcebf6501cc6514ba8452a701d710d87a4a3d479c8d3f017a02300d73ce7344f37166ffa6c2ff769b7ca9dda","ssdeep":"384:q0RzTlkIuuMUVdpAYFiMfeTH3kHd+xGilnmMVhyVG2f:qABVTphFZWTH3kHExdVhAf","tlshash":"9862c0372ebc46d9600023cf6c3d22afd8b3166e2b35d6101ea362a487c757da9e1225","first_seen":"2026-07-22T10:33:01.691868Z","last_seen":"2026-07-22T10:36:03.513594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.067Z","timestamp":1784716530067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 1057\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:46:37 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"130b-68b5591a-c1e4c0b636661fe2;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 42218f59564e3b4f9fde332ab6519097-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":4875,"size_decoded":1599,"mime_type":"text/css","magic":"ASCII text, with very long lines (4835)","md5":"cae63c05146f1a228d98fb54fb100b87","sha1":"42e53015f79cd2ce9953e972f7accb9b3a260bef","sha256":"07e088824a7667c346ae7542f273ab32b79a3990346a52a8af46c3cacf638ea3","sha512":"e9f70723cd47dc32461fbc42cf74cfe6886a9a79dcfca041362e76ccf1f4ab4ffebd96e3703e3bb8ec9b7efe6e26fffedf4525e79d44e170f27ce732c9e8ac05","ssdeep":"48:BwUOgAozmcb8slNf3U7vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:BCoz/8mU7jfQL7aFu2if3Jf9HL","tlshash":"e6a17951be4f9586721f002a0993f309d01911c5dc8c6f78f856b1ae59b6bf43a73eb2","first_seen":"2024-11-21T05:24:00.668563Z","last_seen":"2026-07-22T10:36:03.514327Z","times_seen":285,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.073Z","timestamp":1784716530073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 680\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"10c8-68b5591a-f43fd45517b3d2c3;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3a60aee0b78a1f82f7433832391d3bd8-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4296,"size_decoded":1221,"mime_type":"text/css","magic":"ASCII text, with very long lines (4256)","md5":"850b905f5a3b03c9c4044d124cc5c25c","sha1":"f226e00c23583b23884d6e8c82501c1e0425f071","sha256":"41a252a3b4ceb71f6d82e674149bced6c4e867c966d41a3d9a2ca33fa0af1aab","sha512":"234490cc24f1fd1e13b0a3c8040a73ea2ba8bfe55a7bdbd40b7f7fb9ef72efcfef3798e521784e25744d1af0c73e9a30d3b20bc2195412e4ed3d97de41e6adce","ssdeep":"96:BvoAhZc2Q520ydTYk0+5FD1852KELxrFrReUo6Ru:1op2Q5775slDoR","tlshash":"a6917655b94f8218b79f241b8e173e4cf04467c9ea618a81d9f37252f0aed843f209e9","first_seen":"2024-11-21T05:24:00.634046Z","last_seen":"2026-07-22T10:36:03.515001Z","times_seen":228,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.25.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.343Z","timestamp":1784716530343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.25.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 9681\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Jul 2026 21:14:44 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:13:09 GMT\r\netag: \"a79c-68b54785-8d5cbe408d408888;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f0fee720ba0b2a4192745946d0cd9368-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":42908,"size_decoded":10239,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42864)","md5":"8dee3221fb4fc93cf63b7d0093f91fc2","sha1":"b136c17d61d4b345c9ef3d2e70a8843d6349c4b6","sha256":"252ff47bdded7295123a3a968787365824d86c1039686f0153ba50e8e5d9ecc8","sha512":"f7cc5c716a33803e51cdf17830f2117bc5dbd0a42eeaaf3634c4d1b781a2783d673172e447bbc6ab09e1f648c20c4970e155d583410dd2e7dd4bffc20e869766","ssdeep":"768:MTQZhIK1YE6A5yLseTY9d0dbdTdGdJdWdDdILdUd1dvd6dfdMdxdndTdV1FUfv+k:yQ4K1YE6A5yLsSY9mBtI/ERuWfRMBKHA","tlshash":"d313a55071aada6941cfc4abf423264fb7329c9cb413f0d67afc8d82a464e97a350771","first_seen":"2024-11-25T16:44:52.220113Z","last_seen":"2026-07-23T00:50:26.704839Z","times_seen":2029,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.648Z","timestamp":1784716530648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetbonus.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 16 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519472\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-23T10:27:11.143723Z","times_seen":240753,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":19,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Rainbet-Favicon.jpg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.958Z","timestamp":1784716530958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Rainbet-Favicon.jpg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nCookie: _ga_VC1PCJ1PZE=GS2.1.s1784716530$o1$g0$t1784716530$j60$l0$h0; _ga=GA1.1.1743077217.1784716531\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2420\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ad11bc3c7112e341f7245a38e8012f81-fra-edge4\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.169\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2420,"size_decoded":2742,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3a3072b0f443369e2f50cc44760e8a0","sha1":"46e48f58984e9e0f4852cee208b94fb482e5a63d","sha256":"4fcb87bdd6046413b8ca1fe4ec31a3f8c89846f3676bb28cf1f3983fc340ce80","sha512":"82d23e3cf6a59f8151d673bdf8f8770d6ef2b576957a73c00d57ccb2c4a2226642c27a0e21cd19695476e40c7b9c79cbcc48bc33c8c6041b84f151015804c492","ssdeep":"","tlshash":"2e413acf77060e01ea32703f92edf79483224ed1213aa71170524f28bc99d86aec84ce","first_seen":"2026-07-22T10:33:01.831323Z","last_seen":"2026-07-22T10:36:03.516137Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/nested-accordion.c3b109b714293a16bd95.bundle.min.js","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:31.111Z","timestamp":1784716531111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/nested-accordion.c3b109b714293a16bd95.bundle.min.js HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nCookie: _ga_VC1PCJ1PZE=GS2.1.s1784716530$o1$g0$t1784716530$j60$l0$h0; _ga=GA1.1.1743077217.1784716531\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2733\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"2727-68b5591a-8d0cbc4e0362fb84;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1924\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 004076bd6a61ab0ac9f2a3ee96b805f1-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10023,"size_decoded":3291,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9983)","md5":"661de0f972752fb8c1958ccd52abc7da","sha1":"f089fc6de4c7b5073a339d85170788af6c4ac3ff","sha256":"360d9dc98816a240aa75cdb1c2d6ded69badd574a8ca552127bfacb82cb226b9","sha512":"3086c603c67ef2527575cebe8f7d42d65659afe13c79431aa3406125f82c95978f02ea453cb074304480869e75b9ca10558537fb00bde777b1e6956a4b12e4d3","ssdeep":"192:DsPHlrf6Sewvu3HCQo4LqZy4b4LMPBWP/Y/id8AxcRigwC6y/tqOePaTNyD0eAd+:Ds/lrySewmXC4WHqMPBWP/Y/id8AxWX6","tlshash":"e422a612701d61a149cfcbef76060e2e552110edf42d759c3478cadf76b8a82a7fa235","first_seen":"2024-12-06T17:51:15.551673Z","last_seen":"2026-07-22T10:36:03.516687Z","times_seen":9,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.333Z","timestamp":1784716530333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 2179\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:50 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"1484-68b5591a-3c744e7c4965f99b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c47630d276393b8d3450bd18c6ccb036-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5252,"size_decoded":2737,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5212)","md5":"c826e0d322478cd013c3b663f6c05f16","sha1":"d0e4da7611ab3e118822047e989a98c8b1538688","sha256":"ea8d8d4cf474982920ff82096a0a766482772862c31a9fabf428bbadc471f8eb","sha512":"971c5f9d2d30821de953540133a607ce425d1b181bc262523954ab5a27587e3fa1198b200c2a19cc5e725db4a1802dac69dd46fd9a7e76854cfd5ad612289f50","ssdeep":"96:BwsNt0jqf9fzrPf8nDmDyTlCjNVobVDPkqflkxwvT8S2:2sNCjw9fnMyDySN4FPkyXgS2","tlshash":"12b151d41a90fd6731e135c8a41ba731752fc0333c1ab8c1fa22dced58e8ad187a9972","first_seen":"2024-11-20T17:19:36.105057Z","last_seen":"2026-07-22T10:36:03.517274Z","times_seen":663,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/elementor/css/post-8.css?ver=1776745018","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.060Z","timestamp":1784716530060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1776745018 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 394\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 17:33:21 