{"report_id":"b5b78af4-ee64-4165-91b8-dfea6908c58e","version":0,"status":"done","tags":[],"date":"2026-08-07T09:12:09Z","url":{"schema":"http","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"172.67.186.131","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"title":"Rainbet Australia | Official Crypto Casino and Sports Online","dom":{"size":141803,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16067)","md5":"a62b61d03e1f09df6f2fb74987308472","sha1":"3dc69ed7b434406c6e036dc107fbf05c482672f8","sha256":"84964a998b9a3a262bf0e997d02d54ff8cc0d7b768ea92a2b4b07a80f1704a46","sha512":"6ec18bb46f65e1ad2daeb9f15561313d5835ef899e178bdc72b25302471e79460a597e1f6f9517687d1c1b5c0265db4cd209e2aa7f04974d6fbb91ffa2170ebe","ssdeep":"768:hYXdH8b0D28LbXpqCQoT4N8/GSwr+Ygb7PH07zBgSQjnU25d1U31jQ8qYMD2SIsb:U1dLb3R/twrrqmQP4Bqag2otr9","tlshash":"16d385fb512c692f1af32688d919ab0cb13d518ace10cdd4b2dbc1886bc1fa14676dcd","dom_hash":"domhash109d3c56cc0c614e36053a4dc41b4e36","first_seen":"2026-08-07T08:55:41.874075Z","last_seen":"2026-08-07T09:12:10.450941Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"172.67.186.131","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T09:12:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetofficial-au.com","ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2026-08-07T08:55:37.382196Z","last_seen":"2026-08-07T08:55:37.382196Z","alert_count":29,"request_count":29,"received_data":592580,"sent_data":16862,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/60c40d3b878528e75d4f36188066b01a.js?ver=6b01a","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a0f93d3ab2aa6ae983d72e0678665c6","sha1":"5b71bf924609810351bdfd5793089fc5e7b44487","sha256":"b7642dec914a043ad4711ebc21b1d4842fc3eaf0e5de3e3b0c5a55d4e6781675","sha512":"b7e0d5da71966470ab929a82f70b07998d6077b0f28924233315f23d4678f4633793db3683953d11e34dd2c257db9817e649a37905c7a7b8685f2568079eef25","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMB:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSq","tlshash":"b8c1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5733,"data":"","first_seen":"2026-07-09T20:56:23.510034Z","last_seen":"2026-08-15T03:05:56.771412Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bf50de73e80be90907f9d063ab4dc13","sha1":"cf9ff1f3b50e0bcb3c579cf3be2bb90fa2c4c841","sha256":"d2282bff21607221d029139d4da81e21974fd6611ef1ae6cacffa2586753dd12","sha512":"6f556cf39dac1806d4cee11ef05aaeec8601d6c62885f80bfd5001cbb727360992f5fc5b0a87e62acb8255436f45fdce7897fa4cda747ce6c0038a6bd4b35039","ssdeep":"","tlshash":"0fd0c9757f24bab001f9612a267fea60097a54c2e041650476354c596e78888338ae3a","size":210,"data":"","first_seen":"2026-01-03T20:40:12.132526Z","last_seen":"2026-08-07T09:12:10.487221Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f664e7250425ccb6915f2908e1245c5","sha1":"6fa0f252c35fdd87cb308781a3a91e8d86348d17","sha256":"def81363db9d4366d5b1b74f68d4b48b903e5e92373a2cb9b77479f174fa7f7b","sha512":"1c6550d9b82175705de83b2a108c1c21f24cffa4d3732a404b38426a683e374aed8129aba69747c81d946220ecf058af6bd63b635702bca1ac2842da130114c0","ssdeep":"","tlshash":"08214d2c6535b566021f807632ff45f9653f29ce7f409eb27c2c40909ee8889376657d","size":1364,"data":"","first_seen":"2026-01-03T20:40:12.130051Z","last_seen":"2026-08-07T09:12:10.48816Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88354d77488d93583c79739c7133b389","sha1":"7c306489188e9377c92686a0960566df1d08ae80","sha256":"0f53a69233700819ce5eb311558b6d517ca90bcae9cb9fe7bbd181a536698339","sha512":"6b7f66a7fe11798bbf6607620d577cdcdb1b78e47ed8128fd871fa54ca79b33fee6af0c1b3420e55f05ceec4a3b992085f3be160833705143c1f395d12573b4a","ssdeep":"","tlshash":"a531bd347361797107af4db4209a1b546f3750963905c8b2ed6dcc5a6a81e460871dbe","size":1652,"data":"","first_seen":"2026-08-07T08:55:41.910864Z","last_seen":"2026-08-07T09:12:10.488972Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04a9b59b7e49f913a3926f6431334155","sha1":"35f2521d3ab3f75895b02da9c6b5419e1a35be59","sha256":"94c4eed60653e14337c021261a52581e9b6f93ae9ba512912ca30ce656b3ac64","sha512":"40068c8ae55d5f7b8bdd0fcf5eabdf443cd6b033788c1686b0a96adf4f645bfd34d50ea7f0017c9514e3029752b213826373450e791760bf8310e0c303aaa750","ssdeep":"","tlshash":"57a0028530a76805c505d1605967fc00446415cb818eaa181ae5ee30e515598748232e","size":58,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-08-15T03:05:56.788635Z","times_seen":18631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f1e85e62ab3e504259842ebd411e4d2","sha1":"0b6f63bd125450218c98353851a948a4cdb91264","sha256":"4b5f5bcc055e30e3ba1ae130790bfbe68fafd079bce553fee