{"report_id":"aa28babb-c45f-42e7-829d-b07eb5aaaeb5","version":0,"status":"done","tags":[],"date":"2026-07-18T17:22:33Z","url":{"schema":"http","addr":"plinko-rainbet.com","fqdn":"plinko-rainbet.com","domain":"plinko-rainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"title":"Rainbet Plinko | Real Money Game with 1000x Multiplier","dom":{"size":261087,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8295)","md5":"10858d85da0e6cfdc94b7da94995bb03","sha1":"0fff9e64cc4da0d53386fe7a7de5ad6675ad207a","sha256":"a6e14d1881333414715194954cf2546abee8026a20c76b6517b99c768afda036","sha512":"068d773718388e25eaa9b8c8d15fccc52b00b56d64844f09686850f4bad409ab4a2d4aa1f289f3701560226a7c42decb0d8bd63bce121200d06a519761333213","ssdeep":"3072:23kOBpPjmppd9d4OEWrVbnzpZZHgGxEfRkDa:2FhmppdTEWrVbnzjY","tlshash":"2344da5b529720593527b6b99fab7704a23cd003d905cde5fede91888fc6e8089b2f4c","dom_hash":"domhash0e650cd22e8ea344f09186e31e49a4bc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"plinko-rainbet.com","fqdn":"plinko-rainbet.com","domain":"plinko-rainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:22:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"allrating.top","ip":{"addr":"172.67.203.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-11-13T03:51:59.857093Z","last_seen":"2026-07-08T11:52:29.829624Z","alert_count":0,"request_count":1,"received_data":3650,"sent_data":630,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plinko-rainbet.com","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":466,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"g10102301085.co","ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-07-22","domain_rank":72137,"first_seen":"2021-08-03T12:42:57Z","last_seen":"2026-07-15T23:35:21.267005Z","alert_count":0,"request_count":1,"received_data":779,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-12T22:42:14.264548Z","alert_count":0,"request_count":1,"received_data":60296,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plinko-rainbets.com","ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":58,"received_data":845322,"sent_data":32868,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e88a401907300a9989966839f7ab52d","sha1":"c15dcbe7b4ab3c929d4caa40438bbd384babcf11","sha256":"1320fe8c1f2515e760ba2b7347b1c6b4ad4f1f81e268099beb8b0b9e30cb9794","sha512":"49c9fc5c37a593f329bb646f7a7b53407fe1a05f5e43d91e0adecec646734c22a0bc32b0bb69ac87108a379fca06a89a18c0f5c208dce06471aa8cedf7a8ebb9","ssdeep":"","tlshash":"dd01abc9b9d17914259f616c21ab611e7573b5013e0c0ef3d46556922e30686d23e1ce","size":829,"data":"","first_seen":"2026-07-08T11:52:31.647944Z","last_seen":"2026-07-18T17:25:56.652588Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-18T17:25:56.653285Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"64f70328b9ed7d50ea99ef31d9aa9426","sha1":"65390b495adb92d777159d68d0f4e81287d4a546","sha256":"7907600d96187fc2c863c147bcf3beef389ce4d8b974de65425b68f470bc04d5","sha512":"a555b718f8bca32a5b6d7911132abcd0d77dbed532a21c10ab2422b656a592166b08b8991564f650b5d3c3f4685e78be0ddab3bde45c8ec459efa99be396ca25","ssdeep":"","tlshash":"e211ab7e9ab702b1c1773efba68f27c6263440472446db273c2ca6455f907a30a60ecc","size":1062,"data":"","first_seen":"2026-07-18T17:22:42.452801Z","last_seen":"2026-07-18T17:25:56.654002Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335be571d1f9586a0cf2f6952c4eec4","sha1":"f3b60c35f4f7b75ceb1266dbda8ac8d4b1ef11ce","sha256":"da1bed209470750a6c89d8f016d11e981ac975127f5db25aaf094404ecbec64f","sha512":"cebaf60fe3f7c0353c89f2de080ab49e6a5fd65040c113ae0d46f9b10f4b991b00bb15d61e287a60fe714a03569ee0fba4247de1acba85fd8ce02484aca505c1","ssdeep":"","tlshash":"91411868dbbe7662832ea0b62bfe52de143e547e7a814ebb7c38405048f48493715c7d","size":1934,"data":"","first_seen":"2026-06-10T08:18:22.002783Z","last_seen":"2026-07-18T17:25:56.6552Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03846efe50968210d4deb7ecca60c175","sha1":"ba48f568a9f743d124c45639c8e2957ee555a0fa","sha256":"8033838b0a2081a4af6044518e6348ad3da5d99d2b1e7b89c4170307613871ef","sha512":"448115207158e123baa029bd394ab50848064e81f85e72c2ac63346a359c855d04983fb20aad59a998a2e4118e5ae3c925b1841fec3d5dc44c05423009334359","ssdeep":"","tlshash":"4141fb31f3bd243147bf64b529e5269e2a3990823a878ca7cc9c9c0624c1e5d4875cfe","size":1922,"data":"","first_seen":"2026-07-18T17:22:42.457606Z","last_seen":"2026-07-18T17:25:56.655918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa9a2e00541c5d978bbf0a6222ba76b6","sha1":"e3bbc246c652e6594c458f3eaccf859d9397eccb","sha256":"5c3b561854db1a9db55f57069bf0ef0b5b12d741130b1114a18f4c65b1a7d381","sha512":"88f6ed907a6edcba1ac4e7446911ba0b3b9aeffa748363bb42a31676c5edb62755f25a9adc29f495db93a874641ce13dc1f4b461b8ee4dc541e5692d66dc1be5","ssdeep":"","tlshash":"3611ce28b6be043286637129266ef6cc7979006bac11cd0ebd2d8dc80fd0e519db6df1","size":1071,"data":"","first_seen":"2026-07-08T11:52:31.654177Z","last_seen":"2026-07-18T17:25:56.657015Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-19T03:24:19.408114Z","times_seen":29164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8f56047aa19dab98a5f9b437f93f560","sha1":"ebaa3a51f25da786a1ec912655eed919559c5a4f","sha256":"16201efa3e3598a16fb7f8d75ad72ca9ef1434a2c0c4e6403fb14b44316c7ef7","sha512":"ebfd001f7a1326a87025d3e7f0ba9722e17bbbf790eb7dc3c8838c8fce237ebf8cdfc2fc44ab70f4548c8aa10f7a4275d8afeb9b302fa9f4ad6084e6d13ddcbe","ssdeep":"","tlshash":"ecc0809d94981c4924d7c559057d1310f1159527d61f5f56f64d004c6fb407da92468d","size":176,"data":"","first_seen":"2026-07-18T17:22:42.463444Z","last_seen":"2026-07-18T17:25:56.658388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f10ac972fdfb1d0976af9c8096fd1a92","sha1":"d37a92215eb23e7d8e4a5799f36991433a3d3dfc","sha256":"ba7b92d580630e73c91dccef5e6295d928debff016c531ac72c34a34d466234b","sha512":"482a59c094592f12cca95b0f65ebe7ad2884094de96a3cdc2ccc43586eb4c60ebbdf86bd1976afaba649af04cb736fa1da02a1570487cb1218145c8756348a69","ssdeep":"","tlshash":"5eb02b2a0dd00f4321801fda48319a33a2682530e830a800c793c4c00028542e95c508","size":125,"data":"","first_seen":"2026-07-18T17:22:42.465589Z","last_seen":"2026-07-18T17:25:56.659517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd29938f1ad524bd6ba87f4c0bdf291c","sha1":"ccce2f1c6e49b96f686e080b7b85695a08b0adba","sha256":"c98099d4cd33c13298dc59ce0c8cf912d68a0ab756ffe1fe733dd2b224f08106","sha512":"7a3a9237343dd8840f4d9788b4e88875c086b4ca6703759708bf9ae22e1d7d781eb0f9c96dda0d3d2d1b7a2ad3f2f73262ebf8c149440c5b4865e5cc2d5d803d","ssdeep":"","tlshash":"04f059db6b5c0432c25f305e105eb3cc3d7d803269412d67fc78c45248e0d98966289d","size":545,"data":"","first_seen":"2026-07-08T11:52:31.658162Z","last_seen":"2026-07-18T17:25:56.660595Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dbc1008a0655ecb932c1fde0eb72b0a","sha1":"2e64bf12bf7529f841baceb5ac9d5089ddfe9794","sha256":"2d65e312c8a0eed794d22cb196d1fabbf363edc0db34dc532345c58ade40c7aa","sha512":"312a05df4c4d92127ba8f16b8dbf05092762e348a050ea66d7821ce6b47f01415d89448a6e2d677e8167cfc76c0e282301761845405e54224c37be2933eac27e","ssdeep":"","tlshash":"d0216bd2f74c1532c4ff357eb45a42cc262d9071bc2018ba3d6c622c0172f8c55a679c","size":1378,"data":"","first_seen":"2026-07-08T11:52:31.658994Z","last_seen":"2026-07-18T17:25:56.661272Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-19T03:20:50.679435Z","times_seen":400340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-includes/js/dist/hooks.min.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-19T03:12:04.476075Z","times_seen":5731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-includes/js/dist/i18n.min.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-19T03:12:04.418106Z","times_seen":5607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/scripts-js-extra","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53b758e19c3031a2528d2ebe3235dbe6","sha1":"dcefac29177a4e4fd68d78d4b5dda3af8a9c8cca","sha256":"2c1082e44f116761b5c7c321675cbefd82363ccca21e8fe4e9e5d492156f22de","sha512":"0e4fff6a9b71339c2b6693b30c8f4a6a799a4c473337f1242e7d9766583c6ab0fdbf475942b8c69898ed42ce233472ef189f341bfca8db5da0d11431e4b59a92","ssdeep":"3:HT6EDew5vNVmKhGSVgrTHnJH+LX/uK/GY3r:v9x5FVgrTQLXGK/GY7","tlshash":"fed12b2acdd00f4361801ffa4c359a33a2a82530e870e800c797c4c00028542e95c508","size":6394,"data":"","first_seen":"2026-07-18T17:22:42.469475Z","last_seen":"2026-07-18T17:25:56.661906Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-19T03:05:46.27011Z","times_seen":225087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","size":8485,"data":"","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-18T17:25:56.608886Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-18T17:25:56.601152Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Fplinko-rainbets.