GMT\r\nlast-modified: Tue, 21 Apr 2026 04:16:58 GMT\r\netag: \"55c-69e6fa3a-53c1e843c33bfa09;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5ef73e9cec9b247e8636d7b8f2cfc2a0-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1372,"size_decoded":934,"mime_type":"text/css","magic":"ASCII text, with very long lines (1372), with no line terminators","md5":"fee28d46e7ec9010e07281b68a0de532","sha1":"12fc58843ca0f911804e5f5b439b2ed719947250","sha256":"fa927ab86d7e7e305feb18ecfb3c45325b67f9cca93fd5bf96825cbb9b7820e6","sha512":"537c284bab6f979407175e0402ba3450716f6f44cda9e8b27a48224c8c0d54716b630955249588b366e360ada4f2d80943908eda0fec81ef3b15c429afcb1bc1","ssdeep":"","tlshash":"7b218b45be23e036e0770a2fd6d3a02c001cd45f915f8adff41d8749f9be6062269647","first_seen":"2024-10-27T17:56:19.944311Z","last_seen":"2026-07-22T10:36:03.517833Z","times_seen":23,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/ltc.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.392Z","timestamp":1784716530392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/ltc.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 237\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 17:33:21 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:43:52 GMT\r\netag: \"159-68b56ad8-7e49fc537bc1d20f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b35cde36e8edbe30437af5d73611308c-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":345,"size_decoded":782,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bfb19a26a8641bb4f9fcf4804b2d91b","sha1":"4c304705af5107b059b4c8b9a093e899ec6684f9","sha256":"e6f8bf6f57b18f512250fea2e79756fcbf7dbe340e2c400cbb5e69bfbecd79f5","sha512":"a31eb8aecbe274e442104d851ccdb5c432d642729fb601a6900386047520eda867f671f10fae73be83e81859ea298812809b01688dc0fe99a756ba43ffb616cb","ssdeep":"","tlshash":"f4e026b6a5a8f84d185d4268ea2b7291202b20cc4d6e0da8f5e42c21e1439e7a445dd9","first_seen":"2026-07-22T10:33:01.784557Z","last_seen":"2026-07-22T10:36:03.518344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/dice.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.778Z","timestamp":1784716530778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/dice.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10918\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:47:06 GMT\r\netag: \"2aa6-68b8008a-3e1e5d65e1a72b9f;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 20ec9b069566fb7799ea2670d2c10b92-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10918,"size_decoded":11441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"89d0b140cd643f3a4586a44e2fe0454e","sha1":"4c54336fdad0a7daa196154ad9287ad71e4473cd","sha256":"3ef44353d6db5ae4174fb685f021f615db690d9c25f1b4580057f0de23a3535b","sha512":"2b6bdccf9c278c46eb8c353e5de2d34f6997a274df20a64fb9105cb173825140dab273f8daf96a382c86125e9429dbae86eab2429b416c243eac61330fa843ce","ssdeep":"192:eIfKn9CnQO+IpuhtGUxGCFIRFrRTGaE0C7cGubaWEOv3Xoc:zfUHIpSzBFQrRLG+7v3Xoc","tlshash":"6432af9fab1819a18729740fe26ad09c6ffb9104413d5c52e2eea2a51bbc34c14fd8d1","first_seen":"2026-07-17T10:04:37.501565Z","last_seen":"2026-07-22T10:36:03.51894Z","times_seen":5,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/limbo.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.779Z","timestamp":1784716530779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/limbo.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9516\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:51 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:47:05 GMT\r\netag: \"252c-68b80089-4e75d084cd88e5d3;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 289407a6ff067af84f0aef822135e9dc-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":9516,"size_decoded":10038,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca66aa8b7bc94e69473fcd3a67b8e0ad","sha1":"e29e94d75a77ce56f9798ab8ff22b62091641931","sha256":"8492c0c5e55d3b2f3e37f6ed742d8066fdd7c97e775480da0a623a456cece6b2","sha512":"f60662e10b3a4cc023665bc5694f135c14087d70c6588d8ad73c92986b84b0fe747a3b126567655c031b5fced2e6f429a7b7236a71aa0de6a55133e67969b4f2","ssdeep":"192:v8jQE7cQ1JqfAngyysL1Dd91rbVlmP7Ox9XdGTdyWyXSW0D8tAKoJ1:v8jQ+cWJqYxH1b1rZlOk9KSSfD8tAKo7","tlshash":"7e12bffe4e1d342b0243bade267f533105f66eb7031ebc025a8778102322ad6658ac72","first_seen":"2026-07-17T10:04:37.51037Z","last_seen":"2026-07-22T10:36:03.519888Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/counter-strike.