{"report_id":"c11cc467-aa21-42ee-943b-0053a8362808","version":0,"status":"done","tags":[],"date":"2026-07-23T00:55:18Z","url":{"schema":"http","addr":"rainbetwin.casino","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rainbetwin.casino/","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"title":"Rainbet Casino Australia: Claim Your Bonus \u0026 Promo Codes","dom":{"size":163272,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59344)","md5":"7382c4a15cf252baa36a1bd4fc6a220f","sha1":"a426afab17890598e250718d9dfdb0a364be0ccb","sha256":"8d25320a50bd45c91ed3d82731fb4a93ed21100c4d8b9cde16d6854bb4a1fd53","sha512":"6e005be6f693c2a2186176632cf4852e31d9b6bc0c789cb8d50be6e2743b1fbc8d9c2345e62b875c9b33c366481d57e9e9b6564e2699b3c7355d446622671443","ssdeep":"1536:gy7rCoL+jnFuHfhJiTCYF2pP9ypgRTYleaXzXwnKOjW5:VKApPY5XwnKOjW5","tlshash":"c6f3f861b7a029ba213b437df55bf704662d9a13db4e23e5f0fec05855cab9204b270e","dom_hash":"domhash45040e96b761fddcbaf3dd24eb8f5cf9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetwin.casino","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T00:55:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetwin.casino","ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-23T00:55:19.842642Z","last_seen":"2026-07-23T00:55:19.842642Z","alert_count":14,"request_count":14,"received_data":7159842,"sent_data":7594,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:27.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Spectra:2.19.28","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.4","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","size":25719,"data":"","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-07-23T12:52:47.446267Z","times_seen":2928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"905a8a864a754df232a753b7753842f4","sha1":"eae291d36e08e7fc4915b52cb11f5a3ab8406f65","sha256":"1396ae803a26cdd04cdabecb3e2d07d433564c8c335717cfe6c6e91fa297af57","sha512":"66a5db235ae288904eddbee2e2bd4e92d1c3d09e8dd15e0f899c02c3a4709efd414ee154fac0db4474ec8ea3c06de765cca18184cc9422c9fe0abf3de624dbef","ssdeep":"","tlshash":"3a71979ae77638dbb2f900f2697a0d47eb614435d6c8d038c9bda3141cb5893c274b46","size":3501,"data":"","first_seen":"2026-07-23T00:55:24.327244Z","last_seen":"2026-07-23T00:55:24.327244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-23T12:45:22.604236Z","times_seen":15271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfae1e8e774dfef11731812874e3cfc8","sha1":"1cdbd9c79f76a5aece257d2807c0f4cb9e4d52b8","sha256":"67b82abae5252e7f4fe9d20924652482ece99df3ca91ed6aa1c98a53c1f98f1d","sha512":"601334ac697853d4abf3e1e5c5706fa01c9da513b0fd045e2eee0e8b50a75f5e5ab67fd170fb54703f5a79417d8703f8b0d186801e69249a6784d923a1401e5d","ssdeep":"","tlshash":"a8c08c3f1500677824e31ee8a8f7ab903f232fa3d29e0080d8bc86569390d8b9c21dd1","size":172,"data":"","first_seen":"2026-06-03T00:16:41.164862Z","last_seen":"2026-07-23T12:52:47.50666Z","times_seen":2445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-07-23T12:41:17.121984Z","times_seen":15729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1865563ddc7858ad8f5df54bf0d4f3a1","sha1":"8a1083151ffc79be34dfadffdf09ed386708adaa","sha256":"ed40e7c01da10e3ce3b9b6781f996cc5cbe8886a730390f8d973e361815eca8e","sha512":"e847c80bd60b06853be9b227fba7dc9aaecaf1bb86c30d7acfa880ac53a6147ba9edec4cc115fafdeb6008a33e7e4a4164e13d763f8e7509d33980aac7638837","ssdeep":"","tlshash":"60d0a91002d22e0176db8ca290218fa8b0fd92a0d1d4f08daa7c464862e6a1a1a68209","size":220,"data":"","first_seen":"2025-12-06T06:58:10.775603Z","last_seen":"2026-07-23T12:41:17.117445Z","times