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","size":352,"data":"","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-18T17:25:56.601985Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-i18n-js-after","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"425af803fbe91c963ec8e30a4567d685","sha1":"62719dcbd8ab0017cf3d391b2f8d237c4b21c103","sha256":"7ccc04b2d5226667da9e3127c5bc3b81b47ddd025ac8d200de122041a61e46f8","sha512":"515d13764b04109224474fd15c7ad3b4121c1a5b9ab5714c5910ef2fe3e4c8f4816e8e8fd0acbc5261123defc303b2300ba5b0a484b6802d058e4ad18179badd","ssdeep":"3:HKaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:qBLxTqtGmVOiFM/KGNMJ2","tlshash":"b2d112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6351,"data":"","first_seen":"2026-07-18T17:22:42.47243Z","last_seen":"2026-07-18T17:25:56.663012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-19T03:05:46.277223Z","times_seen":217439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/contact-form-7-js-before","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cd56fc4fcdc10be634ae14ecf5b30f7","sha1":"126f0cb20913b3a91a376a3e4b3a4d31ae503d81","sha256":"3f919995d8312afec1cb285d15d6a023e546625d86bf11b46bff692bbe20eea3","sha512":"c408debac28a9f7336da286d8ec5aae2e77b1b0d4ea688861a9dee6e2a3a438d30653343c3801b3d6b17f0ea849041ac8d0d0cc6074d5ccf2072277de8c053f6","ssdeep":"3:HD6SVGDSiCmbFFlHrmKhLBF/FFhhzVEGUHsR5pHdFQAwaKLlUFrQAv:3LiRhDPh11ulgpwAwaKZ4rQAv","tlshash":"fed1c09dc4980c4920d7c178043c1300f1149027c61f4f02f24d000c2ff407ca82828d","size":6435,"data":"","first_seen":"2026-07-18T17:22:42.474814Z","last_seen":"2026-07-18T17:25:56.66422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-18T17:25:56.646749Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.895Z","timestamp":1784395325895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Sep 2025 10:01:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29e10-30e0\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XJXkAFTuyubT1VJFi9dx0rwxRrCu19QYcGw470YILpEiOmLzn5ImIdckv4XthHwbSvmn8TL2GU5xJfy3kLIktQcwgcXwhP4YkGdt18sQcxwv1A71XCj6fAMxcpNqtIT6BCHzV4d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2dac00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":4311,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-19T03:05:46.277223Z","times_seen":217439,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.901Z","timestamp":1784395325901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fz0CaP2c%2BPWgmZlXA0JSBbP0D2oqRGVCHjFvy%2BdFrD9BW4f5VNeyWE7YmHgZCABxVTdIaaxx%2FwYeBotjrVasGcHpW7LSyGTYSGmXeD06jySYI7DWGE0zKmDV%2FpheebAVKa%2Fpg6E1\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a539aea-3d8\"\r\ncf-ray: a1d32aa2dac60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984,"size_decoded":1086,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-18T17:25:56.646749Z","times_seen":34,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/gb.png","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.908Z","timestamp":1784395325908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/gb.png HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Apr 2026 08:54:41 GMT\r\netag: \"69e88cd1-18a\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZfYQvR7%2FQKxKxJSriIA00DIBaMle6KSuecDWyoX6XGhpwcrasGfLSsIGliXuYJGxOIGQH1WE2w8SrCgKC8hDBG4zAtcQ2DsPQVUd5esfeof8CtASaklQAYdghp2aWcka%2BfGK9Np\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2eacc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":1168,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"1f9bec96b4dd22cbfb7303708a8572b4","sha1":"99168a28b7713b5c4aba6daac57c8c29adaf528b","sha256":"0258a377207160921b4def95e08bde2b05f202a1d441850d49502f768e72307d","sha512":"a5b5eef6d0c496480a22ab26ced2c25b7c06853af0ef88b9933231c13c2ab3c800e113fcc28c93d648c47b05e3a3800ad41f0d54036626233f1033ee1b60a53c","ssdeep":"","tlshash":"bbe0f1a0b3d14c36df7e96b68474f024ef310c01e1c5452188a2537f0f25a26a0b0315","first_seen":"2023-04-24T10:56:41Z","last_seen":"2026-07-18T17:25:56.638175Z","times_seen":552,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allrating.top/wp-content/uploads/2026/02/%D0%91%D0%B5%D0%B7-%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F.webp","fqdn":"allrating.top","domain":"allrating.top","tld":"top"},"ip":{"addr":"172.67.203.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.915Z","timestamp":1784395325915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allrating.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 23:21:08 GMT","end":"Mon, 07 Sep 2026 00:19:41 GMT"},"fingerprint":{"sha1":"B8:A7:2E:94:32:9E:88:87:CE:0F:AB:6E:EC:23:A4:CA:01:43:9C:2E","sha256":"B3:36:32:AB:6A:92:11:C1:EF:D4:A0:4B:AA:3F:2A:72:8E:D9:D9:46:1B:94:1A:E8:AE:B5:AC:FB:19:B3:26:C7"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/%D0%91%D0%B5%D0%B7-%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F.webp HTTP/1.1\r\nHost: allrating.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2900\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Feb 2026 13:24:49 GMT\r\netag: \"69849a21-b54\"\r\nexpires: Thu, 13 Aug 2026 11:48:08 GMT\r\ncache-control: max-age=2592000\r\nx-server: console-manage.host773\r\naccept-ranges: bytes\r\nage: 365637\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZ5mUln0WzBZZ3bNFnV1VaQWN%2FTUcPGtEIknQ7rogL9rUmtrk8DyxO60HK3FAtAv78tqjx8fYta%2BxjnS%2B%2FwNTmH4lWNDJelX8RGghz905YwOB7iKaVyaQSxW0j1YQUG0\"}]}\r\ncf-ray: a1d32aa35eee0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2900,"size_decoded":3650,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f617f52aae9979de4c834c69307ecd63","sha1":"4b9d51f4a48a5b7347d70eedaeecb461993734ff","sha256":"eb0c65aefb2e480997bbd4b0a7b97941a8af93a7cac98e858af3e17ff75995b9","sha512":"ac447dbce31aba06f6368d50b1cfefcdbbc7b00b2c88626767718a4fe6d7b7702c65327d6917c3fd50fd16f1e9d9dd6af7974c161d8bd6ad51015bff087e6436","ssdeep":"","tlshash":"19514e7a57185d7cd034be3c19990f1b9f71fe17564612a9554121730f728d4042e79b","first_seen":"2026-04-13T07:01:10.904608Z","last_seen":"2026-07-18T17:25:56.591803Z","times_seen":16,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":55,"connect":1,"send":0,"wait":12,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/mc-afee-secure.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.941Z","timestamp":1784395325941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/mc-afee-secure.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:23 GMT\r\netag: \"69760c2b-826\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9k9u0XbB55JdB9CcCxPWOwk%2Bg0OJYLUlJHh3a7yUNRhK6k57NZurOYADEeUvzS87c5S4PdgmmtDmql1raixjDtYO17QkPRO7eHgF%2FpckY%2F5dbVJayIAOjuHCBeAIkGbrNrE7wge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31af00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2086,"size_decoded":2864,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01cc7ffbd9b08546811c16d036cde6a0","sha1":"561c6a6520bc561aa2c436c9ae1152f3bd617a7b","sha256":"3788a634740edcf53414dae9102ea8aafa097cd3549ea21df3a5d297736c757b","sha512":"ec9e1a49dd546a61f97f195f6cb516707e8452d2fcc0256e7d791cdf902f91ed257caf31dbb24047e956ae93cc3315b7875d83eef9c019d91a9dcc8b94bc7da0","ssdeep":"","tlshash":"e441c876e36cd3dcc094b63d76b21bc173ba3834ca56afd2818088694a35dc43454cd3","first_seen":"2026-07-08T12:11:29.149171Z","last_seen":"2026-07-18T17:25:56.58566Z","times_seen":7,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.873Z","timestamp":1784395325873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3diM48CtLkcCDYCAVp70gDzPWZciOKlTyBfsXCfuJ1GcGeNWR%2Faci1PXq%2BFLwgkaXoz8I%2Fe%2Ff5Ou2c0GiDZxHBWdxf8VAPVIpdweGFc%2FSyuQAlc%2FuMeSJm4ZpzJAtWZmgWxVcUF9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2bab70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1027,"size_decoded":1253,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-18T17:25:56.586646Z","times_seen":36,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.898Z","timestamp":1784395325898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a539aea-2125\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0Kxx63rqAV5TXk7aKgFls4B3VCBKgSQPzXXs%2Fbca1qMbUFSao0aqovfvXSklGJOCZ7xPBjdkJ0EEV3wSjkI26T039oBkBwLTkTNuIRGIagknFw%2B17QDSCsVh5ke3zV2S9iwdRPY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2dac50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8485,"size_decoded":3470,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3531)","md5":"5941c8cb55bde4b2cc24a6ed4ff08f1a","sha1":"6ae966638ac68880e24e46c9d66f4e54b2e902fe","sha256":"6c7214f211a09d913bf9d0ef5a2e420ea78d4275d15bfb6ed07661c12f1f7963","sha512":"489f44ac531a6876ab4220ad32cc9e1b2631767168d4d6b4d123accf36e7ee2bebf861d023494ea3210265ef8b1473893122500c603cceb0cdcd0a78e2bb9562","ssdeep":"192:ajmU5FJoVRReWlAWLAGw9rPBImzgcxh2xYRvGQORa20WGW/dc7yyj/qCho:OFJ+RDAGw9r0hJ7","tlshash":"5602535653b22c7d45736a195e7fae0679b880ab1d83e816380ff4804f784fa43b47e9","first_seen":"2026-05-02T07:09:17.931605Z","last_seen":"2026-07-18T17:25:56.608886Z","times_seen":8,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/Logo-200x50-3.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.907Z","timestamp":1784395325907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Logo-200x50-3.