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.790Z","timestamp":1784716530790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/counter-strike.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2682\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 09:02:14 GMT\r\netag: \"a7a-68b80416-b89d231c5ea99a54;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7dd3dbba21b7218b701440c8225ee9f0-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2682,"size_decoded":3203,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6f8071727a0e264bb16f4c0ef27a102","sha1":"38e97629839ccd4a0890e6e8448f38e66ecea124","sha256":"6c591f19c70689974f5610d761d5aa3e8497fac9d16cd4b1637a6f8dff5f5368","sha512":"db5feb0de52b040f4efaab68accbf876d59f8851042ea64e2fca46aedaa24c0b2707cbf8ca97ee8cd9736176a690dc979ee58b6bc72effdfcf2a243da4860516","ssdeep":"","tlshash":"94516c0ec02527bbf8cff70ade04cd09d184b92d400afe1a7580e4b99232b64c3c9191","first_seen":"2026-06-14T08:39:52.579372Z","last_seen":"2026-07-22T10:36:03.520685Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.071Z","timestamp":1784716530071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 154\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 16:07:55 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"258-68b5591a-3ae8d703d675a47b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f8ee1ee8c4e3e2c74fba7e8aab2cd12b-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":600,"size_decoded":694,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"3328322433f51e047768f40c411f45bf","sha1":"a303d3b9bc10a98d20a306af66771a3213ad5265","sha256":"c3272d01b700651e7d79309729764ca8dd542e973f2723ede07e4a5e42de5fa2","sha512":"a01a8a6a719a3c8e0deee1a377cadaedf8e7ec847267c56e54268733a8d65ab44811ab5b3640b7249168d808faa4d87fa80cf4018d5e5560ec0ffc8f78371583","ssdeep":"","tlshash":"f9f012237e4b94aa383f195b1143337c74944ec893a0a8d8e8fa91436df4cb67330622","first_seen":"2024-11-21T05:24:00.617044Z","last_seen":"2026-07-22T10:36:03.521432Z","times_seen":505,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.074Z","timestamp":1784716530074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 4214\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:46:37 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:11 GMT\r\netag: \"4057-68b5591b-d0efebdf8d253010;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 48687d394c53ff492ecfd2d94ecba930-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":16471,"size_decoded":4756,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-07-23T10:21:38.394445Z","times_seen":137516,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css?ver=3.25.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.077Z","timestamp":1784716530077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css?ver=3.25.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 322\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 24 Jul 2026 21:14:45 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:13:08 GMT\r\netag: \"3ce-68b54784-b5d587a85a80a9e7;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2f94a72734e26a5dd0bacff1065230fb-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":974,"size_decoded":862,"mime_type":"text/css","magic":"ASCII text, with very long lines (974), with no line terminators","md5":"6f95bbac11f1fc9d35e8d7cb15e23fca","sha1":"c30faa370bbbfddd2d337f10f932a32377bbd0e9","sha256":"104a8d629d83b0015aceaccb0ccff6178efeff33c99a132a148728f800431b93","sha512":"5d9fbe70da73944249d23f1497a2e67751f354abd597fa81e4f3a73c990b09d0b322e13485afaa14164762e8febccc6ddd36e0e2f594df6f6592b3091308ffc4","ssdeep":"","tlshash":"1e11bd513c5bb538401f413bba432ecd691250c5b7022f98ec70e83745e5c84757e5e9","first_seen":"2024-10-29T10:46:14.187644Z","last_seen":"2026-07-23T07:10:13.111665Z","times_seen":3978,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-nested-accordion.