{"report_id":"9c712059-b11b-4564-89de-bb5fe74d2b9b","version":0,"status":"done","tags":[],"date":"2026-08-26T10:29:06Z","url":{"schema":"http","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"title":"Rainbet™ Offizielle Website für Sportwetten \u0026 Casino","dom":{"size":187152,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"f97a8d605642c2fc7a01e68304cd9951","sha1":"ee39ededb8650c558f17ae8f6ae6d09923b976ff","sha256":"fc225997dd27be0f7f8a4b7aa17de4cd49819e6a13e6b90026bb389f990dfd23","sha512":"3b71b0161205c3ef53780c520b520e67d3e63e031da8802511eecb823516c792aa81853fef3b3a6e4a14cc3f36ec268fb0d2261b982e1427f26cdccd066d8263","ssdeep":"1536:kdA0ZaZdZYYvtoz8ypucGcDe3E1tkA4Sx77nVjfXEEYWHRAQtod16osGGu9QQBj0:wILflozNEcGcyA4SA3GsSosGGQQQRAh","tlshash":"91040a6642d874e9b32bb3ac5d486618666d9003de0386f8b0dec29c9fc6fd54677b0c","dom_hash":"domhash8d89d098d1feef93c0d2b6e89d2e60c4","first_seen":"2026-08-26T10:24:26.550924Z","last_seen":"2026-08-26T10:29:08.219988Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T10:29:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetsports.com","ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-08-26T10:24:22.017232Z","last_seen":"2026-08-26T10:24:22.017232Z","alert_count":88,"request_count":44,"received_data":894206,"sent_data":23784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7:6.1.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":4,"received_data":253092,"sent_data":2252,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":4092,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetsports.com/site-reviews-js-before","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f868dcd81e5b1a8738ba1ba5d30fe7a9","sha1":"cd7990c60b1ac4e8298eab0b2be987cdd5aa6ce0","sha256":"9661d6e7a7221036c4cb3b79e6daec416ce23e440471be1d25be97998d83667a","sha512":"bbbc70f55e1a4484379fc24826db2d32365fe3a38171b46e6010ed495708ae5f36da6beaf1e3c33aed52f229229983dbe235c9d78828d492a6649e86a3441161","ssdeep":"","tlshash":"7081dec2deca3cef1e2615f574ccda0357e18294fe604d0bd619546a73cac43d25aea8","size":3838,"data":"","first_seen":"2026-08-26T10:24:26.66157Z","last_seen":"2026-08-26T10:29:08.246863Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-08-26T10:29:08.247361Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da4114d0180552402b508218e800b818","sha1":"4d6e6cf783b3c6181d3e56f9f42c9ba751793388","sha256":"85bb8855d54f151ea765c7548ceadf7f990d6a0d478770632b029d72330ce201","sha512":"0178205ab5c64fd4951734809c06aeb2fa34bcf089661638caa8ee9676e0c278b7f5962ead9584a39d833290fa34393dafdf0914bfd4752fae345737511158cc","ssdeep":"","tlshash":"9321241812f2a930903b7279978b504aa278611b3d0ace55bf0d87412f82852e7f6bdd","size":1179,"data":"","first_seen":"2026-08-26T10:24:26.66432Z","last_seen":"2026-08-26T10:29:08.247814Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335be571d1f9586a0cf2f6952c4eec4","sha1":"f3b60c35f4f7b75ceb1266dbda8ac8d4b1ef11ce","sha256":"da1bed209470750a6c89d8f016d11e981ac975127f5db25aaf094404ecbec64f","sha512":"cebaf60fe3f7c0353c89f2de080ab49e6a5fd65040c113ae0d46f9b10f4b991b00bb15d61e287a60fe714a03569ee0fba4247de1acba85fd8ce02484aca505c1","ssdeep":"","tlshash":"91411868dbbe7662832ea0b62bfe52de143e547e7a814ebb7c38405048f48493715c7d","size":1934,"data":"","first_seen":"2026-06-10T08:18:22.002783Z","last_seen":"2026-08-26T10:29:08.248342Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c35a67191117e90174938f756c5cd7dc","sha1":"d3fddce91e3b0f150d8c66587ab8130cfdcb438a","sha256":"f867304aa06b5218124f4cb784e97840c4f374c50292265931881b8254e973d7","sha512":"dcea992f859908c7f817992ddc6590b1a76d80e0c2c8fcacb6407aa668064a026741ef63dec19434bf41a64ed15e4ba9b3b7c24bda3f5b7b1f547e43c97eadec","ssdeep":"","tlshash":"15e0221263f0333100bf861422ca8a8e3ba04407be428f76696cc4061f84e94c8f48fe","size":367,"data":"","first_seen":"2026-06-07T17:05:58.289775Z","last_seen":"2026-08-26T10:29:08.248846Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59425ae4a1ebe6ce7f808b7ad890f28c","sha1":"3e0ed420b6b9d96f06597ae639e913413f41c5e4","sha256":"21ebcfa69f5f0f7c3a69a4e687465e16a7d7c0d7bac1dd654ae2554baa6f3c6d","sha512":"b3395df914f9538a921e1b4150ed0fc10f32f183b5dc78e65fcd54ef93d5014a93f29c6b03e934855e2d29af929e7b034f84f18a71d9f919cc6319b9fe605838","ssdeep":"","tlshash":"1341da25e3bd243247bf64a529e6229e2a3d808239478cb6cc9c8d0514c0e5d4a75cbe","size":1956,"data":"","first_seen":"2026-08-26T10:24:26.668784Z","last_seen":"2026-08-26T10:29:08.249587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-08-26T15:58:46.606573Z","times_seen":49237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"014a40c85d10567cfe02b27cfbf3dcc0","sha1":"4ac566bfd5f71541b204786455b7ef9564585cc1","sha256":"e9963289c535bc9c5749590bf8759a28c57d0d68e2830c79496ef8240f25190b","sha512":"0c23401039747a89d96123b01bd3f6e3fd7bc6a77e25dcaeaa2d7a9566ccc0e159c4ac852e98a2e4ef9e02bcd579ffe2ed08ca3a066d5e7d84997f5f56686501","ssdeep":"","tlshash":"abc0809d94dc2c8524ead158017c131075149417ca1f5f55f64d014c5fb407d69141cd","size":174,"data":"","first_seen":"2026-08-26T10:24:26.67118Z","last_seen":"2026-08-26T10:29:08.250665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b088f28fafd669aebe5c82cd422fe49","sha1":"9038b9104ecd379c553e413d46d5c910bfa928ab","sha256":"f512c6c0ba5ed7339c7d4893d52420af2fd6512fefb2baca030be90a378fa07b","sha512":"93b285652abe4352a10e5c40c408fc4e6aec2377f789f4f01eba31a76f9f9bfdd76fb401b5f2db7e92d4b4412a6418430315d2271bab1b432d960d8a212fcef5","ssdeep":"","tlshash":"b541f1c25ece3cef1e2615c574ccde0357e18294fe604d0bd619546a73cac43d25aea8","size":1968,"data":"","first_seen":"2026-08-26T10:24:26.672699Z","last_seen":"2026-08-26T10:29:08.25132Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-08-26T15:45:10.615839Z","times_seen":2171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-08-26T15:45:10.629494Z","times_seen":2153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-i18n-js-after","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18527c7d7a1fa2ec85ada0ac77340ab1","sha1":"65aaf4d22264289aa0d6dbaaa8b9a628ebe0c476","sha256":"0659fd2cc84757b135a24a30b10cb0a6b41ce31d23c4e82243114cdb40c501e3","sha512":"f09e40a48b0c4f65f7804d44dca5b17780e4592fe7a427d0970c98a6f5198ebd65303eca7bc5688d285c6046ce217ca963ed034d4e04ed0fd38f9e15d18f1076","ssdeep":"","tlshash":"714112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1951,"data":"","first_seen":"2025-12-16T07:51:24.231655Z","last_seen":"2026-08-26T10:29:08.251919Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/contact-form-7-js-before","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc1fd4b5503061443da7b3827c9dc749","sha1":"909421d864b1ed65cdaea04b0f14a0e140de93a8","sha256":"ae4d399ec176aaff8c2161b10a8a5ce0dd1eee3da8162c02b185dc04b3740d61","sha512":"fb04a7d5025bebede48112b7f41a707ce00bd16b993d99b1e979924e81cf0e2b16e3767e729714f1ff907a1b9f54fd584b21e7c57fd4d5738760a3a207e67745","ssdeep":"","tlshash":"e041809dd5dc2c8564ead178057c1310b5149417ca1f9f55f64d014c5ff407d69181cd","size":2033,"data":"","first_seen":"2026-08-26T10:24:26.659881Z","last_seen":"2026-08-26T10:29:08.252517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-26T15:49:07.890291Z","times_seen":238677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84b71e1835eb9020c7ca700d1aabbf37","sha1":"dc7dd60e16969e6df9d55ca14522ae8ac23707d0","sha256":"0a218b269cc8ae4a4c3b0367add047275973fbe05b152812268dd46bf9b7b82f","sha512":"e1bb3b4a7c978c8ab81c13fd907a9f59ee38d1959af69384c9f06cb4f94b6b3c24561caaa4283aa14177e63f9d3a2a68d97fb25c53174269ad10b6db66bbade6","ssdeep":"192:aB6Lk0IbL9op5vQo6PeoP0vpRJC7lxBFKJ6TQxTEvmgiE/mqjVdGg9sqU34ZOApw:140WLEIo7w3XtvF/mqRdGsgAzItj","tlshash":"e9423e6562712c3a46b26a224e371b05fb3850636542c26e3e1fb68c1ff08918792ffd","size":12119,"data":"","first_seen":"2026-06-07T17:05:58.096609Z","last_seen":"2026-08-26T10:29:08.243902Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-26T15:49:07.873669Z","times_seen":231817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"966eee900d7086888c6bd24e345ef1ac","sha1":"491665f686c464cd80b35807c865dd9ba9586c44","sha256":"bc595c8641415c3d16715855939a7a0edfc323acca2a3c6869effa7548e05156","sha512":"5d7152d312ca977277ad81dc638c392fe60616e426dd3867bce3d001dfb541689374d17ce16d39ea3a126ff84b1e2059ec8c028afde62a69481988846792dfa1","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQa:LDESVre/zP1vV95t9SWgLt27W35LP5zH","tlshash":"7a13d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","size":42592,"data":"","first_seen":"2025-03-01T11:52:27.461641Z","last_seen":"2026-08-26T10:29:08.239795Z","times_seen":2240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-26T15:36:40.258715Z","times_seen":425959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.1","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:38.973Z","timestamp":1787740118973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.1 