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 11:11:25 GMT\r\netag: \"6975fa5d-11cc\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TQnP6qSbaKSJIQ%2FPj%2FV%2B80%2BMD8dYHFf6t%2FiVYm6RPLlUjUuh4XDVCoh2KY5i2K6Z1%2BclGclDwJZZj7OUICiIC8AdRn4IWxz0HCnIDaz3s%2BcHkyfMhNIULBPj3ZOe%2FKoj9qAwRFq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2eacb0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4556,"size_decoded":5345,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a3383325d1496a8939c2bc66f33ffe","sha1":"4806b185bc4a33597e50e3d185946acda402e544","sha256":"9f39460fc63df9f442100f96a545d06d1696ae48413897b55347e55781273ab3","sha512":"49416fada83e5ec395314d26a235dcb9b1997c1f8a3e36fe7f151e0960f5e80f36a9cfe9995c7d9fe8298a365b46d29b3d8d7b7d6769991509aea0fc006f24d2","ssdeep":"96:uElbw+iXQCXZkq1FmhU8uC1F2Sr3Ek4HHBjWviQ0M4XRmA6Ta:7wTHZkq1FaU871Fvr0DHJuHa","tlshash":"37914b2cb355a288f4d23a7610c9cfaa3725e91f89b6497f90424c9063b91cf7d3ca91","first_seen":"2026-07-18T17:22:42.331618Z","last_seen":"2026-07-18T17:25:56.576222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.447Z","timestamp":1784395326447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en; c2_popup_unique_name=G1URBVIXRksZAlcaDk0LRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4bc4\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRJF8B%2B4PkYIoY91z71UMCYYiG%2B5DWLRC9y4sS%2BeZQ0vGLqmUybTtFcH%2Bhk%2Fk3VjtfWsq7kJWlnvtMREkeXRykrRBYqDwH7MMb0OGVRTMC4xZFKZcd7vYDKOkY6wOTRHzT1VZafX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa64bb10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":20190,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-18T17:25:56.605637Z","times_seen":140,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.897Z","timestamp":1784395325897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 11 Sep 2025 10:01:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29e10-348c\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJwfy67rkaeh37w%2BifVoQ5XlDxGKFpb1ptpkqADs%2BiglHUA1P4cTZKNywloB0ibQXUo%2FxmKAfT%2F%2FikavpS3ShFh4QyO%2FCC7Wgp8llou9yFHrjxY51r63x1N9l1RcMUd8LGzB%2BnZb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2dac20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5087,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-19T03:05:46.27011Z","times_seen":225087,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/polylang/fr_FR.png","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.910Z","timestamp":1784395325910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/fr_FR.png HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4a5\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V31guVAzS3bWnRhP3rqCxVPf7efuECA1ik%2Bk2eRyqcHeFCzd86JlVSWxCadpLDS3RFRoEPpzl64ix3S%2F%2FdKgRlCiOcUwyGha5UnbAg3n0oRE0IxkbBdCt%2B9gBjIUEd%2FeUJQPpzN3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2ead00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1189,"size_decoded":1970,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"90e6a1e097f7bb27eaab27e694e40300","sha1":"dfcbf7c9fc66b0784c5e499e228dcb75a7e85ab0","sha256":"80a3e0c11f821bb378678b670f2b768405bed98d1abc73ba152251abee49f634","sha512":"cb2531d37ad353bc1819d7e84befbe559bcd09fa2fe51c1338d375330bb360f5a1588010b0b9b21d6f7454cd23b180d7a38e52522413d23b1908f1a4e3702e31","ssdeep":"","tlshash":"422144cabb417cc15248d98239e3402b8a578484dad4f4beb4cbd597183557a446cae7","first_seen":"2023-06-26T20:40:20Z","last_seen":"2026-07-18T17:25:56.628589Z","times_seen":90,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/gamblers-anonymous.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.934Z","timestamp":1784395325934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/gamblers-anonymous.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:21 GMT\r\netag: \"69760c29-105c\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vx11p5cfqbmm98Db6AQqR7T%2FhAgphUETsGXe6bxlHbC6p5Ud97L9RyP78KAQZcSG6SnUr7JzigkbwYpS40ww85PxxUJ%2BSgeuNVISY%2F8tmRTi%2FzZC75CePdekOwdyq5%2FSG6%2BxARLd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31ae90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4188,"size_decoded":4973,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d679ae3bd48192653c8c8a6e5942ce7","sha1":"c56b71f5996147947ed4a92afa2ad43885f1111b","sha256":"2e580df9323a347044575ef2b4eeac85b12affff720e913d8b91a7252207a994","sha512":"3883caea8078264cfa3cf455f1d5322d221ba5ab748684a1b2b224722ee42f3d480e4f9fed0812ddfbb777d9fbc867312254251be3d4f27e562ccafb30b58bbd","ssdeep":"96:2Elbw+iXQ0o80SkEglTOFU5v1P0gslhX7kQZid4vO8uu:zwTWKgZOK1cHoQZe4Ou","tlshash":"a0816d6df3b62356e8031bb8e42257563e1ebc744b83f06b864513b23d400e6669c353","first_seen":"2026-07-08T12:11:29.148058Z","last_seen":"2026-07-18T17:25:56.630282Z","times_seen":7,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.452Z","timestamp":1784395326452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en; c2_popup_unique_name=G1URBVIXRksZAlcaDk0LRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4d38\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGKUAl0aDJ0hlwxhdkS3zIUMroCAQo8d2Tk58ryGUnwv00pDdkkXql57LZRNwm5izOLz29IGJkB10nofAqV19%2FJ4MZbrQXgsL2DNvHxJMIOoEN%2FuFco1mhVCmD2ClmpWiZDvj6K%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa64bb50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20558,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-18T17:25:56.624631Z","times_seen":176,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbet.com/","fqdn":"plinko-rainbet.com","domain":"plinko-rainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:22:03.153Z","timestamp":1784395323153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:34:06 GMT","end":"Fri, 16 Oct 2026 08:34:05 GMT"},"fingerprint":{"sha1":"F6:82:E5:E2:7B:80:15:C4:1E:BF:38:99:BB:0B:50:F0:E0:DA:BA:ED","sha256":"71:7E:CC:16:CB:FF:02:F0:68:29:24:98:B3:1D:23:46:49:A9:AE:B9:FC:B9:93:60:0C:CD:BD:C8:40:2C:7A:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plinko-rainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 17:22:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://plinko-rainbets.com/\r\nx-pingback: https://plinko-rainbet.com/xmlrpc.php\r\nset-cookie: pll_language=en; expires=Sun, 18-Jul-2027 17:22:04 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-server: srv01.cofeco\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T03:20:33.261029Z","times_seen":17355136,"resource_available":true,"data":null}},"time_used":1184,"timings":{"blocked":-1,"dns":280,"connect":23,"send":0,"wait":835,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/gordon-moody.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.936Z","timestamp":1784395325936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/gordon-moody.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:22 GMT\r\netag: \"69760c2a-20dc\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9D3PeEfM4pjDqEEbxnAFjr%2FDrPps8Spf92BX2qLfbSYUAFbzwhVxMb0xhfHJiz6adDndrTrJstgBCw%2FeVMK0SJ84c6D9%2BfITCssG6gzsBQ%2BFBLHvvBi7zVDlDVCUUmNDj01%2Frm9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31aeb0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8412,"size_decoded":9195,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b6801447e2a0eb8005ea9b1ea536b2e","sha1":"04b25d7031d68f1cb58c359d69152f88c0ab0407","sha256":"0fa8da4c5da56ff8399c43b87a0358f96eb5de05b69fa5f3fac75a5ca94cbb28","sha512":"629ee0c1001ba59596518e1dabe32ed8edd8492086fe36474397de9d9f01e38d5d27278fd4a95c74f3272156af1acaf97629a8f542108ad254c71c8a6da56b7c","ssdeep":"192:DwTOz4Izc2gY05FFP/k99+jn2qYlt28b0Ro67dWbHbp6par/ss:DwTOZzd70xwYHYfe7AsarE","tlshash":"7402a073bf2b9315c4b19b3951a6f3c145e06c770742e49ea25601f826c623b799c0ca","first_seen":"2026-07-16T11:15:08.679292Z","last_seen":"2026-07-18T17:25:56.619282Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/Background-9.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.174Z","timestamp":1784395326174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Background-9.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 12:58:42 GMT\r\netag: \"69776502-72da\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajMYqVnmKW0YCKMkTQDQ%2B894%2FFqFek5Al99haEzb%2F70hq5RTzYzZIkSvCqGfETwXnChwsP3q2ugRv4nkst03nEesZVV1AdCRopN9pzgxVHjR%2FnrdEMxCCl%2BcoUPBC7QPQnxZSRzv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1d32aa49b560daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29402\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29402,"size_decoded":30186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a4c2608c13edafd28cebb6ebd29bc1","sha1":"42e712249b650ad6be51734276529c0f4332a7d8","sha256":"bc31bd6fa15a8c994312e79271b13e3c1292088e457f840032333e317f857b92","sha512":"8f574de626cec9403902e94d3cda5d6085cffabf7a80224d6aeacaff50af88c52746fe71201974f214a7707a7329d2f625574a7ff4e26d0738ffbc7d2bb2f136","ssdeep":"768:PTGQCKiMV1TFJ1w1NXppicx8EA1DEJ2rsIIPiHH3mnpvRnjmLZ/:sKB1T5JcJARnrsq2nFOx","tlshash":"8ad2d1d0c51f3aacde029575c81e929ed71db8078be8170f82cc36aa672d249524e4fd","first_seen":"2026-07-18T17:22:42.352375Z","last_seen":"2026-07-18T17:25:56.595067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.228Z","timestamp":1784395326228,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4bc4\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zNlHNW%2F%2B7LhHPARaQOCO%2FbsWPr1u1Kj6OW0ECagdFaMaePCyeIZ7uWP1tBqMTddTv2To9H9hV1dwmU65mB3qWIQ4aRhz62%2FKGjzINp%2Fnu8b9Xc%2B53l8B3WQBy6xOfNwMExt1lUEu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa4eb6b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20185,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-18T17:25:56.605637Z","times_seen":140,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.232Z","timestamp":1784395326232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4d38\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jER5xeIE5JotnHbatmWOdRZUZ14k%2FwknpG1110b2xGMM%2BVhyPxY0mocVgqiu4Yo9mhn1uhuuqQcgT3MxVnWKpXAizIzkY5ZkXO83MNGovzj3%2B6m8VQHz%2BKTk3DkFGhPC6f3X5MF3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa4eb710daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-18T17:25:56.624631Z","times_seen":176,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.450Z","timestamp":1784395326450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en; c2_popup_unique_name=G1URBVIXRksZAlcaDk0LRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4c7c\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HSo0HSAhOejoy1lueH3XZcse5uvlyHRdFCkMzjMEB6uhyevgyYjbpaU6JfCDUV4Xl9UcYfMxwg4i%2FQxNdMTIQsOSZ%2F%2Flj6aUizWTciV0lZTHJxaqiPJNqHZcJUZ6fgL5P2eC2HU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa64bb40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19580,"size_decoded":20370,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-18T17:25:56.59802Z","times_seen":169,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/polylang/es_ES.png","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.911Z","timestamp":1784395325911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/es_ES.png HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-585\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TIjPp291OLP498Rq%2BM4nOJxstw%2B7pYd%2BlMdjcO7%2FuB2eM3xjZhV9L3EqCQ2D3Dw4mS5SGb%2Fh3rdiY8fb6%2BNSgs7oZCpjpUZVMq2f6Jih2WWcWp2OQA%2Fg5jYaOY16YdZUkA6FMWeW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2ead10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1413\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1413,"size_decoded":2198,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"1b4684a24835b94ae1550ab478916e78","sha1":"c84b6e0ce342ecdd2f789b4f092e2139e859091b","sha256":"536e878615b908a0a15838096aaaffdadf7c079c73cdee4457bc964001b12428","sha512":"2e0baf9354bc3abf78526cd6b2b7ea9fc1a9763a63b53376a83afd3203c669579803a09263bc8183d3358db1c8f4ef971428d802d7cdc14badc5d38e4bfea179","ssdeep":"","tlshash":"cb21714af7c17e405389e68324e6403bf9434085cdd6f5fa38cfe85e1a28271089c1e7","first_seen":"2023-06-26T20:40:20Z","last_seen":"2026-07-18T17:25:56.639108Z","times_seen":79,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/velobet-casino-3.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.929Z","timestamp":1784395325929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/velobet-casino-3.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 20 Jan 2026 08:12:02 GMT\r\netag: \"696f38d2-72c\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4YQ9Y4uYB122xDNCKMF6woo7mbP5zS6qz70DR3yUepZlyxdcigzRewuxm4FOXrc3Z%2Bjy3L0H2jY%2B4LJnkriSs4yvkWIQ8KmwFgkF5O94PTMyn8ubks9X8TTgwO2%2F%2F%2BGKTqBdw%2Bl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30ae50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1836,"size_decoded":2620,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2acea3efd9cc01939e11b7c5962d0fa9","sha1":"71de99dab4395945f581efe35780a036cbc35c23","sha256":"4260d058a68ab24928c928ca8affe6f8a92383b0ed7f8faab1ae3633a4e83a66","sha512":"44bedd2a2c229ccb4873af6b87c80ec034583a8f30b087c7c369ca89ff2074db53366fd39ff83b524a0f02db6a8c0c66b75583019f682ff677ec16e10a28ac6c","ssdeep":"","tlshash":"e9313a16e77467fef2209535903017b1f22abdba860b5b05d3c7103a1e4c985621d6cb","first_seen":"2026-07-18T17:22:42.357431Z","last_seen":"2026-07-18T17:25:56.580146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.916Z","timestamp":1784395325916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a539aea-5fe\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akD6pXDjtsODLjZSTmiKO5UE0wO0K39j4KXBd0dy5WbpEycKfdUC9pi8DaPl9czDOmrcZQRCtszv2NsVVarACmeRwtaPtInncJAuzJbNOClAnaFcnjOXdDrpRxFQ1o%2BoqbKe1cFh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2fad50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1529,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-18T17:25:56.620111Z","times_seen":46,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-includes/js/dist/hooks.min.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.889Z","timestamp":1784395325889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 13:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a53993a-13ba\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Y4eejCCUznz1Ma010NZr%2FQcKe8xuBl8edKmDQOc1pizmyXA9LVhMJfhnB7QlIvpnn7xtO%2F2Yq6gIxU%2B74M8q6e5nzZQ62z7U5AFXKsQvcEmjmS13H9IBOIOW0j3SL%2BUMVvJ3MIQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2cabc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5050,"size_decoded":2645,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-19T03:12:04.476075Z","times_seen":5731,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.902Z","timestamp":1784395325902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Spy4NKVziUMI7xueWyB0bnPEHuqt9a8Gc%2Bf0TwKev3pp4F4Po2imMS6DjicHYuE%2B4J7uj9TrqarplkV92nziWoRktPzgC5CcaOWJphjYZQ7X8%2BogEfEsFUNqoaKsaIwvOuIvTGbE\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"660dd398-256\"\r\ncf-ray: a1d32aa2dac80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1126,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-18T17:25:56.601152Z","times_seen":34,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/images-removebg-preview-11-1-2.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.920Z","timestamp":1784395325920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/images-removebg-preview-11-1-2.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 18 Jun 2026 14:31:59 GMT\r\netag: \"6a34015f-1384\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwODoQTr56yj3J1m%2FPsVfSE3UH%2BjwOJPAWMRlMijY2E032Wd%2FBGUVSaxWVefISAG4A%2FvwIHpFR9fmLAw94ByL4FNFUhzgv%2BCLQCDnhYglUCbpHH1%2FsIzRQL5Wo29QVi4SEcqVVKT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2fada0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4996,"size_decoded":5783,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa411691984186e92c053c4b59249db3","sha1":"b6ace802e9cf2bcc2e2c5c258470216d1ffcae76","sha256":"8576e9eba59267b684bbbcea8480e352f297bfdcfec731e18c2c481b9b055870","sha512":"3d5b1b67c1f5b6675f2cb334efd2ecf0d552bac607118974feeb2f23c9351da5c90f5bf103e76dbafda935c348f4f1f41e417eb651e9369ec12f748e1f3f4e7c","ssdeep":"96:hElbw+iXktmziXg/BSNledpbQzXVYwNv7FjmeAeecec:MwTktmYHedpbElRNZjjA1cv","tlshash":"95a18f48c3275b06fd5c4bf0aed89b9bbe5b3706070375bf4890520222158da07fd5d9","first_seen":"2026-07-18T17:22:42.362269Z","last_seen":"2026-07-18T17:25:56.633036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-includes/js/dist/i18n.min.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.891Z","timestamp":1784395325891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 12 Jul 2026 13:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a53993a-1664\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYIuOd50tng2ZbFndvTJv3YwRx35M%2FpLf%2B5kUlbUlHXb17FaVgnqaL23NSy5mxXV5zYkvoW01nS%2FOfAx1rLrx4XwCoOvsmrHEYajU6gKYgOO72iwJrVpMNHbNZyJqjBTXqGtIy%2Bw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2cabe0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5732,"size_decoded":3283,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-19T03:12:04.418106Z","times_seen":5607,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/casino-joy-2-1.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.924Z","timestamp":1784395325924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casino-joy-2-1.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 20 Jan 2026 08:12:01 GMT\r\netag: \"696f38d1-2344\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIPfBj4V0WNDpATzbFONjkE3Y7D4gDRzpZBASzgh8OjhRFd%2FaUuZ0tfHlgIxXpXdweC012ga2CeZ6Sg%2Fa4yaOgoVjwqq1AOFbvXaG%2F7b7Gg4GLsQ483aRk8%2FQd5mIZthyAedGVJJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30adf0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9028,"size_decoded":9809,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"336171b8d3519f80acad591a755ad8de","sha1":"580c468e737992a67ccfc1cb6466657605046deb","sha256":"43947651f90e93535b99aa40c5506eb5ce8249cfbe2b34afb98ad1abbb60764a","sha512":"32c52e08451f80a21b727ad52eda309ee440fd74c8480e399e4d5f06155a20ec0aeb09a972e8fd9c14146f5132a3e61d20e9be063b431c2c86bd3827b7f80d8f","ssdeep":"192:MwTWWYNGWEgEk5irzuInNXDDa2pwLgvqsnLZavRf/:MwTjYmk5IuiDDyoBnFavB/","tlshash":"1312b18003d4e34efe312f3599983b9f41b4f48d4b5bc7a299c7e885ec5695912cc876","first_seen":"2026-01-03T20:40:12.096536Z","last_seen":"2026-07-18T17:25:56.587594Z","times_seen":7,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/03/rainbet-plinko-demo-play.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.305Z","timestamp":1784395326305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/rainbet-plinko-demo-play.