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.079Z","timestamp":1784716530079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-nested-accordion.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 708\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 16:07:55 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"13dd-68b5591a-79c0eedf9b5c9e48;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b62b6c523cb1c9a09e673af6e6eb16bb-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":5085,"size_decoded":1249,"mime_type":"text/css","magic":"ASCII text, with very long lines (5045)","md5":"6c1a706590a9feda73ab194c768a6b21","sha1":"c28fd971efbbd76f134d469a2eb701aafa805a55","sha256":"50980d1e4e6848b683f8abe607766c3e21e0c8c6f1aa1c893c4486fe0d897757","sha512":"e2cdf20f5f7fb2e5d30e9222df4ba45217971946faf49a9f3dce426ff4aec9362b3d0b5bef0447b8ee8812f160f83c6a8d41da7eb3041bdd907674d92cab41c8","ssdeep":"96:Bzy7aME5lVHfU1xF5Ms52QcS7sY9yDryr5XWpmosx/K4i64+Wd7Wz3WzdWzx/XWS:c7aMEvVHfU1xF5Ms5N17sY9yDrU5XWpI","tlshash":"f7a1dec0780f416a242bee850bc65f3d11b014e1dedeb59ca9579d1973edba29fe0834","first_seen":"2024-12-06T17:51:15.434993Z","last_seen":"2026-07-22T10:36:03.523548Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/ada.svg","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.396Z","timestamp":1784716530396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/ada.svg HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5558\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:46:37 GMT\r\nlast-modified: Mon, 01 Sep 2025 09:45:36 GMT\r\netag: \"42cb-68b56b40-22bf0564cfc1db6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 665b2a2aec9439cfc5e962776f26f590-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":17099,"size_decoded":6104,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98ce183956b96056aac3ccf7d054ad3b","sha1":"e333a4795e2acdeb0b69b66c79c7058c5013f718","sha256":"08f17c96f61eb9ccb9a5788e5de42e9352999cbfcd69cb0390f33c140577b1e2","sha512":"f656f0e7a180755f3ec13608d0e200a071c4ef059b047c99443a5fc63d7037834749b3cc4287cdc16cdb8cc0b09a0000b3075244310149b03000b1034e245a5a","ssdeep":"192:euLwvn45DGIqGW3XdjDtVdeHRXgxHXVFhf5oqpsTQQY7y+fflfISuajWXOTyXbSL:eGrGIJIXd3Pl3fsTQr7xOO9+rSL","tlshash":"407264e9e3e4f2f0d50ae7f4d521a969765b24bb3f26db0c43e59ed4e60601e88c8c50","first_seen":"2026-07-22T10:33:01.736888Z","last_seen":"2026-07-22T10:36:03.524277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/homepage-banner-bg.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.610Z","timestamp":1784716530610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/homepage-banner-bg.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/wp-content/uploads/elementor/css/post-111.css?ver=1776751625\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21174\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 07:26:11 GMT\r\netag: \"52b6-68b7ed93-b8f2728c0fb848e7;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6f0b92787338f35646f72029ceb610d9-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":21174,"size_decoded":21697,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1665x341, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3a90b2e56590e0ae04342f79dce2fc90","sha1":"f2d54323c4ccebea304c75a5a31881d29ae071c9","sha256":"2ca4e84242d1b3df11712820e746eb82976bce6e34246177ef0aa87485e541b8","sha512":"8d8ba379a0caeb96c49e49d90ba157cc05349735ee7428626db89d1fc81c76ec00942391359d6d02d220381a10c69574a2613d39361fbb1562c5444f1e78d136","ssdeep":"384:NubdSSWkYFaQW6XKv1ZDM2sjCaAt9hAQ4az/KKYmk+oJ:IdSSWgQW6XU42sjCa6hAQ9fd7oJ","tlshash":"b592e1c5eb305b0009c75ed991e7b61bc299319843da2aa611da3147bef7f31740d01e","first_seen":"2025-12-01T11:28:00.247598Z","last_seen":"2026-07-22T10:36:03.525032Z","times_seen":34,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Duck-Hunters.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.771Z","timestamp":1784716530771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Duck-Hunters.