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c535-b83\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFcb7pli%2BD4aEWCUsds0hcB6hzrbvRpEnZMZYMS8l77KDyiRed1IQfj78raMz9g0CMuPuSYukR1cYpDujVadVbe2ltNclIHWImZyFyR45UovdpXcsU8MvEjnzrNEukZJOR9O3A%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a312269f9a234c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2947,"size_decoded":1824,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-08-26T14:56:44.497228Z","times_seen":140481,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/themes/starter-kit/css/main.css?ver=6.11.0","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:38.975Z","timestamp":1787740118975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/css/main.css?ver=6.11.0 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 22:02:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a67d55d-199d4\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upreDygPnasrGHsc7BLch7xjR8EeT%2BpSTVh7ENCGW4N%2Bjg%2FJErlIsn4KWbj0Mp8ozSxEPDbbuGz0A8k4DEh2uTD9oaulWBHOjptqfYuMdccekKMG3J4QPvOoGYsxA1DTtH2DVg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a312269f9a244c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104916,"size_decoded":18867,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ab4bd79e6afb398ff171b97946e32d38","sha1":"11e4177a619d45364e96033799e8a25b27746926","sha256":"272276540ccf0459ed8436730087e144584f01cbb498ec2bc2af42345ecbdfa0","sha512":"681f37f117c57faccccfddc3cd39e456434ed8613332f0d1adc3b6129b4f9a4af95788ad154bd39db085230f63090889afb94f9cfe0826834b5ed3712d9164ad","ssdeep":"1536:+1WI4eMHa8aqEB+ENWcuYtcJ3SYiLuVENM6HN26KG3Epi5fG:qgCtm3SYiLoENM6HN26KK5+","tlshash":"60a382c7f1a03518d467c61de0d0babe296f4641e3269eebf4276bb487c92c70952e0d","first_seen":"2026-01-04T17:17:18.931393Z","last_seen":"2026-08-26T10:29:08.221595Z","times_seen":17,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/slot-lounge-7.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.027Z","timestamp":1787740119027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/slot-lounge-7.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 07:43:31 GMT\r\netag: \"69fc42a3-33d2\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlrQzFkFAJHCZLmuBSR0gZLW%2Bpd3rdx1i%2Bn48LWiJ89pQmK217hhZwKv2NruFa2Am9YrMoHSDG8alDnoPxrTg5zl48ybhNyXvgH7jAQBvlXQoOr8yFy07qDBXA8r6Nu0yYkVTA%3D%3D\"}]}\r\ncf-ray: a312269fea414c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13266,"size_decoded":14057,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f30213034b31686a3adc629d51986ae","sha1":"956ec123dce965ad0c2595a778f008d35c96a9c1","sha256":"acdb00df830cfcb63a95e467c95b5a6e67e0b99b9909a529f906c58523e1c2fd","sha512":"5563c298b0511de3eaafce02549bddd360c99c826f2228c31e03d74959a60e1cb12bbff02346ac4e5c8a2d9266b685b06c6883ae1e80595c18b16ff6ba313385","ssdeep":"384:lwTgxAPhB/+YkuGVuA9IMjFauZ3RrG5kiK3q:6TgE7q9pvtin","tlshash":"bd52afdda7e24be8e86192374741694533f2814f5dd9cbb80128139922bf2e1068cfa7","first_seen":"2026-01-04T17:17:18.873927Z","last_seen":"2026-08-26T10:29:08.222166Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Offizielle-Webseite-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.043Z","timestamp":1787740119043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Offizielle-Webseite-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 07:59:31 GMT\r\netag: \"6a16a463-646a\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQy%2BPgnOE8Ub0%2B%2B9Ht7F9ZVtl2YgVBO%2FXgUaH95eD8T451N6WJExGPzLNOWUaEYKY2oVXgfyHfKZQEdF%2BhQkPnnWhTE5eUMHlcPY5t6yvGRzr7pljIGM%2FQID5chWa7CUxRT9jQ%3D%3D\"}]}\r\ncf-ray: a31226a00a4e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25706\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25706,"size_decoded":26505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"daefe0c8c034d7736f6294cdf1ce59b4","sha1":"c3e62397f8ead95653d2ae0b4aa0f31db99d0ec9","sha256":"7928bae37312d7af70e9acae0e9d59f8e4180148e57e3567a122df238d47483b","sha512":"a756931103f9d7d0a71efbb117e0f7608fff8d3b3792f78a95831a619af5d26c1d10cc01b7eddfd1d84fc6672d575e92a46059c7528e6971fdf4ad150f1c0e3e","ssdeep":"768:ET3NH43EXVzvuvVMFH9Q3tWoF6RYFr5i0Y/:Ex4EXVz2tMDEtWovF40Y/","tlshash":"22b2e1b7f77a4437fe9e2c3832447f0232aef497a92d381a895d2f1438446e9291c274","first_seen":"2026-08-26T10:24:26.634178Z","last_seen":"2026-08-26T10:29:08.222677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.205Z","timestamp":1787740119205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetsports.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:26:46 GMT\r\nexpires: Thu, 19 Aug 2027 13:26:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 594113\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-26T15:39:12.987303Z","times_seen":25050,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":18,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.211Z","timestamp":1787740119211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetsports.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:26:46 GMT\r\nexpires: Thu, 19 Aug 2027 13:26:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 594113\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-26T15:39:12.987303Z","times_seen":25050,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":32,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/03/Favicon-6-150x150.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.328Z","timestamp":1787740119328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Favicon-6-150x150.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdH0oIBEsMGBcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 12 Mar 2026 13:24:39 GMT\r\netag: \"69b2be97-e18\"\r\nexpires: Fri, 25 Sep 2026 10:23:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 286\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZdcT9BMT5ObVddPXnYtgC6LcoCaxLO91PAWvF2WkhhcKqHKezmh8ktTWdNTpWzk6uHzM2UME7qbCMb5zOP4DJb96Niv0ubjw7X6yTJr%2B8JvSMVkNC%2B4eXqt1cxQvbWMUSNk6w%3D%3D\"}]}\r\ncf-ray: a31226a1ca814c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3608,"size_decoded":4400,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a4f2dc6eb7e0bf081f866722b2d66e8c","sha1":"aad8c43191373a13d3c205b8def63073df79f2cd","sha256":"44b05ea675afa9a7ef94acec11655c6b28153f95ca98d7d1a36f6ec933df2b7e","sha512":"bea910b0079318020928309a3ee780b52b181034cb46fe086c5ce6ca000fe33f03283bfc72219019795f9b84d2b08c14552a1c1773bc607d658fc13174d82fe5","ssdeep":"","tlshash":"6f714a63d7d827d0c05707b0a410b326fa4aef33ca9f2f0e51a5652297681cdb66c607","first_seen":"2026-08-26T10:24:26.658129Z","last_seen":"2026-08-26T10:29:08.224111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2023/11/bitcasino-1.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.021Z","timestamp":1787740119021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/bitcasino-1.