_seen":1939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/astra-theme-js-js-extra","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"16471009feb5e103b891cfc03f10f772","sha1":"da7a78fe96ffdc73be68ee52c18a6d053b1e758e","sha256":"80e994d0ff653a2437426c7e2306164a2cb1e169a6fb16de6f76c6ca063bf2e5","sha512":"d3ce08de7e8c2ac8a4997d95f2112fb55a5cdabd64cdb4cb0906cf9cee36972f5aa0b2cdf494e5baa8419ce4f49d6298f9778205d2b0b4d018f9e125d2c6ee3b","ssdeep":"","tlshash":"8601a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":742,"data":"","first_seen":"2025-12-27T13:16:53.875686Z","last_seen":"2026-07-23T00:55:24.331314Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/table-of-contents.min.js?ver=2.19.28","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"287d46ec03cf7d042963b9dd8a5781c1","sha1":"56c252159c315a1c4f89466b5ec522304549ba12","sha256":"73f32f808c28224c809f0dfc95f5059369d19faadeea0793b00d263de91b11e6","sha512":"4cb11872788cf4344cfe972abcfa674a06e6ad334b6860506805892d33429c2f630c6a57740f2018c45f8b6b510d340c0d960989dd718b97ab4d78a3863f7a87","ssdeep":"192:+w4ml2CwRMqrv7FfVPmD7thV8oqrphK2ky9bVcBH+NQdlRjBUpcQ3YA77U62d:z4U2CwRMa6ioY02ky9pcBhdl1BUSQ3xe","tlshash":"4822862063102d7a21ef86db74a9aac1f16404dfaa0280b5b9249c5f3574ed731b1ff9","size":10643,"data":"","first_seen":"2025-01-16T15:16:58.578825Z","last_seen":"2026-07-23T01:00:31.47048Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/faq.min.js?ver=2.19.28","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8440185826d6eb907dd29131821eadc2","sha1":"9d8386225a777c48327b1bdb04fd48c0bef23c97","sha256":"128346e15870a3513fb1ae9665dd3f7cb2bea87b7a912f01e97ce3689b103d10","sha512":"4368d72e850ed5f465693e2ef0410e8736d5efd58b492a7f92af7e7f5c42d475852c314618bbb85e6d6005e5ceb03010d833704bbe5a02dcb1675d6db1aeb732","ssdeep":"96:LDyacrU6tdDG4woPMaqv4UryZi36lk5/DBX7:/yf/tdDG4Py4UryZS6lkrL","tlshash":"7d81046027003ff724d7628b844bb8c5b16068c99f65a8b4772c982f295dece21f17f5","size":4110,"data":"","first_seen":"2023-03-14T02:20:22Z","last_seen":"2026-07-23T01:00:31.45897Z","times_seen":1837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/uag-plugin/assets/0/uag-js-9.js?ver=1781011759","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"17eec6f516580d861c00bdcc991a5c9b","sha1":"8ff5f921d598114aae859c1e1faafc4f492bfec8","sha256":"d4e27b2ea92a0252fc7dd1d3f6612e3eddf7f5d5a982c5425cd38f79947f0995","sha512":"003b797d9f31a7f5a6149cb1661188a818bc6f0b6c9a669cee66017b2f4c11d7a944fbb4fed71ed330c5ea2e80df8fbc3a16da8ce2a56fe1926a34fb959369bc","ssdeep":"","tlshash":"b1e06f1993403a3984e2e53c363ebb404a3e00a32880b828a40346bf3cf879b407289f","size":381,"data":"","first_seen":"2026-07-23T00:55:24.325691Z","last_seen":"2026-07-23T00:55:24.325691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/2026/06/%D0%B8%D0%B7%D0%BE%D0%B1%D1%80%D0%B0%D0%B6%D0%B5%D0%BD%D0%B8%D0%B5_2026-06-09_162548369.png","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.974Z","timestamp":1784768090974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/%D0%B8%D0%B7%D0%BE%D0%B1%D1%80%D0%B0%D0%B6%D0%B5%D0%BD%D0%B8%D0%B5_2026-06-09_162548369.png HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 13:25:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1024133\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1024133,"size_decoded":1024421,"mime_type":"image/png","magic":"PNG image data, 1024 x 687, 8-bit/color