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16906\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:27 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:12:04 GMT\r\netag: \"420a-68b7f854-757d4e8005460590;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b75eddca8ce57ac0a565e04ef86795c7-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":16906,"size_decoded":17429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x343, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"723628a4d65aea84f2bf818fb95f7927","sha1":"5426e264761d58e2877527cd244cb4562bfa0a70","sha256":"19e20fed8087fbfcce04cc107a72e2908a05e4be81b68e85bc53b688cb2e5b5d","sha512":"7dae1ffc31f815dbf5a114a47a1ce53af315e0ec79ebefa6848022828cea45ff4bea98b2f8debc9a874f4f59dab9370a2c944d9b7e15811598cee42cce4fe1c8","ssdeep":"384:FWUbbBdr/cBYQ6q3AeBWAHUiSAV+q6xdohDEtXvSBrmEW9BxpdgoYW8mLED/f:DLAWQ6OlBWA0bjgQ1KBrUxpJRZEbf","tlshash":"ea72d1fb20c336fbfd87a6a2620f41cc24b1f2469b6442d7e7139f75c8375522a5a841","first_seen":"2025-12-01T11:28:00.233045Z","last_seen":"2026-07-22T10:36:03.526027Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.055Z","timestamp":1784716530055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 1127\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 16:06:21 GMT\r\nlast-modified: Mon, 01 Sep 2025 07:44:31 GMT\r\netag: \"13e9-68b54edf-ba39c5bb213e940f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2e2ead760772897e580b6042464e1246-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5097,"size_decoded":1669,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-07-23T11:00:34.646517Z","times_seen":46607,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.059Z","timestamp":1784716530059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 6771\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 25 Jul 2026 04:19:42 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"ec9f-68b5591a-10a3be1976201e69;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c0a1bd07b58a54af516fa9f9cabc9769-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":60575,"size_decoded":7313,"mime_type":"text/css","magic":"ASCII text, with very long lines (60535)","md5":"3527d2693995f9759b21e7c353a00be5","sha1":"cf319cac9ce1722123d8b871fef36673161ff282","sha256":"b32bbcdf470b63f622537beef470bbfff7ae2b17f43abfb7b7a3fb8694e7a464","sha512":"2f80ab9630ccab8153905dc5cf84d59c7dae164ebebfd30d2ca564739e55fecba24c665b15914c9ddd4cb2f068b931a5909a191f74bd154452ecdc05d48cfdb8","ssdeep":"384:V3mnJrC7kHdFptDJw1ZNbt/Rm5F5Cz9TMH46amP6amKVzlRdnsugnhBYXIuYY2+T:pBKb3tgnlRgnlsutQtk","tlshash":"4a433d627e13b22d256f582b93c7354c52a084c1ea4376d5f901c9139afedea3b35c2b","first_seen":"2024-11-20T17:19:36.304042Z","last_seen":"2026-07-22T10:36:03.527122Z","times_seen":575,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.25.9","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.066Z","timestamp":1784716530066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.25.9 HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 198\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:12 GMT\r\nlast-modified: Mon, 01 Sep 2025 08:28:10 GMT\r\netag: \"2c0-68b5591a-269d9c45e88692f2;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1c0324a6dd460294d0ddf3c807a2d6d7-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":738,"mime_type":"text/css","magic":"ASCII text, with very long lines (664)","md5":"37b25db2bc4429c9533db4b18a1c5896","sha1":"7fa15c7d41ecc64f0827c8fced15455f988969fb","sha256":"c06f1b4e324e03ba3e0b7bb6338a1aa677845530891cec02c4221ed6623f88e8","sha512":"0c67dc498cf7904a61c504e943b2705ed320569bdcb57d2a2c1021f700723943a373b010ba1086d48336b98a50c6e421f819732bd4bb9e648c4de60f943b9157","ssdeep":"","tlshash":"6201812afd436001725f483f056b21ce28de94cbe622d760fae8641b347bc893722b34","first_seen":"2024-11-21T05:24:00.623799Z","last_seen":"2026-07-22T10:36:03.527572Z","times_seen":492,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/banner-sportsbook-copy.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.386Z","timestamp":1784716530386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/banner-sportsbook-copy.