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 09:10:52 GMT\r\netag: \"6a18069c-2492\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRvP34dbrZ3r1GMmJIJGLFnX1YVw7dlCpD6RJKdeCr565KqGdTQKnJo7d0o1szUuPJiQllofPoV3ZNrg1lkk2W3JR4dt6S2swyva5Mdg9FxP1NwBDGlZehR0OukeRBjEHzD8NQ%3D%3D\"}]}\r\ncf-ray: a312269fea3c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9362,"size_decoded":10148,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-08-26T10:29:08.224773Z","times_seen":24,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2023/11/bet.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.024Z","timestamp":1787740119024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/bet.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 09:26:52 GMT\r\netag: \"6a180a5c-b54\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zwt9nVVBQOuF1mCrHoBOB%2Fkzw1o2oI7lkxRZlDbidYtWh1OiaAEiVP2a7yn54Nsx2GkWXdfthKDOJASGVAFcAg2GDazpO7it10kyvZuGEdwUqZ%2ByI%2FzVBPanKvdjggAnSt%2Bsow%3D%3D\"}]}\r\ncf-ray: a312269fea3e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2900,"size_decoded":3693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f617f52aae9979de4c834c69307ecd63","sha1":"4b9d51f4a48a5b7347d70eedaeecb461993734ff","sha256":"eb0c65aefb2e480997bbd4b0a7b97941a8af93a7cac98e858af3e17ff75995b9","sha512":"ac447dbce31aba06f6368d50b1cfefcdbbc7b00b2c88626767718a4fe6d7b7702c65327d6917c3fd50fd16f1e9d9dd6af7974c161d8bd6ad51015bff087e6436","ssdeep":"","tlshash":"19514e7a57185d7cd034be3c19990f1b9f71fe17564612a9554121730f728d4042e79b","first_seen":"2026-04-13T07:01:10.904608Z","last_seen":"2026-08-26T10:29:08.225341Z","times_seen":29,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/casinolab_logo-18.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.032Z","timestamp":1787740119032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/casinolab_logo-18.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 07:43:31 GMT\r\netag: \"69fc42a3-75a8\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHSQnPQd0fRw88kYexTmIoEsBxo8bXCm88qK%2BAF6fGmx%2BlbhziND3ntw7pDvKyvzRBUDhePOGW9qHCEWlEPdH%2BOuDn4OynW34AdUI7DymAj7MAvQ04snEh8neAE2WOjXBbP7rg%3D%3D\"}]}\r\ncf-ray: a312269ffa434c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30120,"size_decoded":30913,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5e11fe2d9db344c4d29f41a6d70c8c8","sha1":"e95148bc3da1f0286f4bcbf57b4f34c07d733ebd","sha256":"b924d6c1c8050b5c2eed44cca42103c7094bb70635445d0aaea6708fdaa63058","sha512":"bf3669c64976f353d85c330918e66101ddcdf059a67f5dac6ca2f196f444b04ba103ed0707c4a729acd40fee324f1a3ac66a84892939806ee680d3bc72f0acb9","ssdeep":"768:6T7djYZUOfDc2+6VAtIDNY/Y3gc+AJD7OQh:uylDM8AtIQYwc+6Dq","tlshash":"ebd2e15e5567a0ede628067c9747cf873d32be3c570e80e4c54379eaab5089c97138ca","first_seen":"2026-01-04T17:17:18.865715Z","last_seen":"2026-08-26T10:29:08.225925Z","times_seen":5,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Fat-Pirate-logo-16.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.037Z","timestamp":1787740119037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Fat-Pirate-logo-16.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 07:43:31 GMT\r\netag: \"69fc42a3-2796\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUiMC68fdKFdKcZG1jcKTk%2FpGPaTSusZlcbA0pmab4cAHpos68KSKUjuZqSu%2FN5H%2FzN3rw71lyNzsv%2F8FOpwdFGQ0f1KVEbb3TrVvPgkYr2gu1NDGyRcYoCnxbqaLblIQ%2BXmyA%3D%3D\"}]}\r\ncf-ray: a312269ffa474c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10134,"size_decoded":10931,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e64db6b0ec91a8953fcbfd36901cccd5","sha1":"cc56e5c74fa7cf244555bb284441ca0ae4651f59","sha256":"4423df2573864504ad521d7ffac196a815a00b5dd13e847ea067f1062291c63b","sha512":"2a5a6fcf9c451a97e46247065f09d5e8b297b49ffc7a8c80c0d7b99df880812c26981ff441aa57a1aff92eb109bdf47c987409555d3b1f1dc40f10c6c6d430cd","ssdeep":"192:ZwT9cKAJo9hSHQf5H4Q+uKTCf954yqGTQuS33v5uFJ:ZwTTVoGYQkC3Qj","tlshash":"e022cfb796fc69c8f253f0b3f0da375eefac6983036a0122104663370b13d86611669e","first_seen":"2026-01-04T17:17:18.887391Z","last_seen":"2026-08-26T10:29:08.226519Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Melde-dich-an-und-starte-das-Spiel-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.049Z","timestamp":1787740119049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Melde-dich-an-und-starte-das-Spiel-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:01:58 GMT\r\netag: \"6a16a4f6-2e9e\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KmPS%2FMZm%2FqaMTtrsJ3K1aYnsw4qJTxlPfQHXNgbwEmBEjaVkhaFWqxGRLfEMqSQ8Rt8nGTkMEgIE7de0CpSEEFgugQgJlKLa5O6aWWnXPXzY9j5tDrTniP34s1O47Eey65R6g%3D%3D\"}]}\r\ncf-ray: a31226a01a534c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11934\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11934,"size_decoded":12725,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"94e70413c84db0f8ea7bf4b500b31f40","sha1":"347325733d777c970fdb829138b3a47fa4574036","sha256":"45f3cf5b16ed190154e771d9240330454e38bac8025b7b448b49dfaa05da8586","sha512":"dc11e8bd9a123b283047f491da4f778b99c44f53935bbf20050dddfa937a4344509e078c51dec847924567f4b31300595f20d43f9f0b84239c2f5983211723da","ssdeep":"192:xwT66OnF/yDnPkIYmOMVbSrhxtXmKtGzYb/MoAmFTALqYoUexMiIboe7:xwTbGqLk7YVbSrnVm2GzYb0oAmFAt7ea","tlshash":"3632ae22533a8267e0a41f34a0cc5b82d25dbeb0d92b3257ca1523975d0ef9fd7ac499","first_seen":"2026-08-26T10:24:26.585028Z","last_seen":"2026-08-26T10:29:08.227083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/rainbet-logo-1536x1536.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:38.987Z","timestamp":1787740118987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/rainbet-logo-1536x1536.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 09:02:50 GMT\r\netag: \"69fc553a-84a2\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3D6Xb16pxIOz8Jbz2DrBrbkLa3J7RwYoyNI6dUVS7MpNkRzUx54H0Wgr57n76GQzDDsxRftbAiz8iLU7lU4gpdsGGhnOFe5UNa%2BOA8yGnJXJo6G2jVRmKFqU2lMtd%2FTZ6%2BfDmQ%3D%3D\"}]}\r\ncf-ray: a312269faa284c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33954,"size_decoded":34747,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"989fe18bd922ec2775e332f85ecc19e2","sha1":"22e3fcab78e9546f431d0b14673531e020b5c8a1","sha256":"649a01b2b7293e65eadfd03f1896455a8504f6b0f15dcf28be3d9db3886c34c4","sha512":"7a08bb21a89a003f3f2712220f428c38536a6da5128cae324ad33d2704a7cdff3ee202d720bae38be80e5d46c917cf29f1db79d3d1714bda7a9109c10e9a8567","ssdeep":"768:tTMDMJCd4NNCyilNIa9sgsgbI2hucxq08Kr1DhY2d9LGg7cF:hJCGfEyPgsS/91VZLGg78","tlshash":"80e2d0e50b991050d60272ba7746260d95ba74b44f23ed61eea7c274df8dcffd222780","first_seen":"2026-08-26T10:24:26.563255Z","last_seen":"2026-08-26T10:29:08.227754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/5337293547809929544-1.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.035Z","timestamp":1787740119035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/5337293547809929544-1.