0be198e027941a7","sha512":"826cbea07ea08c589d2566359cfce1cadd6e75b340afc3a51b0fcb4f9ba1e13965e41660f2f57b7b41f2a890ae3e996a623b381435b56f1d78c99efcddb7ee92","ssdeep":"","tlshash":"e4b092aaa6859a0a19a7d389831c7235712456134e266ba7d18a01404baa1a8d408492","size":116,"data":"","first_seen":"2026-08-07T08:55:41.913029Z","last_seen":"2026-08-07T09:12:10.491465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e6983c300e0c54ef494be2b6fc49fac","sha1":"4e789ef294bfa897e8341027608204c8391a8458","sha256":"5e118f1cae8d031e191c78818e08de2cd5f1ad982c9adcb00999b2b208f72432","sha512":"c0efe05b08fb0eecfbdce0459b1341b334810d7c691a73391d733b7ec6419ac0ba3004414c43e2760a26c5682ab3e59924732ba53cf5460e18c560b200347777","ssdeep":"","tlshash":"f1b012f649541f0735d21bc44814625f522811325d505c20b253e84003449e24f88442","size":94,"data":"","first_seen":"2026-08-07T08:55:41.914302Z","last_seen":"2026-08-07T09:12:10.49352Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f814583f7a6942b8374197e227e52662","sha1":"e72d859bd076bd99d70947c328d43214e8898db5","sha256":"3b0b3553fac48b013f02975f1d9b9c163d1010e47775bcf8158dd7ef5f52fb7f","sha512":"128e7f3c831f30ee186376b768d62cedbbee83e3b48d3e6b0e7562393ccd0055bbb35c4479063c481a0b6a6ffb3089465425de4aa60d1b434e3f5ab98a9dab63","ssdeep":"","tlshash":"b9e0abeb7b500872829f742f116eb3893e724033f9007e05e078c8a26cf4d4000a2d5f","size":413,"data":"","first_seen":"2026-05-19T22:55:05.229344Z","last_seen":"2026-08-07T09:12:10.494986Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a4d682d4d60e33ea2e683285185d977","sha1":"ce9bc4439b7befc76d5abeb28fbf03ca68f490fb","sha256":"2f10a9d6e55ce202b8ace73896a1420ba29eb5f814f050f78da23f898d7c8c77","sha512":"ec304ab4e14ffc034b2a537fc5b7caf7f5c973b8845f718a9aeb35d6bd413c4c460e159b942b2b603b22f4517cdf9ecdd8c989abfc4243d64e408a12d07e5b8f","ssdeep":"","tlshash":"51112613b6002872d8ff2a7fb956524c3b21a151b8206468892daa2c1672fc251babcd","size":1000,"data":"","first_seen":"2026-07-22T10:11:53.034693Z","last_seen":"2026-08-07T09:12:10.495841Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-08-15T03:47:49.253461Z","times_seen":28459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/dc643e95c382a8c237755c1b0595ecc1.js?ver=84d9e","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34b7a3157a5046401828fc341eb29c5c","sha1":"23603180b6ad2cf5dc2ce3861a89983044c77f0b","sha256":"c8c144eb75af7fa8a84918141c548a3cbd90d242bb092cd81abe71b2550b5394","sha512":"177fe6a87afa1b5ac5f3e92ec021c97306eddc81e68590a13782c2619c7a7e4e54fbe421283d1cc9ec5ea8832d8e467c5451aa0f3e932e1bc767fe1d85d4421f","ssdeep":"192:lmPfv8AViGaWFIkwvbOHzdIr469nyIKzgcxh2xDaM2DbnJ8:lM8miGdx9zd04698ny","tlshash":"96d1a7a563917cbe04f60e466c3eaf97bdbd84bd6d83e115600bfc885c784d343806aa","size":6635,"data":"","first_seen":"2026-08-07T08:55:41.891018Z","last_seen":"2026-08-07T09:12:10.475044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/143b23f1a613e064a6708d32ff949c35.js?ver=49c35","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","size":493,"data":"","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-08-07T09:12:10.479949Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/d63bbf97cf57453fd0d74ff3ad9afdf6.js?ver=afdf6","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13453,"data":"","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-08-15T03:05:56.757449Z","times_seen":10353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/e03c1cccdcbda7c52d3d26e10d5221c6.js?ver=221c6","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","size":861,"data":"","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-08-07T09:12:10.477905Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-15T03:46:29.734255Z","times_seen":419895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/b5c31879bc6ebf8d32a9f66f92a17c2e.js?ver=17c2e","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4185e5366c2097571bcf5e9a5ec39e4b","sha1":"cea228b7e379402ecbaabbb0dad237576a9bbfcf","sha256":"5710b33cadec165f3c94c0912f43c7cbcdcb55e9a95efe993a410970810e2f52","sha512":"de333bece08dec297c731707dc32e238cab60890d5a9268de36e48543fbf06909264d222d0e656758f69a918485b9069c0a3cbe49c9141b9ddf4e56efea89c38","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Ci2:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY22","tlshash":"caa151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5051,"data":"","first_seen":"2026-07-09T20:56:23.587409Z","last_seen":"2026-08-15T03:05:56.727759Z","times_seen":548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/216cfe7049ad6e98301676c6ce6795e9.js?ver=795e9","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","size":12513,"data":"","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-08-15T03:05:56.776894Z","times_seen":10067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[LiteSpeed] Start Lazy Load","filename":"https://rainbetofficial-au.com/","line_number":331,"column_number":7870}]},"http":[{"url":{"schema":"https","addr":"rainbetofficial-au.com/","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T09:11:41.337Z","timestamp":1786093901337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbetofficial-au.