RGB, non-interlaced","md5":"d4062c1c3070ec55ad3999464e8c0602","sha1":"254d8db3df164303094a269e5ce4d20921139713","sha256":"74edd46318b2ea22a4179535ff563181e0d04d53052d2726f197837c0e140f61","sha512":"0ff6dea3bcc6e81e3bebf101e0f70aa1c4307b62bfe042dea9278af5ef76ddff0a373a638ebedb5e719da9893d3d8677390eb891d61b88d0764db563b7968bd0","ssdeep":"24576:cyVRRT4HtrQYalhOpvP7EoNgzAr6TBltvWZ7kcinzf7y9Y:ckn8NMYAOy1zltH+ZbizfIY","tlshash":"fa2533e1b4ee97b0edee60ed5d30ae733258aa5a3761bbf0e074d031514375b422ca85","first_seen":"2026-07-23T00:55:24.301016Z","last_seen":"2026-07-23T00:55:24.301016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.4","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.957Z","timestamp":1784768090957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.4 HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 12:54:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8375\r\ndate: Thu, 23 Jul 2026 00:54:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44801,"size_decoded":8704,"mime_type":"text/css","magic":"ASCII text, with very long lines (42727)","md5":"431909ef7202ab2e448f1c809fbc6df4","sha1":"7bb55930e4cf2b13049062f37bf14377933d4a1b","sha256":"cb9e5b3058d1e3621033fdfe0f593020be47a479be74017760b6143ed5c1add6","sha512":"c5ebbec18082755f853618a80822985835720f5e8aeb8bab00b1b322e3bdc0035e159d82c0fc4c03d8d4efd2e6790b3963c67b21bf0f61da21e2b424c0cfadda","ssdeep":"768:NPQOrk1rhbYollnk+FHkFYCzxdvN3bR2/WLmiyCFS7QHQtBU5WOT1enhm2a7ZAR3:xGUY+LHQtBU59TwDuaP","tlshash":"1e13f86147d035395233473efad6ba082b694313d74f26e2f8ab8768c9c57c71a72a4c","first_seen":"2026-03-24T17:32:56.765084Z","last_seen":"2026-07-23T11:19:04.852531Z","times_seen":10081,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.4","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.961Z","timestamp":1784768090961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.4 HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 09 Jun 2026 12:54:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5693\r\ndate: Thu, 23 Jul 2026 00:54:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25719,"size_decoded":5950,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25719), with no line terminators","md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-07-23T12:52:47.446267Z","times_seen":2928,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/faq.min.js?ver=2.19.28","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.964Z","timestamp":1784768090964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/faq.min.js?ver=2.19.28 HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 09 Jun 2026 12:54:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 967\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4110,"size_decoded":1223,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4110), with no line terminators","md5":"8440185826d6eb907dd29131821eadc2","sha1":"9d8386225a777c48327b1bdb04fd48c0bef23c97","sha256":"128346e15870a3513fb1ae9665dd3f7cb2bea87b7a912f01e97ce3689b103d10","sha512":"4368d72e850ed5f465693e2ef0410e8736d5efd58b492a7f92af7e7f5c42d475852c314618bbb85e6d6005e5ceb03010d833704bbe5a02dcb1675d6db1aeb732","ssdeep":"96:LDyacrU6tdDG4woPMaqv4UryZi36lk5/DBX7:/yf/tdDG4Py4UryZS6lkrL","tlshash":"7d81046027003ff724d7628b844bb8c5b16068c99f65a8b4772c982f295dece21f17f5","first_seen":"2023-03-14T02:20:22Z","last_seen":"2026-07-23T01:00:31.45897Z","times_seen":1837,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/2026/06/cropped-cropped-Gemini_Generated_Image_z6mg3wz6mg3wz6mg-178x59.png","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.972Z","timestamp":1784768090972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-cropped-Gemini_Generated_Image_z6mg3wz6mg3wz6mg-178x59.png HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 