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 07:43:31 GMT\r\netag: \"69fc42a3-11a6\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTAokgirlgZb9R%2FcKTLAcG3nobw2v03vXV%2BIqcHb3qcyJEG14zQGvhlpMp28X%2BBMM%2BW1m2KpDtGgmOq%2FAgA9XErA%2F%2FMkE9Pd54JGiYaMpqKpPSd7xMnjirqwDCK%2FCYYepNcLBg%3D%3D\"}]}\r\ncf-ray: a312269ffa464c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4518,"size_decoded":5320,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b73c911d0358ab5ff5ca0ae102922cb6","sha1":"06048e9ea1a32eb1f0f22f42d9b4d22dd40c80dc","sha256":"a316245a0572c45d633aa48b55ed230f3e18f237478a43b23579194b25f36a51","sha512":"04fcdc15df3c301c7425e38af97dd9d2edd9dd19e07cf94f50c416b5cb2558396107d3e3b82acd716e008be445a5e7f247aad3bc5aaa4cc57ed61c7ed0c27b48","ssdeep":"96:sElbw+i5iwug/nkbQXtGznffHhbapo89/1ETsN4qbj5Lrn:5w1iwuH6czffHhbT8B1Eu4q/5Lz","tlshash":"30914b2aa7bcdfc8ef54257528565304c35e382486dc350676ed42960e6cacbb9be883","first_seen":"2026-01-04T17:17:18.882378Z","last_seen":"2026-08-26T10:29:08.22839Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/choose-betting-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.052Z","timestamp":1787740119052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/choose-betting-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:06:06 GMT\r\netag: \"6a16a5ee-3c58\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N99BVx5rjj0b4i5s0SkvTWi5X3Mr%2FBV7KVtW4F9fxMerYjzFcN4Wu1geq14E0Am9JAe7Bmcy7zanB6S5qLri6OTdoPLJeT%2BPkTzaYZZoqwrJXEsS1Jb7wLuH2Osvm6pEQ6B0aw%3D%3D\"}]}\r\ncf-ray: a31226a01a554c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15448\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15448,"size_decoded":16239,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b9672dd043838bfd6e873f775d92184","sha1":"6ef40d95f81bd58b5de6f2a779d9ade4daebbf48","sha256":"2c8aa1613eeb2610b644fe7717b89055ad5a94a5ed8eebbdfcdbed85304eaeee","sha512":"867d61ed434cd90b224adc77acca33ad9ef4271aa5b940e07c4a2cca11ba7974f4646a7ad5c20fcf2eac6361b2abc2fac96100f7ccb81bd055d3a19687d161ec","ssdeep":"384:RwTN6761J8Q+3DiQHrtBAntQpWvC9p1cDT1vChW/J6v:uTku9+iQcOsCnWp6h80v","tlshash":"9562d06ba1690a44e03a0e7c5aaaf7b47077a5978794bd6f20d697f303a21dc5d0ce03","first_seen":"2026-08-26T10:24:26.591771Z","last_seen":"2026-08-26T10:29:08.229058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Recommended-Slots.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.055Z","timestamp":1787740119055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Recommended-Slots.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:01:49 GMT\r\netag: \"69fc46ed-4344\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6A1EGH4plQPW2NTqdMYP4%2Fdc%2BA9OKYs9e3rVRkBTlQy0M2jrDHm7m1p7GDPZq1S6FNqRBb1N4U39SkHyDwOwfZHNe9AQzKaxyPC5fmez7YchQ7KT1Pa2idYCqly8yE5oEiOSuw%3D%3D\"}]}\r\ncf-ray: a31226a02a5d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17220,"size_decoded":18011,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"abb86a36ad094e314d96661883a39d4f","sha1":"98d1bb153776feb5a10f345c9506999bfac29cef","sha256":"8cdd05832d58728157d60fe4425ca844a6929bd1b20dfa047fb1a3ac9a8b5c65","sha512":"32126a324980220ea8b456cb62385779a22c396f7071a7043cbd8280168888bbd5212c08e55281f465ec59f727c8e1a03864f1fe88ebe3e266895c63a6c89390","ssdeep":"384:WwTnL9KxA4ZBASQTcaDwD1w1WcLjQqql7iz0wWqyM1W8EHhda1:vTnx2ZPQQaD/jQ7lQ0HqyMcH61","tlshash":"a472c0b277c536eed1241531b5950e02cb339c7192e73223359e28ae0e94fad7dc2d16","first_seen":"2026-08-26T10:24:26.64519Z","last_seen":"2026-08-26T10:29:08.229648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Experience-Betting.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.060Z","timestamp":1787740119060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Experience-Betting.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:01:49 GMT\r\netag: \"69fc46ed-555c\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boyLs0qWo0dklONwAPd7gOA6cHFX2mITVTUFAK8DOKZ0f%2BhbqD6XHVKeEFq6i2fZUIOjY2k9ec4bbqLef%2F7N3Xlh9KsMXTdH4MFXF5hxZ9031%2F2mDIGD9N42mmvJFUJzuYwt9A%3D%3D\"}]}\r\ncf-ray: a31226a02a5a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21852\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21852,"size_decoded":22645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"affb416cbb7f6ddfac7c23aa53431d53","sha1":"96a023e7c861f776530f5ba4e04d968956677d5f","sha256":"bed287e84fb6c62f9c2dfc123c9a4740ef7f6c8d33226a7da13b40c538c412a3","sha512":"7631aa944a54dae1a165d3c207bc0958bde63cbfc1b62cf07765e3df4f34c46064f4360bddbd568435b334a4244b673cd88d85dbb56a8a89c209b28a665eca09","ssdeep":"384:owTMlEhZfGJmx824cH5O5quB57pgHY7hl5OtiZ9fFi+bOvveEMvHi:NTj7fT8vcHgwuB5OH0lEgZ9lyvvHMPi","tlshash":"61a2e1f1932295aaf124fbfed8b90daa5a093c480b14c75ff25fe614a6240f142c960f","first_seen":"2026-08-26T10:24:26.641572Z","last_seen":"2026-08-26T10:29:08.230229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/E-Sports.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.041Z","timestamp":1787740119041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/E-Sports.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:58:02 GMT\r\netag: \"69fc541a-2924\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbWM3vtSocH6srEBOp%2Bq0mhdd8e6jJX9biZU3QqARmeKk17kCPEJxZMYbqqCbanUc9LfWUyEbIryb6xtZxrFtn%2B86xh4fVGyTJLpDJNb09c%2FptlVgnt6lp0onkIulMRL4vyFLQ%3D%3D\"}]}\r\ncf-ray: a31226a00a4b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10532,"size_decoded":11325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cf5ae93a309bfa604e2c523897cb623f","sha1":"633a795b27e0bbea81881946bc4ffcf3387bd534","sha256":"a7ef699df73051fdb009b245eac7eae5844af3e6c37e8f348af6590b9fceb33c","sha512":"2890583219192ce1b5e34c3901e9152434c992f601c347bcc495e90d35767a761df5fa733c7eadce32b96188b3a065cc0cda9ccd67cbc633392ca175b3e111f2","ssdeep":"192:sUwTsUYx6pDykYWEL8iuDjRLt9p1oc5/EETQEsxsQ4U+WxwMCAwCG+XrI2uVCp:sUwTsUm6pDykwAiuXRLtraY3QZx6hgwq","tlshash":"a522b0e37b5285fdf16891b20370db2edc2a4a6f2db5a9dd0281953291d5cf12dcc852","first_seen":"2026-08-26T10:24:26.59711Z","last_seen":"2026-08-26T10:29:08.23085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:38.999Z","timestamp":1787740118999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 13:05:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a86fba7-13f3\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZSc2YHC6c0FDosUS%2FcqDUaYsuNR7HpL5ch9KqYvs14mCkO8w9OP5lh1SuRU9GICiNb7SYS7nKC34xPRa7CyLHFpKLeExvcJtl6nBHJxGBecJQHQE1fItriV9oiTw49B16IK0g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a312269fba324c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5107,"size_decoded":2683,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-08-26T15:45:10.615839Z","times_seen":2171,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:38.969Z","timestamp":1787740118969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 26 Aug 2026 10:28:39 GMT\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3408,"size_decoded":1120,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ea4ef1b58461cc811a47cc9fdcab61a1","sha1":"155779c0daf2ef7c7f64ec41edad480c09da941b","sha256":"40522150a1e943dad5c88314d6a9c235b312d2d6beb893e8cb6b46a6825ed3b2","sha512":"26cc96e07b4c262d39d35758075140d1becd6980401a612d83b34339f35dab7bb2635c51e914a7d07c7f82971ae109966b569263c029e7a275d1f96a6e4d5e23","ssdeep":"","tlshash":"8b61ac81046bb114db572cc122cd7e32ef1f619164549874aafe2888fcaad6e5361b4d","first_seen":"2025-09-16T12:22:54.356027Z","last_seen":"2026-08-26T15:43:55.749529Z","times_seen":288,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:38.996Z","timestamp":1787740118996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 28 Aug 2026 10:28:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgYl2UjQ79hxgLX%2BvhcWFMAdGRLpPV2EI5jvlJ3PNaywjSFY9V6UQS22C7yLBZZEVLz9Qw16sWZ%2B1aN7DQr%2BWLmMCKjvWe2UFAUEW9A5PzMn7ivofxLWF4EDiGUkuayDcbwk8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\nserver: cloudflare\r\ncf-ray: a312269fba314c11-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-26T15:36:40.258715Z","times_seen":425959,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/f87cb9f1-78b0-44e8-b68c-9f6406200cf7.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.033Z","timestamp":1787740119033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/f87cb9f1-78b0-44e8-b68c-9f6406200cf7.