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetofficial-au.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetofficial-au.com/\u003e; rel=shortlink\r\nx-litespeed-tag: a34_front,a34_URL.6666cd76f96956469e7be39d750cc7d9,a34_F,a34_Po.2,a34_PGS,a34_,a34_UCSS.3f4434b594545b61123fa2c7b4650684,a34_MIN.854fdbb2a9a236c58bbe56385afda32f.css\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ycVwfNuiYKt730t%2FgB9qir8Ofqd7hQsUPy47Ws1xbQlEgKYrRsf7bwaiWHdD0c9Wvi6FQYpI5ppKvkDzziJ9cjOWBnDI9h5MFx6o8PFOB9dpbuJENBcZYjaRRKxg3SfCll%2BLp4ZzrScB\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527c37bd656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":143315,"size_decoded":28164,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16126)","md5":"dd46094f85877f2b2f33505a9cde2d22","sha1":"869b9ccd88cd87875fdb4bfed5a44538b0a00053","sha256":"c13269055d91308d640187071ea8192496a85f950e104dde3d39f8adf0ffff81","sha512":"e9cb3deca2c9ab12fb97c4dc249aa681be322c9e6f2ce9fd09211aa23d44eb14536650b1487cceec9c855617a7101feb3fd3c55802f1bb95861b9b892ae67c69","ssdeep":"768:7YX9H8b0Dm8LCr8oqCgCTCvpZ8YGkUW+YfA/sI07DlG8xvnU25d1U31jQ8qYMD2i:yVxLgrCvUYTUWrakxj4Bqag2otrB","tlshash":"cee385fb512c692f1af72698d919ab0cb12d518ace10cdd4b2dfc1886bc1fa14636dcd","first_seen":"2026-08-07T09:12:10.45364Z","last_seen":"2026-08-07T09:12:10.45364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":590,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/216cfe7049ad6e98301676c6ce6795e9.js?ver=795e9","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.143Z","timestamp":1786093902143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/js/216cfe7049ad6e98301676c6ce6795e9.js?ver=795e9 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Aug 2026 08:55:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759d6b-30e1\"\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 994\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymgvRojQT0Zb%2F6rIBodjxXmnOkSlKbdGw%2BkAuAD2fa%2Fjp2vwAfZTvENem0omsNMaHsXkvrleEoEH9yl0E3jdgooI%2FYrvmtDsq51lwIhZpEypig7CoqQqWwieVCfGlNI%2FvanXPr4AOgG0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527c86c2a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12513,"size_decoded":4337,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12511)","md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-08-15T03:05:56.776894Z","times_seen":10067,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/d63bbf97cf57453fd0d74ff3ad9afdf6.js?ver=afdf6","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.149Z","timestamp":1786093902149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/js/d63bbf97cf57453fd0d74ff3ad9afdf6.js?ver=afdf6 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Aug 2026 08:55:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759d6b-348d\"\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 994\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vG57%2F%2BUxc%2FqGncuv7n4DjLDr5%2BaN2hAGKd3JZqKcdWtg1ZABK3PgiHNADPVuGZrV1pK1vUiNtSS7dyTadCn4yIha2O7RxFXrTPAgLD7HAHAn3O6TEHknpr0fkHKJSQ7k%2F92r1HvP%2Be9h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527c86c2b56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13453,"size_decoded":5102,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13451)","md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-08-15T03:05:56.757449Z","times_seen":10353,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.430Z","timestamp":1786093902430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4c08\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6Pnm5egGg2h%2Frn8%2BxDI7l1%2FS58i4PhmBXZCdhM5Xe6WPjfNySl%2FZaMJ6UNDP87jwXgp4UBbsO1mB7YKj4XbAadTTfAn2xbCEXSK%2BPsGkRUfsD3OH4jYdvYzBE6qKoqJ7ufDDokm64fb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527ca2c4a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20264,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-08-13T04:09:15.497763Z","times_seen":193,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/uploads/2025/10/imgi_97_image.webp","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.208Z","timestamp":1786093902208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/imgi_97_image.webp HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 16:13:00 GMT\r\netag: \"68ff9a0c-e88\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKpCHl1GCb1y4h32d1NBzl3RHigJ8Moa9W%2B03ntJd9r%2BC2XKDdV6BNg2kJdLByVHAdEe0MIGTyM7wIs%2F%2FhHU10QQBasrjMVsuj2TjU9LYhOhoxbm83x8wmGg7LUHP0vil32Up16SQFiO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a27527c8cc3256ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3720,"size_decoded":4513,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b95a47e97bb88b206eee8304f541f61b","sha1":"ef29daa0ed039135e3f31ae732bba035aaf1840d","sha256":"fae57d8d5f0589cbcde5288e71221df468d0e6b73b394bcbac8d26eddcb8fd37","sha512":"77725116a55962b3a00b19e66c5f94c80613d18037c02e684d4a358ea59fdca6f76be2f7fe5b071378dad62fb98d2814c30560f6410fe4b0619af34e502c713e","ssdeep":"","tlshash":"15713f48c3235aecd3269b7469b01aaef5f53d885d3800265bcd63fe8683321503dcba","first_seen":"2026-07-08T11:54:42.227502Z","last_seen":"2026-08-07T09:12:10.460045Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.426Z","timestamp":1786093902426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4bc4\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwUe9gxXyQ%2FMnvm07zk45F%2FjCvQqdpCSJNGjn2kit1FkiMQnL8HM3wJ5VprNhhBdAu6QgzfWAuka6bafwXGzBKHWlOhpZ62zJZ50fPJcrph%2F12sHcKcY4a3WMpSWHV49XN8M0dzOkGh%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527ca2c4756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":20194,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-08-12T10:44:18.332667Z","times_seen":172,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.436Z","timestamp":1786093902436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff50d8-5fe\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 994\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfBrjC1m%2F4X6kubYgM3wgwVhi%2Bd%2FXI5zXSudEyceR9oltlPcKaT9Du0WF0ivS%2BTpA4hyVS85kwQBstrE8yOMQJb3XgZcTzn9TGAZN8MSu8lBPgrlVmU6AUsz3RTp5%2BsQgjZdh6z3ZLbI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527ca3c4c56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-08-07T09:12:10.461784Z","times_seen":72,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.428Z","timestamp":1786093902428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4c7c\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXULawlznjVTC8TsEeQvHsiKL514XrIkC%2BdxaEh7vomrD2SH8kLSdEvEMeB7dCM4NdvthyZJ7yIOetfP0teOBt2OlZ2Gcu0kk0q6jzsM%2FOwn9n4B7lv5Q%2BquQK8bzULXKmm5mHR6ekuJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527ca2c4856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19580,"size_decoded":20376,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-08-12T10:44:18.425223Z","times_seen":200,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/uploads/2021/06/casinolab_logo-13.webp","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.441Z","timestamp":1786093902441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casinolab_logo-13.webp HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 07 Nov 2025 12:04:09 GMT\r\netag: \"690de039-75b0\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSc%2BoZrKz9D0lThti%2FAWNDm%2BdVdvmSCgNHVJ3DVre4Ol%2Bh0yS6SLcM0Q51fYHB9WkD57rDH4hj3WOZOdYXWMHDkFTv%2BXNy05qRc2Cbn9HVWkbEMsTVydUDw%2FL1xp6J33FnEgbqclnXc2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27527ca3c4f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30128\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30128,"size_decoded":30927,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f96f3d28d31c4cfd5521879427fede45","sha1":"dd1bc6fcf4b27472349d0c9637e0b2b696d24c55","sha256":"a9324ce9d167e8e77c331afe020c97bea593e51f0fe1ac9220e43b053878b30a","sha512":"ed165fc2c53ce01f5b6654bb7523f33903d8d21d2a680dd5137e84f1709a1296197baf6027ec53d5af104cad52d560ebe1b1330c9877cbab89dddc5b91f553b2","ssdeep":"768:yT7djYZUOfDc2+6VAtID6XtOlp38Ti3RoiK:GylDM8AtI2dWH3T","tlshash":"a3d2d09676b500bff23c013cda198ef2b5303a896c0274a6e1937399527d8ce973127b","first_seen":"2025-11-13T03:52:08.190132Z","last_seen":"2026-08-07T09:12:10.463253Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/uploads/2026/07/rainbet_logo-1.webp","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.435Z","timestamp":1786093902435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/rainbet_logo-1.webp HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 08 Jul 2026 12:10:05 GMT\r\netag: \"6a4e3e1d-22d0\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l1l8sT5Bal14nq%2BbKZqro8hcR%2FC%2F4rPP1%2F6ojL0S7lbRZNbYBE5KGzYH61hzj3Vvjx19V4j%2F%2BsnnsWnstYdxC%2BwVdChMvncbjxt1iCQYXlAp6PQgLl4vstpBbgC3l9pz4F1bohLpds0B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27527ca3c4b56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8912,"size_decoded":9712,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50a986f01111363eeba08778a4ff586a","sha1":"196a47bb332ef16b51b2bb864dcd15b0b0469931","sha256":"25324b8dd37c42c54be379505840c7fbd684c4d43787b9cfdd24730b68518423","sha512":"890ec5531364a25d795c933ea81b8543cf353a6fda5cbdae8f5f388a21e1c245fd4bb71d4723642605863ebe2a0335155232e5f73153263ecda4e4b5477b5ab6","ssdeep":"192:7jOJyHnVDDyfxsPsatWS5IJ1/l4vrWxpNk2paUvelwAJ6S7TFIqU:7aA9yJqc/8ripXptvelwAJ/W","tlshash":"4a029ed2956f28c2fdad9d39de2052e5723c6ac445f20f510368a9b28dd22c8aacd553","first_seen":"2026-07-08T12:06:19.255246Z","last_seen":"2026-08-07T09:12:10.463976Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.210Z","timestamp":1786093902210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsJe4%2FsH4z0WTFzhrct4bQR9fZWO%2B4pSDh2Fkk2qGNIHrnzuiW%2FmnXWyJ0tYr9lHa%2F2YYaJ3EfZxfQl8SWlcTWh3KxJTojmiH24%2B8QIHKliPv1T31N0xPZ4Ukx1tzZC2uSe%2BMhWbV%2BqE\"}]}\r\nage: 994\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68ff50d8-df\"\r\ncf-ray: a27527c8cc3356ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":952,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-08-12T10:44:18.372527Z","times_seen":71,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.138Z","timestamp":1786093902138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 09 Aug 2026 09:11:42 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SA9LtGQT4Y3FY%2F6IcUfkjWcobPuBiMJsFsboUOTMw8os1sQAcTMYcpAHb7XzvmDmgEL9xk6G4800KTfy852Q9sII1HPZHY1n2T5VSQyPOvEnqZTIRf3TysKJdsiLoOrp1s1idOvpRdb1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\nserver: cloudflare\r\ncf-ray: a27527c85c2756ca-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-15T03:46:29.734255Z","times_seen":419895,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/60c40d3b878528e75d4f36188066b01a.js?ver=6b01a","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.141Z","timestamp":1786093902141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/js/60c40d3b878528e75d4f36188066b01a.js?ver=6b01a HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Aug 2026 08:55:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759d6b-1665\"\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 994\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYEIktVCTEu4Nr%2BJlLF%2FvZjncBFsp7sFELR2umNqWr1sV7qudkdNbNV70ArOXrCU4wUxt91nhnjM1sdXlBvwmCjGjZH7pNJ14AjC%2F0i3ZAbKr1xOavBF6jrWgDR0Xe54MMkiyDLajOdl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527c85c2956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5733,"size_decoded":3292,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"2a0f93d3ab2aa6ae983d72e0678665c6","sha1":"5b71bf924609810351bdfd5793089fc5e7b44487","sha256":"b7642dec914a043ad4711ebc21b1d4842fc3eaf0e5de3e3b0c5a55d4e6781675","sha512":"b7e0d5da71966470ab929a82f70b07998d6077b0f28924233315f23d4678f4633793db3683953d11e34dd2c257db9817e649a37905c7a7b8685f2568079eef25","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMB:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSq","tlshash":"b8c1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-09T20:56:23.510034Z","last_seen":"2026-08-15T03:05:56.771412Z","times_seen":514,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.214Z","timestamp":1786093902214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S86yqM2SsRdxwPESEXVVV8AZmIXvzm5IajwChfUEc2Yau1AbtDMVGd7aI8JHYREhJXHcFZ0ZLeZLW7DxnWNN%2BqX5sXptxTYUfMj3nrF%2BB8oqy2%2Bbf94nD0A1YbpzNZTYYuR7wyHblhOK\"}]}\r\nage: 994\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"68ff50d8-11a\"\r\ncf-ray: a27527c8dc3556ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":982,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-08-12T10:44:18.410371Z","times_seen":132,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.278Z","timestamp":1786093902278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4c08\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zcn5DP%2Fc%2B3v4RZYgoqM%2BcPNxjrh0xP0TvZ7dGi4XNPBtEwshYvm7A%2FpooQVIaxzxH%2Fc8mkxoKhdvo70FKxomrhMyLkMeuEqlcFuKJ0eKewG305hsNsII3pYcFuxfXZwF1QjiC0efTTU%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527c93c3c56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":20266,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-08-13T04:09:15.497763Z","times_seen":193,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.439Z","timestamp":1786093902439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff50d8-5fe\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 