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 113368\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 19:28:04 GMT\r\nlast-modified: Wed, 03 Sep 2025 07:46:37 GMT\r\netag: \"1bad8-68b7f25d-502cc0ebd74e9fd9;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1938\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 37f99930f08b91682d3bf5d728cb0eca-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":113368,"size_decoded":113893,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9617aea78a49022cd434868dbeaee073","sha1":"f3ea12e867b1fb09f473f717a4c98080cdbfdbfb","sha256":"5a05a5f34f8f7b1d7deaa0e2c9c7d8e02e76c8a15e795993ab7a69ddca548f54","sha512":"be7bd35d6ee5e14d6e626830d9d084bd5a9cee1b6c04b2f57933f4781d18c47b085baa0c2974283646cc056b3a483a81af5c5032e2b3da9d2e511034cbc7e045","ssdeep":"3072:nctVcZ3B/tt36UdyXbjduNr0t32rB8aIEh8eAL:nctVcZ536UELpu1EQyaIEh8ea","tlshash":"01b31229a0414f7bf8e44acc4d5876bd6be546aaf315601154b332acfb5cb83095f0b3","first_seen":"2026-07-22T10:33:01.748515Z","last_seen":"2026-07-22T10:36:03.528057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/Pirate-Bonanza.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.775Z","timestamp":1784716530775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Pirate-Bonanza.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17838\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 26 Jul 2026 19:28:05 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:12:03 GMT\r\netag: \"45ae-68b7f853-8c4835214abb16cd;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 15cfaca71d904f517c87ef11589a1e7e-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":17838,"size_decoded":18361,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"199d0f0a51f57cab1b3a7b1c586bdc59","sha1":"e1ab7670f92bd89fb0eeb19ad535cdb6cb2999ff","sha256":"ae11448787897bc4c3b8e9a7bd44f49baf144167a02ac39d5ed74b5a33269a0d","sha512":"4226bdeb1b7ab3340da07c1e5b9de7e898eb2761d86caab2a372c5b9c540af698bebedc7dc74ed7f660579afcff5909c24f72e08e308670c501d641164325b11","ssdeep":"384:2yOc2950nzWOKjacdcwHulfOKLeYU8ePB1aSTCKZ2Tzpl2T:2Dc2T0HNacwORwP9BZB","tlshash":"8c82d04b68ec301dd377f0ed1df501ba885e40d2493f159e926a772afae00aba94e245","first_seen":"2026-07-22T10:33:01.716904Z","last_seen":"2026-07-22T10:36:03.528682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetbonus.net/wp-content/uploads/2025/09/blackjack.webp","fqdn":"rainbetbonus.net","domain":"rainbetbonus.net","tld":"net"},"ip":{"addr":"88.222.222.214","port":443,"asn":0,"as":"","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetbonus.net/","date":"2026-07-22T10:35:30.780Z","timestamp":1784716530780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetbonus.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 07:10:36 GMT","end":"Fri, 25 Sep 2026 07:10:35 GMT"},"fingerprint":{"sha1":"B3:32:FD:4C:D1:50:7F:33:4F:DE:7E:DB:86:FE:04:43:69:09:91:BB","sha256":"F1:DE:91:9E:6D:D9:18:A3:00:5C:B3:1B:79:A8:EA:CC:09:E0:47:A9:E7:C6:F0:AF:1A:AD:BF:E9:DA:87:9E:65"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/blackjack.webp HTTP/1.1\r\nHost: rainbetbonus.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetbonus.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 10:35:30 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10176\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 29 Jul 2026 10:03:13 GMT\r\nlast-modified: Wed, 03 Sep 2025 08:47:05 GMT\r\netag: \"27c0-68b80089-d2bb35b66b642465;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 1923\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 37c71930b6d5ede82d04d7ab1a5000ea-fra-edge4\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10176,"size_decoded":10699,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a3440a7dd6739ec53b31101ef820fa5","sha1":"855d95e241967cf5ac1f26668f2b8237adc31a40","sha256":"42a0eadbe198186f8b711802b35f42fc3f9e59cc348bf01991f2d7991944f00d","sha512":"d056231da0bb90c60c9db250751ea9c8d29dfaaea6098b6b23b55fe8df1bb5347521b6a198820bd91d851c19d3e877079e334ec47a7b7b857c16b6d83b56589c","ssdeep":"192:/+5ZxZuRic0kRK+zoCyE6MAmLzkPF9NJ/HB3GOHBqTfga1x1OMhA:2nruRiF+E7EFAMY/B2OhWfr1x17hA","tlshash":"e222c0e269857de2b94fee2f23218c5a7347cd78a1f453645c073021e4e6da7580b9a1","first_seen":"2026-07-22T10:11:52.878586Z","last_seen":"2026-07-22T10:36:03.529277Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetbonus.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}