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en; c2_popup_unique_name=G1URBVIXRksZAlcaDk0LRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 16 Mar 2026 10:37:53 GMT\r\netag: \"69b7dd81-6218\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIgldxGOkNt0AjzhqE7yXjQssJQzH8Apvw56l7a25xEvdLVQ6o0YTyH25OsqkKk6vXUKmS6YOEoXLmp9Zoc1fBx3NAOOw4%2FohHcMMmPwscwpscbnxooBOquJDtV9Uob%2F5WpXLCOU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa56b920daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25112,"size_decoded":25890,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x537, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73e842a126bb9414cdd7b7700358196c","sha1":"62a9bbc1b6f9f9aa9c4884b7df7beda78798c616","sha256":"95d6a679e81f88b12ec35c3b9be1cf5619f1d0457237778301b15c52de122c3c","sha512":"54dcfdbb837a8f49d044404da230108b0b9b0ffaf213f6f2c88f7147a2830e93fac5739790051e4038e1060b17d8f01af2dfa5aaa25fa061387615a2ea6a473d","ssdeep":"768:S6efs03Ohptu5AU9Uv+FmgFFl4MF+zc6gWMi:SNk0r9Uv6mgFFRF+zc6P","tlshash":"78b2e185f3d1a41846d82ef206476a14a79f3cc5a82eef05cb742b4564d7a13b3dc27e","first_seen":"2026-07-18T17:22:42.378575Z","last_seen":"2026-07-18T17:25:56.612176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.456Z","timestamp":1784395326456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en; c2_popup_unique_name=G1URBVIXRksZAlcaDk0LRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4c08\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XK8Pthb6SKsjn1g3%2BE2vtAndXpi7TFDnmp1MVpn7KZrwCGkTq2%2FunCcE8MvnZsF2LAUJJKoaHZ04cVeLG20iwnSnxAUZCB%2FGHd919CbGWY1IS1aFE01hZF5TLNkpVUuap4baSkHj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa65bb60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":20254,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-18T17:25:56.642059Z","times_seen":165,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"g10102301085.co/gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Fplinko-rainbets.com%2F","fqdn":"g10102301085.co","domain":"g10102301085.co","tld":"co"},"ip":{"addr":"34.120.31.228","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.922Z","timestamp":1784395325922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g9508048080.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 23:47:34 GMT","end":"Tue, 06 Oct 2026 00:41:06 GMT"},"fingerprint":{"sha1":"33:85:DA:27:B6:E8:23:41:7B:FC:54:07:F6:E6:0C:F7:14:8B:79:09","sha256":"20:2E:77:9F:D3:C2:12:6D:43:BA:E7:23:70:C5:CD:D1:2C:F0:B8:C4:D9:42:EA:A4:B6:AB:24:B0:98:11:19:A1"}}},"request":{"raw":"GET /gr?id=-Nx8NDCxoi5XHExf6J3e\u0026refurl=\u0026winurl=https%3A%2F%2Fplinko-rainbets.com%2F HTTP/1.1\r\nHost: g10102301085.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: private, no-cache, no-store, must-revalidate\r\netag: W/\"160-9XoKTHJPhkwR+uq3SOUaam5YNgk\"\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: 985f18e9cacc8e1ab96ac86bdb1a1a5a\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\nserver: Google Frontend\r\ncontent-length: 352\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":352,"size_decoded":779,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (352), with no line terminators","md5":"76c7778e369c280777c7d8889a9a8e85","sha1":"f57a0a4c724f864c11faeab748e51a6a6e583609","sha256":"c5048d5003cbdfc61ecbba655e914de5c09f349d0d85306ef23f5e34e7e3acb3","sha512":"1fcdf37f78b33db612bc9f4159c8148e77bbf0e97b2b6b9f069fe738730e186bf3fed0d5b51bd9c90880d6bda7195416a2ed9dc02487ad202c3dd29ec508bf8d","ssdeep":"","tlshash":"70e026e8b6ea613050f766ac2212c42138736032334c18ebe860236a7ef011e811a7ff","first_seen":"2025-08-13T16:04:47.939696Z","last_seen":"2026-07-18T17:25:56.601985Z","times_seen":15,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":57,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/visa-mastercard.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.930Z","timestamp":1784395325930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/visa-mastercard.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:25 GMT\r\netag: \"69760c2d-1200\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFmcqsa1Nmf1HbC3omXMAVv%2FLes7c1DaLT1TFGncWcDS6JnGeeGEF4%2Bf1TXjg%2FUTJsxYoGdys5b4THy%2F3GqZEp3yXbu%2FbfrOMPU2urfyfdZdRvHm3tiFirZ%2BqereXDlNUDVIwtUH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30ae60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4608,"size_decoded":5393,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"55a9e09633d5e4380ff62dca838709fb","sha1":"fec88ef9c189490f1982269ca3505cbb7967e05a","sha256":"478ad4887b473a408724e99d4c19151306d68ecf07b7cea0c962d594395b3d33","sha512":"b3d9d3a6006cf23134ca3180fa3263516ce86a7bb5eb13d1dd5ab0fd813c3c53725b383f7add8d319366747a97436c861eb444f8506afcb3c3eef25d0454a605","ssdeep":"96:3Elbw+iXWdcv3Q4SIUPYlh2Yydngte86k476X9juJfxFK1hatF3:qwTWOvUcBt+k4gu7c1haF3","tlshash":"23917e473f6699c4c0a1a9f1e84935e3ed16bf4f096f705185da957022138c2af6931f","first_seen":"2026-07-16T11:05:09.645774Z","last_seen":"2026-07-18T17:25:56.593468Z","times_seen":6,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/18.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.942Z","timestamp":1784395325942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/18.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:19 GMT\r\netag: \"69760c27-c50\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRZSuvbBaFIwkFSOL8C959yjfxO5UIVYuAEjDGDGmmr8eGBcxf%2B8KgMbyr47uVVAwngbh%2BuuxrYjXGxQUhVbFAi0QH0VwfU9Q%2BKGqQpS9ZPLvsv7JJkbkJLE65Ccob2%2BSW8pEA2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31af10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3152,"size_decoded":3932,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4dc2d5bd883e48f99a0242bfb4bbcc12","sha1":"d19b711546152c357d43804a390f3899b30b0634","sha256":"bb21ba62c611e2c13951f599a2c9b52b6a9734d4e763d02dcd0b48abd48ef548","sha512":"11b4379b80f5dd8f1e3d5bd27d0e083633d683de248892e82d946556009de9deb42ea9f1b46c384820a36715c7f8e1315091dfd3c99780ff280ca704dc4535b2","ssdeep":"","tlshash":"ed510c3536ab4b21f518b67578b3434099a5d601aa2372a7474b1f7303640e86d9139f","first_seen":"2026-07-08T12:11:29.175132Z","last_seen":"2026-07-18T17:25:56.589855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/dist/styles/styles.min.css","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.872Z","timestamp":1784395325872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/styles/styles.min.css HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a539aea-90cf\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbo6A6UJD7JGykNt3vODVzwfoHGHXiMThyrjIx%2BfEyrnLbf5br1AJmAKx82%2BRc7X78DpyyyLUJ6zy170slQ%2Bmseei94KS0KUxBVV4RtioRFsYEJ1RoGMnWk9p1RtlKQaE50ar%2FaW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2aab50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37071,"size_decoded":5980,"mime_type":"text/css","magic":"ASCII text","md5":"b4ff3bfe226d51aa7d62c65d9dc21b68","sha1":"feb0060ac2a89a7e6cec259fe4fa2abc6554432a","sha256":"81adf3d9093244663cca03c502058b0131408962a15d9a035609f7908249f3fc","sha512":"9183893095c0cc667e25a3015080ecced33778f4cefc8d49b639875cc053b59945f2942b8606ba193e39bd68a30570d4d8ba0fbe852ad3ef95cb37c762b835fb","ssdeep":"192:/NqClYjXbiLZmBOll/qnewojZ815/t4ssaWZZ+ya76kCaZQF7hoCkiufoSfufTGG:TZs5eoQFlN3svBeb7","tlshash":"9ff222216ab738d9651ff018ef99260621585007f14addf8fedde2886fce29484b1b4f","first_seen":"2025-06-17T02:00:31.753232Z","last_seen":"2026-07-18T17:25:56.63219Z","times_seen":14,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/polylang/nl_NL.png","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.912Z","timestamp":1784395325912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/nl_NL.png HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-f3\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovZh9iLgwWX6ZMOVk7TmjD%2FbWsMwnaIZb%2FABdfmsOZwvHWAWRslCvu2vvtkWlmiUmCf6WsCWFg8AppZVDro5OSDfATXW2yKxgu7Byj9SKwMwBboPFBgXuCZWMtdWCoCLaXip0wgi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2ead20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":1016,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"72f3b5cd891ac4b424071741954ca654","sha1":"c8a2604bead07e45daaa53af30bf0d937870b0da","sha256":"c0da39dfab2a366de1c0efa54c349ef46cdb40d083882d3fc7530de710845cf2","sha512":"74b3ae5c68bf48350c7a08c524f27c4fc1d17733a653df9626b3856fbb7f7af79255a29da2174810db9f59c142242afb17b5291922a107d25778b995ed69385b","ssdeep":"","tlshash":"d1d097e381d68f3ec6aef3335313c948ed6e04788e29602b903a42768628000488419e","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-07-18T17:25:56.602881Z","times_seen":191,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.914Z","timestamp":1784395325914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a539aea-5fe\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYqXy3wtiI%2BT2C6iIX00MizTMS%2BR6Af%2FJPyqaFqUyaITd7z0H69nnTWum8qAFsLt24X7RiS1dxs4%2FECbKJyargSowXXsKWKEZyAMrj4fXJ1jKvyjR%2F5f%2FEx5vnIIG0EUk0Jsdyy6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2ead30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1539,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-18T17:25:56.647862Z","times_seen":45,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/d30fae07cdadcd4712ac0fd8c14d765d-2.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.921Z","timestamp":1784395325921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/d30fae07cdadcd4712ac0fd8c14d765d-2.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 20 Jan 2026 08:12:00 GMT\r\netag: \"696f38d0-2386\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GeC4YVTAkOvzeD2QTT3QwzV%2BZH4zZEaarDMYZzycHSXl5UdqhqIWnNU09oBQir%2FII5X1%2F4ue0lhhJ%2FGAzWc1wtcEGeX9XDSl8u1juQJ0AOLXSgbv6lNiPIVoZUwBey6Yndss1Oju\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2fadc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9094,"size_decoded":9875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1bf79e2c27aa3c0af591dc3606e854d","sha1":"39abab286c0585c141aaa7736d7551467dbb35d1","sha256":"6c181dccabb21b1fea75d678b07d5134d1c33364bc81af7b5ccaedef70fa32af","sha512":"6b1b0f06d77461818181a694f450854bfe8f999f2266c1ea8b3814c8ead721bee19bee222339971ca69ac7c5d74c0ccacb596f78f92f9cc473f895ad8389027f","ssdeep":"192:lwTG6LAxt0f6fk4oj7kw1j3Vl18IMemQAo12sEpPip3+ti:lwTG6LAqQyl1j3Vl189ebobpPMO","tlshash":"1212aeda7fadc994c6a9d7b4a97512edf36e62a02f588e620c006a121b14cf40a14c63","first_seen":"2026-07-18T17:22:42.39344Z","last_seen":"2026-07-18T17:25:56.620986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1-5.