993\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2pSG0wUengMpsEJVpXS2bgc7goO7mzwvD17pXfsJb7mPzFuNccUs4KZWU111CIzHxd3A9izlYwowyigchFV201yieBpv85UcA%2BFl4q%2FWA2ToBOx9u%2B2dpkmh9dlD%2Bg%2BYQeSejjZyWDM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527ca3c4e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-08-07T09:12:10.470703Z","times_seen":73,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.429Z","timestamp":1786093902429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4d38\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkR2EMG34aTqsYT71vn00NmzL1QJmyIbWoHAwqOc7kFHDwHffynhPXr9QREPgd89hkctj9juqOa415Hq%2BsZR%2BuNp%2FZWXxyX2cURDHD%2FKuHGOQC7S%2BxcpgpbL73gtFX3yBBdTgGMh1Yjc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527ca2c4956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-12T10:44:18.420181Z","times_seen":214,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.542Z","timestamp":1786093902542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff50d8-5fe\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 993\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3eD4LXeCecEbwXcqNgypx4WCbvgUR1au7imlvp3HTXLQ1Ofd1O6moUOdtCsil7vBvLAX1bjDAx4EwUtB09gNMWOWm98Trk4IFPw10YZhJIkwMrYeOb9lppo5QxtcC3lw%2FV5tbb2k0SJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527cadc5656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1543,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-08-07T09:12:10.473973Z","times_seen":67,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/dc643e95c382a8c237755c1b0595ecc1.js?ver=84d9e","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.151Z","timestamp":1786093902151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/js/dc643e95c382a8c237755c1b0595ecc1.js?ver=84d9e HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Aug 2026 08:55:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759d6b-19eb\"\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 994\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YqxbQdMTdCDcFar3kLeNaNcRnz84IT43gXZyC%2FkSVVGhVeAn%2FIkC9OTV2jWmfJ5N4GtEBfvlgRsF29H0ah4fObSx%2FMTjRHC4U4N4PmZDtvNs1k3pULuHctk%2F4%2FekY70Tqba2aFzd%2FyKQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527c86c2c56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6635,"size_decoded":3244,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4043)","md5":"34b7a3157a5046401828fc341eb29c5c","sha1":"23603180b6ad2cf5dc2ce3861a89983044c77f0b","sha256":"c8c144eb75af7fa8a84918141c548a3cbd90d242bb092cd81abe71b2550b5394","sha512":"177fe6a87afa1b5ac5f3e92ec021c97306eddc81e68590a13782c2619c7a7e4e54fbe421283d1cc9ec5ea8832d8e467c5451aa0f3e932e1bc767fe1d85d4421f","ssdeep":"192:lmPfv8AViGaWFIkwvbOHzdIr469nyIKzgcxh2xDaM2DbnJ8:lM8miGdx9zd04698ny","tlshash":"96d1a7a563917cbe04f60e466c3eaf97bdbd84bd6d83e115600bfc885c784d343806aa","first_seen":"2026-08-07T08:55:41.891018Z","last_seen":"2026-08-07T09:12:10.475044Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/e03c1cccdcbda7c52d3d26e10d5221c6.js?ver=221c6","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.153Z","timestamp":1786093902153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/js/e03c1cccdcbda7c52d3d26e10d5221c6.js?ver=221c6 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 07 Aug 2026 08:55:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EoRmJ3HCjb0tQjK6nLZ2SnvWRehWIVHMRwFn0X3bbSa%2BDAA73HX8nsQo5xWKoYTbaOIbQukdhAv3IJk5lAP8lsIzevSVeZVR3BBGfCcZQ1Ao7YTyfS1WCsNpSrsLNQ4X1D6dZNR2cl92\"}]}\r\nage: 994\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a759d6b-35d\"\r\ncf-ray: a27527c87c2f56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":861,"size_decoded":1043,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (306)","md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-08-07T09:12:10.477905Z","times_seen":10,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.271Z","timestamp":1786093902271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4bc4\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlsLHLr7qTcNbSrVzsKDr56OSmqbl4aMYEEBMxjF24n9uneUJS2hFRPnwCLZP4EjXXJNvpTHWM8nP%2BzgOiXTBUEp2dO4jobQ25INSsliBZncylf3QjJbGJFIzKgFa5dwCCjKAl7%2FY7zj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527c92c3956ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":20190,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-08-12T10:44:18.332667Z","times_seen":172,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