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 07:43:31 GMT\r\netag: \"69fc42a3-1fd2\"\r\nexpires: Fri, 25 Sep 2026 10:23:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXT1cynvAglgdKOO%2BTau%2BOi%2BP0YOoj6kpmXGt%2BuqmW9xhvd9sy%2FNuzeBlrIFQ7bZ2B%2FvJh3lhATa1dbDW66mu7v3wYlxBnOEJerzHJrNxtsYlykZMqoaO2FwFVaZgSSFDvx6Lg%3D%3D\"}]}\r\ncf-ray: a312269ffa454c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8146,"size_decoded":8944,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1798f05dc1f149b0fb1333a921709fa2","sha1":"3301bbfef6333947783bdb9eb55dbb9c3ef3d22f","sha256":"92fbb1d3c47b3ac7eebbe4274893d37794df086e18271c4787f79c05faff0cb4","sha512":"26873e04d86ff0bec0db5fad937623b4b532dadab84dd2f6ccdc101d6776013270259e3b18c7ae48b2203939a0d8d6d60c8fafa470b46a186148f40211d3715d","ssdeep":"96:aElbw+iZd8n2cJ5tBy1f0bYHv5GQhEPNOxMhFoFs3Xbas5H6DtpVEpLdxd04Tsg1:/won2cJ5tBq0grhHqYFUms5HwE5XZEs","tlshash":"6ef1b5e743e47396e510e1bc2a34767ae9de2a63cf3e21822472579b1f498f0190973d","first_seen":"2026-07-12T22:10:25.121798Z","last_seen":"2026-08-26T10:29:08.233145Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Play-Knockout-Football-Rush.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.056Z","timestamp":1787740119056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Play-Knockout-Football-Rush.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:01:49 GMT\r\netag: \"69fc46ed-27f6\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFUKSJwHkZ6dQUHiZo8U28KLVsMilNUPML2kPXpkRZr8ct1kG2RjdVsOp9SbWYGxYnNshlK%2B%2B4IVIPoDB2LAhHt%2BSCoS1kE%2Fv2Tmnbq%2B4DBcP%2FiQFc1UJg1d0MYa7HheQuBKjg%3D%3D\"}]}\r\ncf-ray: a31226a01a574c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10230,"size_decoded":11029,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"061d5d5461305fbb7ac831be62ba6d4a","sha1":"87015bcc5399f549671a6be95060b5b3a53927fd","sha256":"a08783d406ed8dd1aa934bcf62b67f8e8b167e824bfd53e8ca5b3f256f1a211f","sha512":"ba5536a84d68cfbe064d428233bdf9b735aad2ebb9c9ad4a05dd5cafa720f6b7fedb62819e50c77b98dce3336df2144b798a3f19b9fe691dc292794bc3bd9e9d","ssdeep":"192:cwTHYpr7JPrG+CoMFYfyUMCHFN6rIXCnWQs+LFfkznwgm1Iy2+my8+:cwT4pFPaIMFYqUM4FN60ynWaFfkznwgw","tlshash":"c222bf126326e37bd56e0e7813d50311d2a4fa16678a92b3a0718e2430cb2db69b5f85","first_seen":"2026-08-26T10:24:26.614435Z","last_seen":"2026-08-26T10:29:08.23369Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.001Z","timestamp":1787740119001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 13:05:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a86fba7-169f\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvMG3EiVjy3Kam3q4rQ6M%2BgCI0MoAP0OfFGSMk1sPQ%2F%2Bup2PkOeWQRU6hSEj8%2FcdQ2NejA%2FMdM0CIoMPsYbWToOMeE%2FZhtenCjcKrHM45hdPf%2BSJqNAuG7jKZOhlylhJhvHt7Q%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a312269fca334c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5791,"size_decoded":3327,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-08-26T15:45:10.629494Z","times_seen":2153,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.003Z","timestamp":1787740119003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.1 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c535-30e0\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=df0JH0OLLodRuaxwpGCug8e5QMNFZjZIgOXCUvNYrsKydN3nIGkvZTG6fw15l3bNZ7JcqNHDRpMUI5BtK6qyxHHmMPa0l4yNiKJ1wSNEzbowM57iTPn9xvTsYnbNSXvo9h%2BEzw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a312269fca344c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":4326,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-26T15:49:07.873669Z","times_seen":231817,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/03/Logotype-2.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.017Z","timestamp":1787740119017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Logotype-2.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 12 Mar 2026 14:00:28 GMT\r\netag: \"69b2c6fc-aff6\"\r\nexpires: Fri, 25 Sep 2026 10:23:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZ2UlHPS6Qfiu0kLFihGkhqVsCwdZeF4P%2BZae0wDRyZYYJspRhrplcFd2b6p94TH09D%2FWh7MT9GRfBv61kfwSO8sjOONM521bHwyYstIBDJAUibI5DCNOhe6ecvvfncOxJAI2g%3D%3D\"}]}\r\ncf-ray: a312269fda394c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45046,"size_decoded":45837,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0342eca5c2b2c018d3cede6dd5575a7f","sha1":"24676b002848bced37ff4612f58c6571107d1aea","sha256":"e680daab0aaed47f8305394efd80e84dc365a7bdfea018e6457c0a6a61875651","sha512":"094abb9d550fc3db0999d17827166b708c3e6d60f609c0e73f2883f7a8a9c18d5bf265b95bcc7d1e31b89f9af5dccc1baf4d6889ccbe75346b6f2d262e8b3dfb","ssdeep":"768:iTHJQ4DN3AAfAzeS9BX0mawOCjWVSwcmA/paWuinhejIPGLNF6hl:EJTDNhfAzLalwOsGSrmeawkjI+P6hl","tlshash":"e813f17d6e60687af108303c6529bb5aed26725d2f2c2484e5268e2b855f0dc8b7f74c","first_seen":"2026-07-16T11:15:08.697178Z","last_seen":"2026-08-26T10:29:08.235259Z","times_seen":4,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Wette-platzieren-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.054Z","timestamp":1787740119054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Wette-platzieren-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:07:17 GMT\r\netag: \"6a16a635-3c8c\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6mLgZ2JyVANkx2Z6kPIS0yAmi6ehag2yaOs3Q9P89SqHQVDHMOFXvKtcU1aH6V30GRIX27YgsRiUErQCej5qIxfr0kg2FgKn2sxo6%2FVvc8O4Xo2s%2FjqCpYYJQZcMMp%2FxKRufA%3D%3D\"}]}\r\ncf-ray: a31226a02a5c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15500,"size_decoded":16293,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0836e239274dd284f40702eab6a8073","sha1":"7a7a83ca04d663a09d60eb29105c5b4ad7e160e9","sha256":"792b038a02eb784d953fe7fd63c4df1662ab771e68d5cc50784373674421cccc","sha512":"fa53ed35dc32816c767e298dc1c9ad61cec95c10125297e0d8c64a3ad77e27bbcbaef7af6df4486eb8f4445bdfe43434e9ffd7d1d5991721245cf20075c98f15","ssdeep":"384:9wT1RL0+llSLVLJL5eofUyLhSJrd5ofVc1p8yVyfsxOLEGaMXSxl:CT1nl6Vt5PttArd55eICsxNb","tlshash":"9f62d09586bf5684dc2415bedb61f04198ea919f840b873bbb0c0cc63e2448b215a4ee","first_seen":"2026-08-26T10:24:26.603908Z","last_seen":"2026-08-26T10:29:08.235708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T10:28:37.520Z","timestamp":1787740117520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbetsports.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetsports.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetsports.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvZULPHSUEt2QUgcrSSMNpIAZNdiz0QUEzETbOylu4E7z5mlXk7zp01Zw4sf7PfJfULEsXphzpVYYJtHWnRDrAnzmoehYPG%2B3G%2FssiVP4ZvSB4p1Qdcjf2jWz45NwX%2BGqQoUxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3122696b9094c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7:6.1.1","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190040,"size_decoded":38524,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"b3cb83228131798676368970893b2235","sha1":"acd2bf3e4ee6cdeb944bf4db4963f4103df83aa1","sha256":"44ff4906b180fe39f283488b13bddeff9af558272819903285b16c6b998669a2","sha512":"357f987a9eb6f5ed14ace7f929274dd19acf2a3cf3d445c152d6e49a6236e5f4644af1176d305e20b31fb42e86928f124ee9341054035d74a4aebde9698a280d","ssdeep":"1536:SdAjZrZtZYYvtoz8ypBcGcog3E1yFZ4qb77cM6fXn4YWHpAkhE16osGGu9QQBjAY:JljflozNTcGcTZ4qADOjosGGQQQRAY","tlshash":"fc04e96642d870e9b33bb3ac5d486218b56d9003de0386e8b4eec25d9fc6f954677b0c","first_seen":"2026-08-26T10:29:08.236291Z","last_seen":"2026-08-26T10:29:08.236291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":12,"connect":17,"send":0,"wait":964,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/themes/starter-kit/images/rating/badge-1.svg","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.019Z","timestamp":1787740119019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Mar 2026 15:01:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a99adc-5fe\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4%2FWuYhe34FsZXSiqdAcDUhYjH9b2auvbh%2Ftz36XdTlOvyXs9xxdB1dB%2BKKGOrzzuevg%2B7RgnZoFsA2%2BgmCC9ujmkydr9paPGawgnGsD33Nb06Rk3Iwz0YNZ%2FrQ6D1AAV9QYqQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a312269fea3a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1552,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-08-26T10:29:08.237162Z","times_seen":81,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/themes/starter-kit/images/rating/badge-4.svg","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.030Z","timestamp":1787740119030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-4.svg HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Mar 2026 15:01:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a99adc-5fe\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVvvyDxVT9hop9kvjMJrT9WAE7D%2FFJRdpFyXMjk5GNfELVjs8zIIDy2ZkXgnTf39HCe5clU9xtjNvClKD3Wq1Ou0nj7IiS6lIAsgKmKULS29fRo%2BHYBhiFZbRQwqWzAG5uLMhw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a312269ffa424c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1540,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da49c60a038c21ad060f0b53ff910426","sha1":"174fdc729062994bb104f00c9c6072a0cf4faccc","sha256":"addd89150ca262be3c0335ee993d4559fb1d5ce30ac6c25c6c3bdccb7c49e9c5","sha512":"38a85e0737612e812633a5b3f7f66a8bd9609ff6d24011b479ad55027f61373b54cecb7750d75d45fd2765931456920866eeafde617bc6e6d018cdc206d072ab","ssdeep":"","tlshash":"cd31957ee10d2c2af12885bcae52d478047abdfb4cc2000044e1b9abd0a24c60cebe5b","first_seen":"2025-06-05T18:04:56.85468Z","last_seen":"2026-08-26T10:29:08.237667Z","times_seen":46,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Verfugbare-Sportarten.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.040Z","timestamp":1787740119040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Verfugbare-Sportarten.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:57:06 GMT\r\netag: \"69fc53e2-2b76\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ni%2FTAQgwDtT%2BNsKAabGO8V6fABCkNk0%2FITNbRDhinB%2BFYfWEChGFH4GxyKEKrKlmrJK%2BY1HthiyR%2BeAxLm%2ByeZcCTVpvcRrRU5fiujyotaV3r2Lrzvn9lLsG25DU1aArPQTdBg%3D%3D\"}]}\r\ncf-ray: a31226a00a494c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11126,"size_decoded":11927,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4bf3e891141e46f5aa1ff7790bc6cea","sha1":"6b4411695d90cece42354f3cb06b3fd98f3aaf50","sha256":"5413b64dd8529d58f36b9bde7c415da5142528306768d0da90cedf387f65a966","sha512":"c4fe1e6a76bde092a096a7512aeb9b95c6de8bdbbb52ee29dc2c9c06627302915f40cf42b25f53b50ba73b8d66b0407bac7615952c946fdb868bdadd4d7afbb0","ssdeep":"192:1wTsU4Fb+KZCbxmiKmEDjAsPM4U1FtZBPHoRzIjYCy1uBtCRMApcOM8fdj:1wTsUCbWbxmiLgjAL4UF79HQz51uGRMs","tlshash":"ac32ae3253d0fb0dd38335fd08804147b1aba99acabd8b53864d2c7a6b29cc6dd59683","first_seen":"2026-08-26T10:24:26.628619Z","last_seen":"2026-08-26T10:29:08.238158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/live-Bete.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.058Z","timestamp":1787740119058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/live-Bete.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:01:49 GMT\r\netag: \"69fc46ed-24fc\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFwsV79OTYETee1ZsWvKEes1sJ6kdrYMrBuMiw4Dcy0FC37NfmhpgPWv1MvehWIFEahayCy2rL7PIeV7qEXODBApkeHsl36IcGlljuIWryOiUodFUrU1mwi1TzkEA7wr0kFuIw%3D%3D\"}]}\r\ncf-ray: a31226a02a594c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9468,"size_decoded":10254,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aea0e0345c039a4630b7fa54074eecb0","sha1":"8bb06ca3de465210a763395b80977e1289b4869a","sha256":"4b61c25b1d49eb1a7cde0c1462d67ce1f4edcffbc30485f6b8263bb71ae083f9","sha512":"5de1dbd96335cd0a617eec8f20617fa0e17597facb914f8c47574ad6ac0d7c49a197bbf0cd11df24f222ef4dd955d6ad8935cf2cbca611966e0a660e253b8ab5","ssdeep":"192:FwTHxuqZK5z8GkUqMqN17b7O0ycu+isC/RkYI4IM8xhAUB8:FwTssK5obMqnv79fRbC/RkN4IbxbB8","tlshash":"41129ea1160d8ff4d9b6f33cd0da2b42d3e8ae149df7d362470957029ea6a849133006","first_seen":"2026-08-26T10:24:26.640032Z","last_seen":"2026-08-26T10:29:08.238714Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/site-reviews/assets/styles/default.css?ver=7.2.13","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:38.984Z","timestamp":1787740118984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/plugins/site-reviews/assets/styles/default.css?ver=7.2.13 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:32:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c543-7691\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3NyQbClj5kaZk2c7%2BIT8CzePzk1KjJVz7cV4ZZZYMtjeTLM2V5X3gu4H%2F4f6SmFE%2B5p5nBoTyImzVhH%2FDP%2FLLR1BSufKIwd5Jcyan7ZAUvjJSJw%2BPxezWqJJQlm6GmJZkGpuA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a312269faa274c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30353,"size_decoded":6650,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30348)","md5":"cadcd88c2b50719913dc9399b152246b","sha1":"36d8e2583525e1ea387ef87559eee2d6e6c70bf2","sha256":"9babacb0d4d96f6a146103ec93214179c5f3a5fedb9fd4abd4f69bf023862977","sha512":"fbcb648b7d62af2a6f9c2a062b9415d76464722598dc1557a1092957493c5cc8a7d2e6733968e31456ca6caf883f58c9d0471d71f4bfa0e301535840d3b2deb1","ssdeep":"768:rGNlIy/Z+hHMs6CywLT38RbzwlGyHBjNjgG0W7LwcxmBN1P:aNxZ+hHMs6CywLT38RbzwlGyHBjNjgGC","tlshash":"9fd24358fd38f07c9a13a33bb7d9a3ac101a5c04e9122766a25ba47c47c7db71632f58","first_seen":"2024-12-04T20:32:16.192995Z","last_seen":"2026-08-26T10:29:08.23927Z","times_seen":1994,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.011Z","timestamp":1787740119011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/plugins/site-reviews/assets/scripts/site-reviews.js?ver=7.2.13 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:32:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c543-a660\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGtGgbEL2Rp%2FEuK2DDaZZuC71W3gYet8FOhYNa%2Bd506M9Q5IoxxkiSP0HlDKV5T%2FgEV9mEVcRRUKO1u9x7LQv89rMc7pKcEOjn0O5mGMfMc0TQTD6Ozh7P6MT%2BnlslwxiFsHAA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a312269fda384c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42592,"size_decoded":13925,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42591)","md5":"966eee900d7086888c6bd24e345ef1ac","sha1":"491665f686c464cd80b35807c865dd9ba9586c44","sha256":"bc595c8641415c3d16715855939a7a0edfc323acca2a3c6869effa7548e05156","sha512":"5d7152d312ca977277ad81dc638c392fe60616e426dd3867bce3d001dfb541689374d17ce16d39ea3a126ff84b1e2059ec8c028afde62a69481988846792dfa1","ssdeep":"768:Z1m1pnPP6/DE5wVrjS/zP1bjV9YIt9+scklUzJNw6KtC3p/8kUr7W35L9XIa5zQa:LDESVre/zP1vV95t9SWgLt27W35LP5zH","tlshash":"7a13d9967356b4330aea41f6a0365382b332618c7805805cf478ecee1e69d8a7777f76","first_seen":"2025-03-01T11:52:27.461641Z","last_seen":"2026-08-26T10:29:08.239795Z","times_seen":2240,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Wahrung-auswahlen-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.047Z","timestamp":1787740119047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Wahrung-auswahlen-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:00:53 GMT\r\netag: \"6a16a4b5-32e6\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TmL2fvTAmkfQd211KY0ZXEEbRF5vJQ0B69PEBGC0n9q%2BESLQF8WyJCAqypD%2BjbaUne0g8NWQvMOktagCoLf%2Bi9WO8g1IcYA8vsOrWj0XQQ96gJQWSl1dqCrY6LTg4hJphnLVEQ%3D%3D\"}]}\r\ncf-ray: a31226a00a514c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13030\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13030,"size_decoded":13823,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e67be71b9f1be4a459127be2cffc5f2","sha1":"0201338d46f97e9b2db2d89e045cc5fddfda2485","sha256":"adb39b56876619faf3bbb06c2983b01235cb84f837ee0e66c48ed6ad21863f92","sha512":"99106d99d4dc4513369221607347c41e0e438de2e58da211b8be1832cf84231a57ce72198e1fd6fd17d191cfb3c836b11d26fa7aacc5790cace4f5fa54723e11","ssdeep":"192:lwT9Z8PETDGSfafvd74a7/DXQzyQeb1oe+B28UiDceyFHkNYGIqMjDOd2hjbCR16:lwTaET8xX4QeT+HkKcMj8Wb0afQNg7","tlshash":"5c42bfb8823dc971dd6db93d001aef446f292a73c7b8eb904e65d211ce6a344c0ae4d9","first_seen":"2026-08-26T10:24:26.581904Z","last_seen":"2026-08-26T10:29:08.240278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Geben-Sie-den-Einsatzbetrag-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.053Z","timestamp":1787740119053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Geben-Sie-den-Einsatzbetrag-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:06:41 