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.923Z","timestamp":1784395325923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1-5.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 20 Jan 2026 08:12:00 GMT\r\netag: \"696f38d0-3be0\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mM2Kscnu2Tv1ldI1hd1fHPrFq0H%2BprpBAigKJpnH1AwqPkuHq1T52JeKKfL1Zbh9EQyu0VUvrsq1qYO6QKgj8kt08EJKeswE8hNcNPSjqvWPOy%2BerxIxCUMoPyL0xMpi2Wk6vkD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2fadd0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15328,"size_decoded":16106,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5ae8cf5e2e63abb3f52a24c5333fffc","sha1":"bcc3bf6aa1a9e56ff6a8153bc61a5881cfc3ba87","sha256":"cba85c726f8ced19d7ba41b327f8e8ca2f98a1845f72a83b624f18cab342528e","sha512":"9b5cc9f9c8b8b387f8170fb051a1a6be208b61e348afa8caebdf82102d428cf1bd2ba3e4cd866e7e35f98fd77a0df91033d6c18fa40ca7a479953ceaf30f82a8","ssdeep":"384:iwT2kHu967sUkzxOWMm+2AZEXW96w3xfQcT7:TT2kHuoeo3BKXPwH7","tlshash":"dc629e674279c4fee84169bd4a993b4af649cc3f530b682a03c5d83ad3d23fca625d10","first_seen":"2025-11-24T12:48:18.647466Z","last_seen":"2026-07-18T17:25:56.651211Z","times_seen":11,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/spinformula_55x40.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.917Z","timestamp":1784395325917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/spinformula_55x40.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Jul 2026 12:31:59 GMT\r\netag: \"6a47abbf-360\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KnpnhwxRq6Ca%2BfopmsqOEt5fxCUEzuUTGo%2B1Y9L2F4bvEuzozznukCpdCfQKO9CZFYQTsCJjUpKhEgvhXgiftEytILITr6ZVZ81wnRN4jmq8NXpjEDBqcD1IfN6fIR4ncjGOOh7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2fad70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":864,"size_decoded":1639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"614c82613d718707b1f9af976adf4a59","sha1":"46aed2659676e4cee09fa9539dc921157dd1c5b6","sha256":"9d75d20d175eded66493c8e1922d1b8a8912d81ae87311501ac3e98d8dde3a88","sha512":"2612291ef99108d2f4db774b0e3ce8a36754d4540a0dc2d944266e2c062cbb16079ec20eff7f203f2053637432ca86cb49eac306beba77471876124933cf887e","ssdeep":"","tlshash":"1b1144757331134cf1143f7460901f42f77dbc364b6a57218181065c1f20acbac5d697","first_seen":"2026-07-08T05:06:47.631482Z","last_seen":"2026-07-18T17:25:56.579177Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.918Z","timestamp":1784395325918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a539aea-5fe\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyKNzZwu3myp1SZ7d9qB6FOrrHqBteMpPWsIqhkNSktnNI5Kseu%2Fmu%2FC0ahSld5aVp9eUtxD1BfGOSgwKcUoD%2B5ZWfvuOZTO9ezJ8A73iJm1SLXRaefsFw7eKDM2gpzemFCtiewe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2fad80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1534,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-18T17:25:56.609769Z","times_seen":40,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/crypto.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.931Z","timestamp":1784395325931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/crypto.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 13:33:41 GMT\r\netag: \"69776d35-22e8\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LocgW7wfEzcj6Lk%2FzpWGjDBoWt9gKJf9pw0t5YcrXDK3%2FRwZHk1T3OAJLs1Ey%2BCAkc%2BRDR7Bt4NtaF5qA9O8pFtb3FDO5RedEDjPJ%2B3x3zeBKTZ6IKryhEBvPSLisp%2FSqoU8GLpD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30ae70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8936,"size_decoded":9721,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90be702530632980af151d7abcebf060","sha1":"d0473a07b330d5c150cec97a9461a5d24e7f3b54","sha256":"bff570ae13f2f006ede83d31dfd81fdffc51aa1e0a6a62a9f3392493dd9ae91c","sha512":"08f9003e4c9d1af880acb17dffe7e30ee754889453c7c02d05a7ecccecc08da0b50a2c539912b858e9f4c86fa0e9e97927b047a123c12f17fcb80a219f362a09","ssdeep":"192:VwT0qSsxhdzLgaiB6aY5sOK5UYWMPOvOQ9w1NbtCD3C:VwT0qxhdvgaiBa5sOAUYnPOvOIwRCbC","tlshash":"2602b063b768abd9e80a6175110b2f24d42339230f8d34d4fe5c25c3566bba82f455fb","first_seen":"2026-07-08T12:11:29.165598Z","last_seen":"2026-07-18T17:25:56.582807Z","times_seen":7,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.233Z","timestamp":1784395326233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4c08\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvnfQuEThrlFWYPmQ9uqdZz8qWxEAiRyKzZbiY0xyyAopPNv10cOt4jhvvhJ3mHA1p6vxaTv5Idi%2FP9H2Op1ZcqnxHpggSCwWhsDM0nkym7xaWtJSb9u1T71IbT3%2BgW9JJZ9fdTF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa4eb740daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-18T17:25:56.642059Z","times_seen":165,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/Favicon-4-300x300.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.469Z","timestamp":1784395326469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Favicon-4-300x300.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en; c2_popup_unique_name=G1URBVIXRksZAlcaDk0LRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 10:57:14 GMT\r\netag: \"6975f70a-1968\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEh5Z4vaZZfRnsdsuJAs91zVMTEMVPL%2B9WarfuHoUDRikw80wlRx%2FXgFxBlfi7lYyWaKSrS5rxNc7v6tqJZCMu0OI%2BOETngBhTxr2LbaqS5LF%2Bqt58on6eJ%2BXYo6jbqbR085Ccqj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1d32aa66bba0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6504\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6504,"size_decoded":7290,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40d19f3cb2af03f55716274e9fba9da5","sha1":"fd9402ac4ba657d0d3565465f4cdeaed612ad032","sha256":"2c7dccd38d9c3abaa618d91d1154aa60ceb41258a520797168c901a01c7111b2","sha512":"7acb1f8b357e9e3bcf0879821b8ce8e91a75135fda297de4439fbef754c1e6a050ee9dbd7380335365396bfeb0b0f2261c4757cae753fad79543ddc58f086d5f","ssdeep":"192:TwTgqFVS9eEHTlLyygVjX/2+CoyajkPAT1Gc:TwTJF6eOYycjX/2+DyixGc","tlshash":"1bd18c6d36270a18cae51af164e893a6ef986794ec1e7a621a5133b108560053ece0e3","first_seen":"2026-07-18T17:22:42.409618Z","last_seen":"2026-07-18T17:25:56.625552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/polylang/it_IT.png","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.909Z","timestamp":1784395325909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/it_IT.png HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4a5\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dc8uHGxutsI3eqdeWIMF2EffsIz%2BjV7XhBuz%2FFEPPTNEnbNLWxe1DUK5KwyyjDqvCMzLdKO2TBvsMNY%2BFaCA1Z9GJ%2BXVoU0fDu6t2pDvianXRDyb11DbWRqSXVhUsI4YZz0i33Vd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2eace0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1189,"size_decoded":1968,"mime_type":"image/png","magic":"PNG image data, 70 x 47, 8-bit/color RGBA, non-interlaced","md5":"df891e228f93d4bf850386971dbe38f8","sha1":"ca7a98f4f88db0871cdfc6f7311137e71491479a","sha256":"6dfa36808c40ce49318230061806936c68a7626797102bbfd182d024d2b26c3a","sha512":"fe3c181822d521286bc5bd9f53f3fb28dde917f7911980105d2bfb145e3e8a6b4be0a7cf45d5c5ea0826744c39dd82b2c4f98ed2da183a2345bf4fbd61d30f60","ssdeep":"","tlshash":"cf21744fbb943c809289d48222d79437c9334840d2d4f17d75cfc02709750b6485daf6","first_seen":"2023-06-01T03:35:45Z","last_seen":"2026-07-18T17:25:56.618389Z","times_seen":78,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/donbet-1-1-1-2-11-3.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.919Z","timestamp":1784395325919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/donbet-1-1-1-2-11-3.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 20 Jan 2026 08:12:00 GMT\r\netag: \"696f38d0-9140\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khOm8CpEYMgQq70sAXRcQdRL6s2bG6P8%2ByljRj%2FqKuzT78C6ldrqaHsqa02%2BEEVayNt%2BwJLB8GIstcI67EtDv8hQuBm9meet7l6WxxLkv7owm0I5%2FcJDRUOKcsETKRh4C0Q%2BfZ8T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa2fad90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37184\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37184,"size_decoded":37970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8901b435a73da2315fd5c41f89c93327","sha1":"2ecb321aff104a38e4481162fea56fdcd09683c3","sha256":"cc59885296a3bf7d92a2a1f2d01c1f4525f6c4d0a5179431625bf9bad2499b85","sha512":"7583d6dafafe18d0e7aef9931724259a6609de52f14ac74ecd50caa79f34c405dfddc5259863c8d11c4b42ef55b5320b1a49371c6f321f8ff15744a90ace4527","ssdeep":"768:bT5N6kvfbJtBvC3IkALfE5EZZLEI2jkItLSV01ebxuC9jWnDuF9MQeOtjN:hvTHBvfnzE5EZJK4+Ibxuw6DuF9/egj","tlshash":"8ff2f1a6fb19a3c4e5c40834940f2a164ad89fbfcf21b986257f413f3590db25e6a634","first_seen":"2026-05-16T17:07:10.730181Z","last_seen":"2026-07-18T17:25:56.610621Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/Favicon-4-36x36.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.470Z","timestamp":1784395326470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Favicon-4-36x36.