13:29:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16390\r\ndate: Thu, 23 Jul 2026 00:54:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16390,"size_decoded":16676,"mime_type":"image/png","magic":"PNG image data, 178 x 59, 8-bit/color RGBA, non-interlaced","md5":"050937aff307b2b906975f47c87feb56","sha1":"d18f7b21697bc1365a874e4ef815e8f03c312af2","sha256":"b162a44d1b56945fe82f3a6bfbceb8a80903546379d3148fab2cf866751b8424","sha512":"f147da221754ca6f1228bf78a5b2a6fb435a778d7209587aaf700a8f7dccdcd827b75cce6d8ff48dc57b709436978e585a62db31dfb12891f940cf36b027507b","ssdeep":"384:I+/0fYbj36k8o2EuM2Qau1z2PKZAQWXSroc9i07GAgolJTHmen3:I+/0fOj36kefTSymAziroUilwjme3","tlshash":"ac72e18e8703edf751c0bc60bda3c9f3baa10aaae575d1e702c995495dd53543c7e201","first_seen":"2026-07-23T00:55:24.309342Z","last_seen":"2026-07-23T00:55:24.309342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/2026/06/%D0%B8%D0%B7%D0%BE%D0%B1%D1%80%D0%B0%D0%B6%D0%B5%D0%BD%D0%B8%D0%B5_2026-06-09_162116148-scaled.png","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:51.020Z","timestamp":1784768091020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/%D0%B8%D0%B7%D0%BE%D0%B1%D1%80%D0%B0%D0%B6%D0%B5%D0%BD%D0%B8%D0%B5_2026-06-09_162116148-scaled.png HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 13:21:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4971730\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4971730,"size_decoded":4972018,"mime_type":"image/png","magic":"PNG image data, 2560 x 1440, 8-bit/color RGB, non-interlaced","md5":"a7ca2fe845be03ba12e0cc481705443b","sha1":"2941b96e127368742cc66dafe1829fd88b7eb078","sha256":"a5aa217a2aae7eb594d84681c14294a835b81993362c152af60ff580d5ef9c03","sha512":"73f59911e50ba051d1f8b08100fbca0be3cc6b37b70457bad6e76ef0922751b11d2415a834c1cc9c9d579db310f0a540bbd20d9ca71a0235c2bfec3d54e6a250","ssdeep":"24576:RI1IMxBpZ/z2VnxcOxFXdW15t1XRhFiDQAgQfyc8g:RCIkvZz2VnSIFXdIjxQ","tlshash":"8f25338cef5491c5c607d5424d8f250eba8233a1d7ce5d3f3936a1ae29b8e2071e7762","first_seen":"2026-07-23T00:55:24.312422Z","last_seen":"2026-07-23T01:00:31.460503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/2026/06/cropped-Gemini_Generated_Image_z6mg3wz6mg3wz6mg-192x192.png","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:51.286Z","timestamp":1784768091286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-Gemini_Generated_Image_z6mg3wz6mg3wz6mg-192x192.png HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 13:22:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39265\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39265,"size_decoded":39551,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b34fc892044c465d327835588f311395","sha1":"a6fbc7ceb5cd99451ad5348f891ac87556b40ecb","sha256":"cfdfadf07337c15dd9e79f6c0ace035618fcf55e1e0d3d62eb800ff98796ab46","sha512":"e68a70cb980ad949416441540a994b044d5f7194c1b8257d6510496947323eeb4e2dd180b27665b6f8148756f654561e8efb5e24640107c490eb110898e6001f","ssdeep":"768:NS1uyVaIOsiCjCC/Wda7r/09anowjU5Gc+KmKR9HLcww:NkoIOsdCTIVonguHLW","tlshash":"6403022fdaebec80b5624412a2432e108f9182efe648107b7387dbfe3315c1e475d962","first_seen":"2026-07-23T00:55:24.314679Z","last_seen":"2026-07-23T00:55:24.314679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/2026/06/cropped-Gemini_Generated_Image_z6mg3wz6mg3wz6mg-32x32.png","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:51.287Z","timestamp":1784768091287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/cropped-Gemini_Generated_Image_z6mg3wz6mg3wz6mg-32x32.png HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 13:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1942\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1942,"size_decoded":2227,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0100d49ebf5edfcd79afde179719a0e5","sha1":"630cdfaf08c54a77dad22ef4f5cc7d52ae40da47","sha256":"c88f5aa21b3a04e73c2d435b7c956f6124c073c0598fbd76899db3b20f49386b","sha512":"6c7df8c967a783a2487a3ac99743a5e8ce80b8a6b25c8198569e282fee4ab0e72f123e59fc8057e54a0a3f9c5fbc67a04de5b3cf8685a7680adad0dd5e41ba36","ssdeep":"","tlshash":"e8412a62882506cd226832016e8bb187cd066b923ca0fe18a5edd3334130a70e7ccf39","first_seen":"2026-07-23T00:55:24.316784Z","last_seen":"2026-07-23T00:55:24.316784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:51.312Z","timestamp":1784768091312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.2 HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 10 Jul 2026 04:07:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4974\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5231,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-23T12:45:22.604236Z","times_seen":15271,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T00:54:50.267Z","timestamp":1784768090267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://rainbetwin.casino/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetwin.casino/wp-json/wp/v2/pages/9\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetwin.casino/\u003e; rel=shortlink\r\nx-litespeed-cache-control: public,max-age=604800\r\nx-litespeed-tag: e1c_HTTP.200,e1c_front,e1c_URL.6666cd76f96956469e7be39d750cc7d9,e1c_F,e1c_Po.9,e1c_PGS,e1c_\r\nvary: Accept-Encoding\r\netag: \"41396-1784768090;gz\"\r\nx-litespeed-cache: miss\r\ncontent-encoding: gzip\r\ndate: Thu, 23 Jul 2026 00:54:50 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:27.8","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Spectra:2.19.28","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":161997,"size_decoded":30971,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59344)","md5":"144ddb7fcaf13ac8aaa96010c04a2d7c","sha1":"172a78a5deefb1e704ec63c16dfeb724be81bb58","sha256":"8d26c3f2d33384bf3ae16c7f65676aab2b4cd5bd698878232cf203ba54bc83b8","sha512":"3cdf753b2e80e36215e6ec08f57dfea5ffab11d8e3440837244594b6990f85c6760ad7e1545799e733aeeeaa59b2401d0a37cf0c346ebb0ddf4275c57a0fb4af","ssdeep":"1536:ZHN5PoL+jnFuHfhJiTCYF2pP9yp3RTzPeFzTHnKOjWk:BTApPYGHnKOjWk","tlshash":"40f3f861b7a025ba213b433df55bf704662d9a23db4e63e5f0fec05855cab9204b270e","first_seen":"2026-07-23T00:55:24.319538Z","last_seen":"2026-07-23T00:55:24.319538Z","times_seen":1,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":107,"connect":28,"send":0,"wait":253,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/uag-plugin/assets/0/uag-css-9.css?ver=1781011759","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.958Z","timestamp":1784768090958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/uag-plugin/assets/0/uag-css-9.css?ver=1781011759 HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Jun 2026 13:25:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1676\r\ndate: Thu, 23 Jul 2026 00:54:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10756,"size_decoded":2005,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10751), with no line