GMT\r\netag: \"6a16a611-41a8\"\r\nexpires: Fri, 25 Sep 2026 10:23:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suHrEKX6NKaQTsWGU%2BbshjQWmXEGA9Aq5ULGdLHrAM4S3yvx4rJ8Kw%2FgZIG93fywQdNBHgbpm%2BlMlShJupsJojKkjAKiws%2BRG4XimyS6%2FEWTMAiZ5RWdm0MiUpyQA0Q6I8mgmg%3D%3D\"}]}\r\ncf-ray: a31226a01a564c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16808,"size_decoded":17605,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d0132816de5586e99461caae507eec3","sha1":"7bec98b9c74e4d7728f37205612d8dfbc8e199c7","sha256":"c2ced091c620fd4b4483b0954f13f6bd461b3af47d70891f399087fcb66adc0d","sha512":"220408b514b94d7d2fae5f70282a7362f5395a8c01b6fcbfdafa4441ec8d287004e8a17fdd4672d3b6697f48014df8038b961c948785b391feb01b5458a53b06","ssdeep":"384:UwTvsxv5UrJ85QJV37drjg1fvBP02fkoj1dxJTq:RTvwxUrJS+VrdrUZvxrJj1Rq","tlshash":"6e72d00353922faadf5358bd0ad545914fbcba7f29068013ab56a7902d01ec6f4f6783","first_seen":"2026-08-26T10:24:26.600974Z","last_seen":"2026-08-26T10:29:08.240848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.207Z","timestamp":1787740119207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetsports.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:26:46 GMT\r\nexpires: Thu, 19 Aug 2027 13:26:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 594113\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-26T15:39:12.987303Z","times_seen":25050,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":22,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.209Z","timestamp":1787740119209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetsports.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:26:46 GMT\r\nexpires: Thu, 19 Aug 2027 13:26:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 594113\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-26T15:39:12.987303Z","times_seen":25050,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":27,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.006Z","timestamp":1787740119006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.1 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c535-348c\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pQaO%2B4OE5w8XIM6bvGfp2CYAiXEMEQ72qQ%2FH68d3Im5kBuwGYPSrQ%2BHVg2%2BnW4HHCoHmjAD6f4kxPBITAB4dWMhJ%2FyfmAydaKxja3HX9DuD6OvPuVnoCQo%2B48Ych%2Fp6SegaxA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a312269fca354c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":5100,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-26T15:49:07.890291Z","times_seen":238677,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Wettoptionen.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.038Z","timestamp":1787740119038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Wettoptionen.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:54:34 GMT\r\netag: \"69fc534a-26ee\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4m155xPDVVairgayd7U8I9nV%2FuP%2F2n3F224dEbYdkKK2%2FpmYg2i1RoUidfZYVHe2%2Bz1ybVJOSU%2FHLjV7m9o3Jq3vh0bgvTVF%2B9vwCXJ40G7pwo16bMKl8x5ezzOxBtUrvHvnlQ%3D%3D\"}]}\r\ncf-ray: a31226a00a484c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9966\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9966,"size_decoded":10764,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd1961e11d6994294963b1c6ff74f81f","sha1":"5ef0e68e5fd02a69905652f2d7d5217f1bbbe016","sha256":"d32b434c728ef5e622449346187355546b5e44617754678becb7b12c8e19095e","sha512":"62714aef211a4272764fbb0d69c83cb63a62baf0133140817fdcf3b883c381147fd3597ae427f8a776dd2102c878015322ffdc2fbe5861a0d3e76a15169b49fd","ssdeep":"192:cwTsU3qYV2j4ANrxPLk+TRu0e5//M/RbFhLPieI3rU6NcJ8dGj83lJd:cwTsU3G4A/PY///MJjIrUtJXovd","tlshash":"d922bfa9f74f552be6350df50587a43beca1c76066a22ed9034c04c50a64ec726fe31f","first_seen":"2026-08-26T10:24:26.594438Z","last_seen":"2026-08-26T10:29:08.24189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/themes/starter-kit/images/rating/badge-3.svg","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.025Z","timestamp":1787740119025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Mar 2026 15:01:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a99adc-5fe\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oj6i8EoE0U9CT2M5MrHugr9Xc0wiDBFWpsATCkkjG5hpvR4C2QQmvukFq2U9%2Bt%2BHLwQ6GHYY%2BnKyXRr9EvZ%2BXMzZbC8z8i273gmXgYFsY4kMeHuu%2F9kjNHkg0t8kDmwv0%2FZY%2Fg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a312269fea3f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1555,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-08-26T10:29:08.242419Z","times_seen":73,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Live-Wetten.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.042Z","timestamp":1787740119042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Live-Wetten.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:58:57 GMT\r\netag: \"69fc5451-4d5a\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mz1hQeJzZLOUk%2FhvTOhR6C%2BS7jiitYy1nKqp5DeNZ%2BJn6EMkwTP8C00CLunaL1RopMhgEE2P%2FhLtNjDIsfQani8pSK1c3V29XX1E2pu3Q1srxk2OfOw1561jvN2UIT5UReq1g%3D%3D\"}]}\r\ncf-ray: a31226a00a4d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19802,"size_decoded":20597,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"777e239b0f37f9415e02edde6320d1c9","sha1":"2f30d4478f757fb2577c2f3e5beff6d3dfce232f","sha256":"ebbadd1281f7760c14cc603bcab54f10ca7d0025c1a4e92a7f45dee368a53563","sha512":"0fd7d8c90e7443882a66a22a8ad4fd69954ff2c612f9c97bceb06867b109785f71db85831a8efd71dbe374a969452bacdaffce163e982af05b8b59e7ce2fa91b","ssdeep":"384:HwTsUEhMEQVndA8RWhC/VJPDA+4ieMsrMbRBL5cKjbQxs:QTiOnp7VNDAseMuMb5R","tlshash":"6592d0a7ba5cd748fa6c70bfd96a0602c3adc281dedb463cc3c513076593961a8d808e","first_seen":"2026-08-26T10:24:26.643392Z","last_seen":"2026-08-26T10:29:08.242913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/My-Bets.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.057Z","timestamp":1787740119057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/My-Bets.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 07 May 2026 08:01:49 GMT\r\netag: \"69fc46ed-27e0\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mk6uNPHIB710b2ZH1%2F9B7%2BWwKPi8UMPzAxHcofOAeCEahnbILNseddBdN9U8zf7zIhgJ1v2ABrgBv6juIW5CZ6lmEithh%2BcBROPqg%2FyCXqJN1s2Lqr9lak7ZjxE5NX%2F0r3exyA%3D%3D\"}]}\r\ncf-ray: a31226a01a584c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10208,"size_decoded":11005,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75cae0860eabcad9c07fb435af53be49","sha1":"d0a51a48a3972a5fbe3280ca639dd5001cc7a85a","sha256":"d1a0d37ede27545907abbe746564dc36a6dd2bf195b12cd525000dcff645fbb3","sha512":"7f265875ddd6c9c277935059472ffe51f65546d72edf7c77086d374c4338093edabe2eedf20ffe160cf437c516d2803e2a0a5312aba8e1b0593b8e7f5b935958","ssdeep":"192:uwTHfdoM2drqlZzTbUf2P6ZRaCOM5XVn3YBc6O6D2fTxqEuRrJMAB:uwTzKrqlFTbUf2P6ZR9TXZh6ONr4ETAB","tlshash":"5622bfa5867a39dced6207b497950fd00b53f24bc2273f99a1f9b6896d20ec07531089","first_seen":"2026-08-26T10:24:26.635679Z","last_seen":"2026-08-26T10:29:08.243387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.008Z","timestamp":1787740119008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/js/main.js?ver=1.0.3 HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 20 Apr 2026 14:31:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e638d9-2f57\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=peosxPZq0zSTY5fMT38AFeRFvYWCUAytBqUx4NABACjHSLVsBc4m0puHQnkEB4H051C%2FCM9jbTNWH%2B%2BdgCaR%2BGR7G5Dzh5EqM%2FKx2SIMeDFjdmKjVGjPHeSJL9S9p4%2FE73QFBw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a312269fca364c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12119,"size_decoded":4109,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4059), with