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en; c2_popup_unique_name=G1URBVIXRksZAlcaDk0LRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 10:57:14 GMT\r\netag: \"6975f70a-408\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoBxIkTuaQ2ZKJXNM0utNwEQRSqqR5Bc80Y9JoKYZqsRKeL80s%2FDXF91HnYobNsmKgJqDaUD8uHVMYHnWt%2Bu8DUaonuuTLGCxaRu4DXXchUGZkZi%2BNbVZG7Df%2Fn3g5Nt9C1WN%2FAS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1d32aa66bbb0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":1817,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88baf047f44b28c55b457adf642b35d5","sha1":"05c67c0ebc8adfd8aa29d426486029c2ccf86277","sha256":"7ced1deb45b7ab1466d749c633bda74f5b6eec593eeda513dc4f171991f0c776","sha512":"09106bdca1b13e8f847b592e30d50d40f7debc99d4e476d78e510162188e80f74611c143b73b4a19160a3ddff8c473464a50918cd6482251fc3c1fd6b013f002","ssdeep":"","tlshash":"ab112777932037dcf0159df4b9452f81c3b9fe1597d7413e8140475607889ca586d9da","first_seen":"2026-07-18T17:22:42.416478Z","last_seen":"2026-07-18T17:25:56.644106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/Mystake-casino-logo-7-2.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.925Z","timestamp":1784395325925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/Mystake-casino-logo-7-2.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 20 Jan 2026 08:12:01 GMT\r\netag: \"696f38d1-148a\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KMqT5EmQ2grsf4x82FYqgh9HN1HpLAIOHLo31xOYih1k8eOFianI%2Br27YfHRFZrIcqQ4kaLrDyY234eNnDNMBF35CDPsg3pv9r2fRyW7Exa5CF8bZxxkxb1YFEHNlN2IMeeOTqf4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30ae00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5258,"size_decoded":6033,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be84ea7f7b5dcf49b58cc2164c5b41c5","sha1":"f229571955bd22e7cecf7f5d0cdae0c6c0fb9041","sha256":"9d30e43e02e79bc08938481fa3f911ac8b97c9875bf920f3199f09fc97b085ab","sha512":"6022506cb1c3aa94bd43f784e7a5c9fe4122cf0efc0f851d6100caad95aa1b455affdfe52cb2473abc356ef6e089cf2ee274500e855271eb2bb9e5472b3450b6","ssdeep":"96:TElbw+iXNbo6DoA+p0GSFmHMNOXeShhJ8PKX03kcMPzRKXy+vwQw8TzM6:OwTNDDmCVFxSfVt03kfrR9dQfM6","tlshash":"8ab15c2d01315368c860eff6938556a233b8ef196b91291ec307091b29f2aca3875d96","first_seen":"2026-07-18T17:22:42.418969Z","last_seen":"2026-07-18T17:25:56.640617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/ssl-secured.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.938Z","timestamp":1784395325938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/ssl-secured.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:24 GMT\r\netag: \"69760c2c-12b8\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzvzJGGFE5hH7jozCx2zBIM9A4fzvW0LSyXeM8cwm2aZXwillDO06RS7YduJjL%2FlJOm%2B2x%2FDQ6OCjRiKA%2FCMumbVOu3hT4LkxX8%2BU270eWAxb6iRWAise5wQKV7u9ED%2BDQMJXYgN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31aed0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":5577,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2852abb5d2784a21f7af235e332f6d32","sha1":"cd836f41e0e47bab1729096e8ad29e8085e2be65","sha256":"f19c6225cdc5789bef81e53a10e28265a5185bbcbb33bde7181be362ce8c83fa","sha512":"1e02c32c8635c6f6db2d673b0a185de7bcbeccf6751e77999bb9463d7eb5e84da8d940cec19c0dfe40547ed410f63b2255b3ad81b380182a71acfbf14cedfa4e","ssdeep":"96:wElbw+iXtcFUwALK6FBhvWn4z0lqjyQHlyJx+UZ5isOYgetltGau3yYAkmbpFBe:VwTiyVK65ug0gjyQFyJpZ5dzbtijafe","tlshash":"c0a1ae7dd69172c0dff72e38a0906d505f5e1d294fc2c28392ed1201ffd4982a45a00f","first_seen":"2026-07-08T12:11:29.150265Z","last_seen":"2026-07-18T17:25:56.637299Z","times_seen":7,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/gam-stop.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.939Z","timestamp":1784395325939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/gam-stop.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 13:33:42 GMT\r\netag: \"69776d36-11e2\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BoheJ6RXKR1xYILThNKjlxEKRe5DJt59mAfegXZvorNAfuzbWUcPT55JjTJivU1A529%2B2JkC6dy3d5yKNfxoVx%2BCefmj8N%2FmV3lIn9f5yASKJLObEqI0QpBT4bztkYCTW4s%2F2F2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31aee0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4578,"size_decoded":5361,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68273ee78cb0a572602b04987c2ec5e5","sha1":"f7abe89f849b5951bd7787d5078bdb9d52b54ce6","sha256":"0c9a7ee15e0494134c1756d89c54cf887a84ab3b28aaef31dae30d7a558df6c9","sha512":"75a0a11961b946d49f20176c3ed58335073b5db71b566a96ab237d4993835075df28863785714adedf67d44653bff9d19e8f3bafc0a10865f4cb291da026e234","ssdeep":"96:RElbw+iXF/E3icgCBUIULfgIlbVJ+h3DRkAZG+IX24kjA/BhYAZeWlPugz4T:8wTF/EySB7ULfgIlbERBEXRwAvlWd","tlshash":"d3913ce05255c714f4e03f71b072db13d1326a8a9f87963c890286d69b0d9da3aae8d3","first_seen":"2026-07-16T11:15:08.684555Z","last_seen":"2026-07-18T17:25:56.583848Z","times_seen":4,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-includes/css/dashicons.min.css","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.869Z","timestamp":1784395325869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 12 Jul 2026 13:40:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a53993a-e67c\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KgsvLG7tvA28s4IFL1J%2BlDhrdEH5EgSdp6vhxGew0nNgM1lV6DRHbxsmNpfmFW27CEWpJqcWsX%2B6iDRrSHiB1AzFuDs0IKWF1CwcnyZSs9gn1uP9HvqyJ1yS072d7nq1caRevqR7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2aab30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59004,"size_decoded":36523,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-19T03:21:18.284129Z","times_seen":62300,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/spindog-12.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.928Z","timestamp":1784395325928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/spindog-12.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 20 Jan 2026 08:12:02 GMT\r\netag: \"696f38d2-870\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBPfGAtobrVLeg3EZkP1Tqhi6NjjG9TeihvntaRn711V5t2Sldmi97e9btyeeXKTLkwxaZ8VxMLaUsOT2miPrSqFWpPT%2BAFuslPURk7OhAL1JnPBmNNiUMdL79pzs9Krs4WMFlDA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30ae40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2160,"size_decoded":2934,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc84a0c90c36e5b4a2b2d2e48dd32dba","sha1":"fc34eef4673a73da3f851d2f783e84e48bfd2a2f","sha256":"8dd0498aa4a448a29bacbea2f923279ac52045f1c6eb6ffbfa910a73880b5707","sha512":"cada74ec60186f5f84377ffd3c6a1fe138f5051a46feaf959197ea85988b1db3ffeee37c59bf4f0bbaaf81240caaef93997e6abb7a8439f6d0af3a6f0ee59041","ssdeep":"","tlshash":"f5410c3203100f15e6997279b5c5273bde76366289843b4bd188d1235f74cc58afeb05","first_seen":"2026-07-18T17:22:42.427925Z","last_seen":"2026-07-18T17:25:56.622565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.176Z","timestamp":1784395326176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KSH4%2F%2FmKdrwrXwmJCUI6TbCP1DDIq2UysAM1nL%2BLW%2FIp3o2sBGNk5HN%2B2RbmymZfrJVF%2Fz3w2JuvdQpWpqF%2FcO1R4rj0SeL84%2B6dA%2BD8ELmcmQHTaiOrFWo6JjpLjdCTcNCscq8\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a539aea-df\"\r\ncf-ray: a1d32aa49b580daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-18T17:25:56.649806Z","times_seen":39,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.179Z","timestamp":1784395326179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgUPXy%2Bwk68zpxgG0dFzxyOKvJOnpXIz0BJcTsFZE64Jp2HU8t034F7TUfXVG%2BuqICoHfYfpSO9%2FfqlZ6%2BdwmEW5kHGkE11Wb3UwlGx%2BRuNMl%2BkGQgGTFoY9WHU3JqWgfoyVM3Vf\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a539aea-11a\"\r\ncf-ray: a1d32aa49b5a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":975,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-18T17:25:56.60377Z","times_seen":106,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.870Z","timestamp":1784395325870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10462\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYXoyz9p2euHZEzvkkEmFr4S%2BgYhDkiCKdsTzanQsDZcqXvOVExanU0OV2bcfCIc9c5jDTCoxzqBqAIAVYZKgzTJ%2FAjUd32qPF3x8kGDtIcOHsdmpLS1ailA42F9Oaxi%2BJV7q0Q5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1d32aa2cc30569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59305,"size_decoded":11453,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-07-19T03:17:49.085624Z","times_seen":46115,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/bank-transfer.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.932Z","timestamp":1784395325932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bank-transfer.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 Jan 2026 13:33:40 GMT\r\netag: \"69776d34-1a22\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D65BfmwJgjTDjuP3Ws4IGPnjvBPo4B0El5wPmjdCqfaXdaL%2F9zcpIoWKG3uOnmN76TOxk7CqGZzxH9YKt%2FHoUPZaFk%2BP5pN1oDUt1%2FQPsrxPEWm3sTreuQaXknXlRxR2c7F8K4jA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30ae80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6690\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6690,"size_decoded":7471,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79692e13717b50f6b34531d58efd6d15","sha1":"ef3f5c840ecd615057ad7d6c7de671da80039898","sha256":"a6311513ba4d77f632fde203ecef06326169fd5aba3a8585ec632c696cb2397d","sha512":"3b772807be172ed9df164bd0ec57b869d71383048ccbbf0610bb0ef2389e4e8521113f4de0af1c3b8f7b019484d13c6546667018db5bcffaf764371c3adde334","ssdeep":"96:OElbw+iX4F8rHMmPrX0u3aW/sNRbcYLd7d5TXo04fjuCJEjCuLdK+BHuPEsSQtla:bwT7TkvXVc8U/fjuKuXlQ3TY9BV","tlshash":"5cd1b03533ae6f62d5f2dc30e4a2bf4e8b510d6c89a2e35e430282701368fd6b8c94c1","first_seen":"2026-07-18T17:22:42.437426Z","last_seen":"2026-07-18T17:25:56.648548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/gamblingcare.