.275Z","timestamp":1786093902275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4d38\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Ih%2FojN110ufVSn%2BY2x9xBICElgw878HXrW3v62txhoBZIfp6CPjenmntLYUu7H4xelIRTjBnfm9O%2BAax5MCfDXMTWlBP6i1i5Up9j2RV9P%2FBP%2BrqWSJ2ipmwyRwCbozFxVv8pv7bcix\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527c93c3b56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-12T10:44:18.420181Z","times_seen":214,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/b5c31879bc6ebf8d32a9f66f92a17c2e.js?ver=17c2e","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.140Z","timestamp":1786093902140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/js/b5c31879bc6ebf8d32a9f66f92a17c2e.js?ver=17c2e HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 07 Aug 2026 08:55:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759d6b-13bb\"\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 994\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPM1N0yg1CAgLXJSaJymw8PQcbXevyaxI%2Bq1xLHXaeVqgTbCCyB6r2JhQWGTe39XRa4bxnpadYQTSbD4ruZWkosMXdj4q%2Fi5ybBTGzztLGj07t5yUg51ei7w1M5u3Hzf8RMCGLKmAeZD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527c85c2856ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5051,"size_decoded":2656,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"4185e5366c2097571bcf5e9a5ec39e4b","sha1":"cea228b7e379402ecbaabbb0dad237576a9bbfcf","sha256":"5710b33cadec165f3c94c0912f43c7cbcdcb55e9a95efe993a410970810e2f52","sha512":"de333bece08dec297c731707dc32e238cab60890d5a9268de36e48543fbf06909264d222d0e656758f69a918485b9069c0a3cbe49c9141b9ddf4e56efea89c38","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Ci2:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY22","tlshash":"caa151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-09T20:56:23.587409Z","last_seen":"2026-08-15T03:05:56.727759Z","times_seen":548,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/js/143b23f1a613e064a6708d32ff949c35.js?ver=49c35","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.155Z","timestamp":1786093902155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/js/143b23f1a613e064a6708d32ff949c35.js?ver=49c35 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 07 Aug 2026 08:55:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3hrPBZl4y0gbq26GrgibfstPD14yX757%2FrBZS8fFrV2T2cj7ozkyznC0iSil0XdRiP6BE%2F5ea%2F9%2F1fEmA9vmT18BquMgzVfGt6VTjgxbGhOSS1G9KaQMZn%2BNWFSRRKYDosgTKmy%2F0EA\"}]}\r\nage: 994\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a759d6b-1ed\"\r\ncf-ray: a27527c87c3056ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":493,"size_decoded":1109,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (491)","md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-08-07T09:12:10.479949Z","times_seen":8,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/uploads/2025/11/cropped-rainbet-192x192.webp","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.317Z","timestamp":1786093902317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-rainbet-192x192.webp HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 08:34:47 GMT\r\netag: \"69086927-5a2\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HJPE3ofSHkrgVzCL34kTlHAI67qlYJcAkTKY11%2BuRsUg6GlN0IUqEaH7aXB9C6HxAyzcCiAnQ2wyqj7fdE9pak7wfBts9qA1g%2BdFeWWNisOI1crhiMdx2fLw%2BbMIbFCUqpwATk9lZb3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a27527c97c4056ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1442\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1442,"size_decoded":2236,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cb55c15d3d2c2ae2ac356c01dc8b510d","sha1":"0c24c69aa495e80a846ae51b83b25cde2582c00e","sha256":"fe5574d630de2ea7330ba47e5740d9fa5d96629d0df87a128d9282570d74dfd9","sha512":"bf06f416e4e949b5bdde3c49a7d31fb5d7fb1e4b066dfcdf89222b5cd9d2733419ab8981ff6c90aa013086ae8eb3531b8bc70bd52a27d229f52b2e934f32f0f0","ssdeep":"","tlshash":"af21c9da99916ee8fdc8e8046c6c454defe52140966444cc6a5a096c6dcf47c740581d","first_seen":"2026-08-07T08:55:41.893561Z","last_seen":"2026-08-07T09:12:10.480939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/uploads/2025/11/cropped-rainbet-32x32.webp","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.318Z","timestamp":1786093902318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-rainbet-32x32.webp HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 08:34:47 GMT\r\netag: \"69086927-106\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 