CRLF line terminators","md5":"84b71e1835eb9020c7ca700d1aabbf37","sha1":"dc7dd60e16969e6df9d55ca14522ae8ac23707d0","sha256":"0a218b269cc8ae4a4c3b0367add047275973fbe05b152812268dd46bf9b7b82f","sha512":"e1bb3b4a7c978c8ab81c13fd907a9f59ee38d1959af69384c9f06cb4f94b6b3c24561caaa4283aa14177e63f9d3a2a68d97fb25c53174269ad10b6db66bbade6","ssdeep":"192:aB6Lk0IbL9op5vQo6PeoP0vpRJC7lxBFKJ6TQxTEvmgiE/mqjVdGg9sqU34ZOApw:140WLEIo7w3XtvF/mqRdGsgAzItj","tlshash":"e9423e6562712c3a46b26a224e371b05fb3850636542c26e3e1fb68c1ff08918792ffd","first_seen":"2026-06-07T17:05:58.096609Z","last_seen":"2026-08-26T10:29:08.243902Z","times_seen":10,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Akzeptieren-Sie-die-AGB-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.048Z","timestamp":1787740119048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Akzeptieren-Sie-die-AGB-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:01:26 GMT\r\netag: \"6a16a4d6-354e\"\r\nexpires: Fri, 25 Sep 2026 10:23:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diLusPm2Ie4mdldljvqcxEt0ST0M0PjpHJWuOMKGxgv%2FwjS1nQU%2FJn3taTRUL5kMMz4iQzqPTqpk1uMhax%2FO1BowuzTfbiz4RcWFj%2Bk96cIO1UbDPFu4PHBg1moY%2FAeWZUxIhw%3D%3D\"}]}\r\ncf-ray: a31226a00a524c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13646\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13646,"size_decoded":14443,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"990dbfbec513ccde218548ac2f926f1c","sha1":"e360f1a49becbd6daa084145d135e4d613f18cec","sha256":"549878d50381fdd4ca07083318b56d39b42d9c726a91ad958e302c7df29153f1","sha512":"20ecbd7741c948c798249769b6e5cf43e4a772292494f971cab1840ae0dad956723794c654a5c7f042089f6fbe89a09cbf122117ded6bbbab345e76326cb9819","ssdeep":"384:uwTFeU1KSvqMcyLaNk2LVTK+nLSTsT/6blJGW07sHi:XTAU1a+LaNtBe89/6hJGW07Z","tlshash":"d152affda7912b9ec80ee9b8d1892e17a77e00935cb11243884283a97b4f57429fe355","first_seen":"2026-08-26T10:24:26.618789Z","last_seen":"2026-08-26T10:29:08.244353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/Navigieren-Sie-zur-Sportsbook-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.050Z","timestamp":1787740119050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Navigieren-Sie-zur-Sportsbook-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:05:13 GMT\r\netag: \"6a16a5b9-5104\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7voodfN8Rry%2B6lJgy0co%2FwEFZE1%2BIIZib5OG4OYxEgXUvKScuiUNLJ9TGGc5LZd10jtOTNqn88w6Bz9DiB6WYZEtS49g0sS7yNdC0MikGMIy8MP96G4ImXu1hNfeV0zSWeRpig%3D%3D\"}]}\r\ncf-ray: a31226a01a544c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20740\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20740,"size_decoded":21533,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd8d56b52e2da13a6639569c7e54f143","sha1":"5921a674d56ce7083d4aad96528d20f4d6d76896","sha256":"a516123dbef45f684ca2ed948d6d71eeb6fa02cadd818d0d8bcf63e63fa435ee","sha512":"e9177eec1c420f5fd2a2be26173ce0a3a9e284933ad3b5d22d11f1dbeafd38238bdf585ab090cf17942fd631f0ea14d306cf251ed84f602350bd85ccaa7bf7f8","ssdeep":"384:ZwTJSVVbT1RPWYsRH6IuuFBf90kdJOxHMKylU2Q5CWVrGMy5lWchK2JUDwKT:GTJSVVbT1UBRH6Duzl0eeMDlU2QFrGGr","tlshash":"d992d03b3745b579f4d2aef61108ae5cd3d71722ceece35dd04a421c903a5c1a61c69e","first_seen":"2026-08-26T10:24:26.588658Z","last_seen":"2026-08-26T10:29:08.24486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/03/Favicon-6-300x300.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.326Z","timestamp":1787740119326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Favicon-6-300x300.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nCookie: p2_popup_unique_name=GVgRBVsdH0oIBEsMGBcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 12 Mar 2026 13:24:39 GMT\r\netag: \"69b2be97-1ae8\"\r\nexpires: Fri, 25 Sep 2026 10:23:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 286\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvt4tzXphTtoGczN9LnH6l2EqUDPjU83DNI3L%2Bd6D9gcvVssZVQzuAFbrVZr77swq5a3hiicGlxnAta3ISrZ11Pa5VrrceONgxTZdyKf%2Bpa%2B6c31rManUAk5JR6SHb9lekaPMA%3D%3D\"}]}\r\ncf-ray: a31226a1ca804c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6888,"size_decoded":7683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aeb559ba008584a37d09a100ba72b3ee","sha1":"d9d729f59e5f7966cd5c9cde493455c366e93148","sha256":"814a7a31ff80680c3aeab8f63f084b6ace4f90c3b4c121b1dbb901f8d6305ad7","sha512":"5c1a0170323990cc9c1750e091c6730b9a5e6535829ef187a1684225840317ea290d4a049113b8d9d5b796255b5316981eb14a71152cf4a27dd5ea8cbea36583","ssdeep":"192:IwTrSmVrGqJAijukvUrk/pxlEeoGjOQ8j0fm7Ty/yRV:IwTXrzJpjulw/TyGjgj0wyI","tlshash":"4de19edbafd497d3d9137ab9c02b078893497fa88d6c13244588ea3f06106d65c6c8c7","first_seen":"2026-08-26T10:24:26.647398Z","last_seen":"2026-08-26T10:29:08.24537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/themes/starter-kit/images/rating/badge-2.svg","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.023Z","timestamp":1787740119023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Mar 2026 15:01:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a99adc-5fe\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 287\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3xkiQZ4ImkKbYJ6NFohEidnna8l4vNZVpAuGcWcuFNBQ6ExTCqDXLo8n3LIYvfNOY4yHi%2BaW3wFyeVqQLSICTmz%2BoGrJlKGOrmFWA2g%2Bes2V92JzXmepWYCR08XEQlA89%2F5oA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a312269fea3d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1548,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-08-26T10:29:08.245897Z","times_seen":82,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetsports.com/wp-content/uploads/2026/05/E-Mail-Photoroom.webp","fqdn":"rainbetsports.com","domain":"rainbetsports.com","tld":"com"},"ip":{"addr":"104.21.83.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetsports.com/","date":"2026-08-26T10:28:39.046Z","timestamp":1787740119046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetsports.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 00:23:26 GMT","end":"Sun, 22 Nov 2026 00:23:25 GMT"},"fingerprint":{"sha1":"D6:CD:34:16:D3:94:73:BD:9D:84:63:75:FB:C5:95:4B:FD:DF:21:94","sha256":"3F:1C:C9:95:7B:5A:43:B0:21:E9:E6:F8:D8:33:4B:77:8B:D7:ED:A9:D3:C9:E5:4D:D0:2F:21:99:F1:95:C4:8C"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/E-Mail-Photoroom.webp HTTP/1.1\r\nHost: rainbetsports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetsports.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 10:28:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 08:00:20 GMT\r\netag: \"6a16a494-29d8\"\r\nexpires: Fri, 25 Sep 2026 10:23:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 287\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rryi3KYw9PoPau3omlmRtVhkQKQYdklikwfbyJ2p6XC8kzIqzFQYsOsjlMJZPmeZzd38M4TphmGeoUdncqybnzyLU8vROritjBscCb%2BlUP%2BaEHGjs8tBbGCrJopeW4Cgm9BKwQ%3D%3D\"}]}\r\ncf-ray: a31226a00a4f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10712,"size_decoded":11503,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"697f378e6c9ed55621b513644639fc17","sha1":"e73df17741ed10ece6357e89b888dc54d905121c","sha256":"5e72e3dec27394e8370c72ad8a7cfa2c1e845a618555f022f06dbe360ff4a308","sha512":"512ab122be2bff1d8eefa6015d44e5ee040100d62753e84e7db85c0ebfdec2a9a7e4a4c012b7b33902fbcd463d3a98b2d13ce2267a24565248e0d7aeea105096","ssdeep":"192:8wTmUKh8OSJU0jNVdWRpPExQVOVMr4alawBmmGS7kkWkilf5Jgy:8wTmlWBOsxYPawF7ekilRJr","tlshash":"5c22b0f6ef1a47e0c53409b06d449b5ea2afbb55148f507c41a412bf5383746e48b1db","first_seen":"2026-08-26T10:24:26.652497Z","last_seen":"2026-08-26T10:29:08.246348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"rainbetsports.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}