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.935Z","timestamp":1784395325935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/gamblingcare.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:34:36 GMT\r\netag: \"69760ddc-c82\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7WdI3rkbYSThTIM6emDMxKARqEn9%2B2nh5iPIlBxz4Tj8613CObH%2BhZzqxy9LT1P5lOKIpCTSElc2JPoMwXloOmXUrTnaWMSeSHqKqEYASF7HNHm%2FXg4%2FX295TwnsT2qYwPemkiFI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31aea0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3202\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3202,"size_decoded":3982,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b5b508418fdec1c320620db4b42127cf","sha1":"66e9908ed31500283a0ee0a6bb8f9cd6b96d86de","sha256":"869a445ba04d47a4dd9d44a742bb9290074203e3f0c2de23bfebc65b9c6b0eab","sha512":"cce6241a08d2a4cec275cc8bb33a980def5217c14e908febb2d63ee8fa986668b2d022d5970ae172e7a722b873d1221c6124146f29ec79e98aabbd3834b4e076","ssdeep":"","tlshash":"5a612bb8a6683fadd84552b881281786f75c8c7fef5a8a08555165ec326cde8782f303","first_seen":"2026-07-18T17:22:42.439926Z","last_seen":"2026-07-18T17:25:56.642797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/gaming-curacao.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.937Z","timestamp":1784395325937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/gaming-curacao.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:22 GMT\r\netag: \"69760c2a-17ce\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tum%2BllyAx5MTPVUizb1iIUD7cBDU5U4SyQdU81LgTlpIXXWFZUS3eSWZTIdU694QYiYEKPZi0U9vMgPbvOXAJD7Gv%2FNSCYX9feje0v8tRV0ZQ1%2FwjBGbJQEthQ7nynfmAZ5ZZPY2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31aec0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6094,"size_decoded":6873,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b4079eb9e61e9428de5f638f5ff0386","sha1":"d1f56d5e6ded62811693ef9ea99fdb7b5aba65a6","sha256":"794e21fe530e03e5884e2cefb7c04b90c793e743b900166cb185c3eab2205714","sha512":"1e2a899fcf8e6db4c3e8edf74744d1aaa551605c5958cc1f59fb760cd1bccfaed4474a325383c3b2372af2732b85c4133a11afff21b343d2b0dc86c93ae06d2b","ssdeep":"96:cdElbw+iap17QBbfkIbvwxllPhgKFIG3aboy2QNkg2TN46nxT4I+HycfAcdyU7zK:9wq17QBzTwxHiKFIGKboy2xN46nxc9yN","tlshash":"8fc16c1b77a68b08cb303bf8144b7746ebb1981b85d18faa9740a70ea72d6cb7d50017","first_seen":"2026-07-08T12:11:29.132987Z","last_seen":"2026-07-18T17:25:56.604663Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.887Z","timestamp":1784395325887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 20 Jul 2026 17:22:05 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGqyO7sspCOSl74HC7w7qpGBpqbyJy74zQtXvrYZR6VXGgCRdpgRfgoRP4osl1n40d%2FIUGpVzxL1w%2B5VzHxc6COVfovz%2FxlSiE0rjRBqUQekFH%2BRbA%2FhB0AarCV3L%2Bds2QzOG%2FiN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\nserver: cloudflare\r\ncf-ray: a1d32aa2caba0daa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-19T03:20:50.679435Z","times_seen":400340,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2021/06/hedesbet.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.927Z","timestamp":1784395325927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/hedesbet.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 08:39:46 GMT\r\netag: \"6a17ff52-1e3c\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLKT9FpchYOdRXX%2Bmy6MgKQbXZhBh3ks5aSP%2F%2FHucYhmDaOBG9baOJT%2BDNtJWBMbbz1xknyUB6E9%2BFbQCZ30E3vh08q%2FMxeZwekq5veWpOdYjnXo5n5sBTcUuVhhgyDAz47qZ064\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa30ae30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7740\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7740,"size_decoded":8525,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75180b1eaa2a62548c31fb1e199a6134","sha1":"f120776b178176b77a93b3a4f47a2722714a7409","sha256":"278162082fa697426b036f8f11bb78012f404759928223ca73fb1c6c04b347c2","sha512":"04bb317d9c6c38a2a639c3cc7a0c188cce780e1e1e9bfd4fc12daa2d327bde54f57b0a9f37ae98790b277cb1570a1bcd8bf31e63de5c10acee0e58de4b0e8e59","ssdeep":"192:W3wYIy6JGTVon3OOminipGWdmByzRStXrILnMd:MwPy5Ro33mingGsYbtb","tlshash":"4af1adf906beef69ea17c931f01e974a13e8bb00de83ab0a721051061e15483bd2d173","first_seen":"2026-06-01T17:33:44.789728Z","last_seen":"2026-07-18T17:25:56.636325Z","times_seen":5,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.867Z","timestamp":1784395325867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Sep 2025 10:01:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c29df0-d0f\"\r\nexpires: Mon, 17 Aug 2026 17:22:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7OMxTLnd3FE5sD%2FOTbHsFUp6TzOtDN3nyKUw%2BxKbt%2B8fb6MMnpZqFaeBV1mJnVncFb%2FxWdFYtQt5twL0y768pVnNruPf8IBygDWcrly9WPqg3aa3ckmgYYC9hFbavCr1eNh%2BZjo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32aa2aab20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3343,"size_decoded":1613,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-19T03:21:18.304953Z","times_seen":4472,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/uploads/2026/01/dmca-protected.webp","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:05.940Z","timestamp":1784395325940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/dmca-protected.webp HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 25 Jan 2026 12:27:20 GMT\r\netag: \"69760c28-c44\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMt8sHeryUdaSFYHif%2BjVc2OxT5ScQcjDM%2B7G4lKLEM467nJ%2F%2FWR6JSk%2BK%2BP%2FeT4RmqmEvlgb4rdcCZDTyIpTpbULptj2M228a6SNXGew7IAqEKXWSHQrM8zAfR3WY2kSTFPQdy4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d32aa31aef0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3140,"size_decoded":3926,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4580e6da433fc59c555d0b4c3006f2e2","sha1":"573a0e22d03cdb7aa794e5409c317018e146f5b5","sha256":"884b61ebd16a2bc9b304383975a232d0b8a9ea1ce32fd37e49a6dd613d94a5bc","sha512":"eba650982d72662f651a18a63e546aac2ece5f807a088242e09979ba575b32d121b0ce460d3739ecce8d1e53dde909f22beba9d38eea6f3e0d03d3df8c9538f4","ssdeep":"","tlshash":"74515d9f17ad4f1cefbcb5b932c21f52e777a92fc2af5d128041076309053d222040a6","first_seen":"2026-07-08T12:11:29.195932Z","last_seen":"2026-07-18T17:25:56.584788Z","times_seen":5,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinko-rainbets.com/","date":"2026-07-18T17:22:06.230Z","timestamp":1784395326230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinko-rainbets.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:06 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 13:47:22 GMT\r\netag: \"6a539aea-4c7c\"\r\nexpires: Mon, 17 Aug 2026 17:22:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYUoB10DZ4fIZUaBfuW9QKyWP5dGhuCBKqPShpnMT9eJbScmXWABFUfWmJlSq2i1syFf6dMwHMq2c53Tau3xZvobgz0vR7hB62hUwWOAN9C6C1km9qrEumJv%2BFnO3NDVmt%2BLqJTL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d32aa4eb6c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20361,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-18T17:25:56.59802Z","times_seen":169,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinko-rainbets.com/","fqdn":"plinko-rainbets.com","domain":"plinko-rainbets.com","tld":"com"},"ip":{"addr":"172.67.209.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:22:04.346Z","timestamp":1784395324346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinko-rainbets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 12:38:21 GMT","end":"Sat, 10 Oct 2026 13:34:39 GMT"},"fingerprint":{"sha1":"39:70:02:EB:6B:47:22:F4:8D:8F:03:4A:00:D1:67:0C:6D:E2:86:43","sha256":"17:D7:9D:B3:D2:19:D6:29:71:9A:64:A4:3C:2F:AB:F5:E8:03:F7:B9:7B:30:B0:5E:63:03:A7:31:DD:6B:C3:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plinko-rainbets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 18 Jul 2026 17:22:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-pingback: https://plinko-rainbets.com/xmlrpc.php\r\nset-cookie: pll_language=en; expires=Sun, 18-Jul-2027 17:22:05 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://plinko-rainbets.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://plinko-rainbets.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://plinko-rainbets.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ay38IkHQgkiGk0Tx0OHckndy3SeeaWToteZJEMxflFehJKfO1%2BrMIgcDgod2AQRTq4KpjtSb%2BXqtF9V9PQv6O8LTyQtHu%2BxWVB5ozG1jgLdkqmMjWCX0goT4g7fgM0NmGuasi6E1\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d32a9958d90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":265186,"size_decoded":49080,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8460)","md5":"9be6d78cee814e8efa1cd99769866451","sha1":"118c7e5c302e1f4271df5112462228d3bf3591d5","sha256":"5c8108b11929ebeb4f42794ff97bdb6006e8f8ecca46cc760c903a736adaedd8","sha512":"f3c893fcab8742929d33338f3944c6d11fb03dc570eba195d3004c908de1f0e9d7a72aa2ce8f241aac6199bbd63906f6ba489d3491a4bd300681ced245c74a7c","ssdeep":"3072:x3XOJpP8mppGIJ5dEWrVbnDhNHgGxEfRkDm:xOGmppGqEWrVbnDC","tlshash":"3344c95b529720592527b6b99fab7744e23c9003d905cde4fede91888fc6e8089b3f4c","first_seen":"2026-07-18T17:22:42.446502Z","last_seen":"2026-07-18T17:22:42.446502Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1190,"timings":{"blocked":-1,"dns":18,"connect":16,"send":0,"wait":1093,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"plinko-rainbets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}