993\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r43FNIQFVwlfODbXSbbpbYK5TKtvKrLVljTfOINsSTp1HZ1CId4%2FjXq2GSmk1uHSN%2FmMUzEqhJ7lRRAJyAQpN%2F88GhQDzQdpVG91VYb%2FqU3YCZLMJLPKzpn%2BUqBNsgmWrvj9JbrsF%2FAU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a27527c97c4156ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262,"size_decoded":1061,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"18a04ca2fc1411aeb3d243d557b8fb88","sha1":"31e054aca101decb47c0ec3a8a255ba24130e997","sha256":"1d00d95c985aafa49d6f8edff1cd5a4f2052760dc8baf0924b9a52b248443de4","sha512":"f1c235b516a8d104942dc53b94f63729960277ee632b31d7deb6a942d3df3d478ca4735e60a9a06a24b037987301bd7a6eefa6b4eafd6d5d8f2179f537e7c020","ssdeep":"","tlshash":"e5d0eb0ec06093a0a8a11d000e2eaaac304a282194c9b062c6da8b3480840b0392b260","first_seen":"2026-08-07T08:55:41.903115Z","last_seen":"2026-08-07T09:12:10.482731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.135Z","timestamp":1786093902135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 08:09:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a744127-282b7\"\r\nexpires: Sun, 06 Sep 2026 08:55:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 994\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVRFDxy%2Fwx1D0vdSDnyOaFRs%2Bz%2BzVpVPTvMW2BR7wN1GxflvyYIko0uTXHm5SHv8Jyw%2F01nMC9cqfi%2Bit4hhPQzjcCYcMNT%2Bh5MH8nBnqNUroynMmX7QUAe1P66hhqI7IQeI%2BGUwaTLK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a27527c85c2656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164535,"size_decoded":56208,"mime_type":"text/css","magic":"ASCII text, with very long lines (26538)","md5":"854fdbb2a9a236c58bbe56385afda32f","sha1":"9b93e5bd7ecff473a81fbe64c77526501170f2eb","sha256":"d4d80ec00a3259f6d3d568ba0db5ecd91d90f4055e8337e7fe2448a22e96027f","sha512":"df57cdad4bc9b9e55d8744464925693875a54e6a8af615923687951863066e57e88dc85807245c0981819a42f0f7d79effeeed49e6aebceb6d5655f3805a09a3","ssdeep":"1536:7CJHNK8QYQx/ZvB/qPWMiquqioMUXQSJYIMW+sJ3tpPVKcAq:QxItBE1MUU9W+apPVKc7","tlshash":"79f31bf2e25820ed377be229ef80b16c202db515ea015dfaf09bd01c59d66a201f9f5d","first_seen":"2026-08-07T08:55:41.90641Z","last_seen":"2026-08-07T09:12:10.484522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.273Z","timestamp":1786093902273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/wp-content/litespeed/css/854fdbb2a9a236c58bbe56385afda32f.css?ver=a668f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 11:00:40 GMT\r\netag: \"68ff50d8-4c7c\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtFk9tXEDSyKhDh9lcV4iobkqQ9f36I%2BQ8ksPg2BksZQnIx4nPuSYtab5gd%2BUU7xCOcb%2B5oBtrselJZaBQ9N51uA2y6rxLdxjhVxEpi6j1DbpfDEvEsofsnFrZ%2F4oPmPZimoOD4FwAd%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a27527c93c3a56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19580,"size_decoded":20380,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-08-12T10:44:18.425223Z","times_seen":200,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetofficial-au.com/wp-content/uploads/2021/06/bitcasino-1.webp","fqdn":"rainbetofficial-au.com","domain":"rainbetofficial-au.com","tld":"com"},"ip":{"addr":"104.21.19.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetofficial-au.com/","date":"2026-08-07T09:11:42.438Z","timestamp":1786093902438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetofficial-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 14:45:29 GMT","end":"Fri, 18 Sep 2026 15:42:57 GMT"},"fingerprint":{"sha1":"9B:F8:2E:1A:2B:B7:B8:79:36:36:80:12:0C:07:59:9D:E1:46:D0:64","sha256":"B4:44:8A:37:FD:A2:26:81:26:16:D4:E5:32:CC:82:75:F9:8A:A3:1F:00:C1:99:87:4B:AC:12:F9:17:7F:19:95"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/bitcasino-1.webp HTTP/1.1\r\nHost: rainbetofficial-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetofficial-au.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1YeDVAbAlgURlgNRVoXBg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 07 Aug 2026 09:11:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 09:04:32 GMT\r\netag: \"6a180520-2492\"\r\nexpires: Sun, 06 Sep 2026 08:55:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 994\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEp9LEOjHAI2XmSd9%2BxtNtSw0Et7jjr0l%2BdjdpWmYUuSMm6XtxC4aKZfAwmN3TjYsbSy7emhlu2LkummPIb481G73KByS6p8rCqgGfuBZFPBbbT7r1mI8eROkJUJYA278eap8U33wQT3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a27527ca3c4d56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9362,"size_decoded":10152,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-08-07T09:12:10.486232Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"rainbetofficial-au.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}