terminators","md5":"30758a9f5b8600877170caf327484a3e","sha1":"dc3897c5c21dbb29c6e37508ede660df3533c317","sha256":"7c659f26990fdc3937cf2396a03be10c831c125056fa135d2236d332a9976f61","sha512":"42df06b45b73bd786cfc9fc76574113649e1ccc1c7cf74f1b9763ceefe5ebca18e2be2d7b9accea61d222cbe3a535dcc2b519557d0efc49ed6cdb0723e8c8164","ssdeep":"96:cdMISPPqPkAZG+8MeZXqV/AF5GrQM6P8PvClspNdNCNyfQXARCR5SohUerQ/P8Pz:DKxX8MeZou7+zEyfQX+Q3vB","tlshash":"6e22bc2159207bec2073e551ec6b6deb2646a2439d83bdfaf409900fbd9dac41cd271b","first_seen":"2026-07-23T00:55:24.321176Z","last_seen":"2026-07-23T00:55:24.321176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/2026/06/%D0%B8%D0%B7%D0%BE%D0%B1%D1%80%D0%B0%D0%B6%D0%B5%D0%BD%D0%B8%D0%B5_2026-06-09_162519900.png","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.960Z","timestamp":1784768090960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/%D0%B8%D0%B7%D0%BE%D0%B1%D1%80%D0%B0%D0%B6%D0%B5%D0%BD%D0%B8%D0%B5_2026-06-09_162519900.png HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Jul 2026 00:54:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Jun 2026 13:25:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 820744\r\ndate: Thu, 23 Jul 2026 00:54:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":820744,"size_decoded":821031,"mime_type":"image/png","magic":"PNG image data, 1024 x 687, 8-bit/color RGB, non-interlaced","md5":"3ba5449fbfe6b5dd0586350ee823943a","sha1":"44740c14f540606a148228202af5672308822c14","sha256":"a4a8a3f7042a7ff24a928f88429652bade0babb30f108e52c2bb8aae1094a3ab","sha512":"8561cdc03c3d93a5303ce86492ab34061027e6846b0027633689f1f2bdb2fe87d9231e5406bf28aac47c213935a1de23f9818c077b2be9f671e9503c60e238ee","ssdeep":"24576:PzQ8dsdhboZSe2r/KL9s+ZBAh3mTJ/Hro:PzQ8ds3bBemS9s+HAh3mlPM","tlshash":"72052301c3cdb5fcefeb156a9617cb8425039b71674e834e0aba648ca06d6ec3469f1d","first_seen":"2026-07-23T00:55:24.32333Z","last_seen":"2026-07-23T00:55:24.32333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/table-of-contents.min.js?ver=2.19.28","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.963Z","timestamp":1784768090963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/table-of-contents.min.js?ver=2.19.28 HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 09 Jun 2026 12:54:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3239\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10643,"size_decoded":3496,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9165)","md5":"287d46ec03cf7d042963b9dd8a5781c1","sha1":"56c252159c315a1c4f89466b5ec522304549ba12","sha256":"73f32f808c28224c809f0dfc95f5059369d19faadeea0793b00d263de91b11e6","sha512":"4cb11872788cf4344cfe972abcfa674a06e6ad334b6860506805892d33429c2f630c6a57740f2018c45f8b6b510d340c0d960989dd718b97ab4d78a3863f7a87","ssdeep":"192:+w4ml2CwRMqrv7FfVPmD7thV8oqrphK2ky9bVcBH+NQdlRjBUpcQ3YA77U62d:z4U2CwRMa6ioY02ky9pcBhdl1BUSQ3xe","tlshash":"4822862063102d7a21ef86db74a9aac1f16404dfaa0280b5b9249c5f3574ed731b1ff9","first_seen":"2025-01-16T15:16:58.578825Z","last_seen":"2026-07-23T01:00:31.47048Z","times_seen":141,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetwin.casino/wp-content/uploads/uag-plugin/assets/0/uag-js-9.js?ver=1781011759","fqdn":"rainbetwin.casino","domain":"rainbetwin.casino","tld":"casino"},"ip":{"addr":"31.131.20.77","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetwin.casino/","date":"2026-07-23T00:54:50.968Z","timestamp":1784768090968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetwin.casino","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 19:50:44 GMT","end":"Wed, 30 Sep 2026 19:50:43 GMT"},"fingerprint":{"sha1":"6F:1E:3E:B6:D3:8D:E5:15:A9:2C:6F:28:0D:AF:2A:8E:52:FC:8E:FC","sha256":"14:C0:D4:E6:83:3B:76:FB:03:77:C6:4D:A8:97:6B:1E:F2:13:F8:25:F3:36:9C:34:4D:88:A9:0B:97:7B:72:67"}}},"request":{"raw":"GET /wp-content/uploads/uag-plugin/assets/0/uag-js-9.js?ver=1781011759 HTTP/1.1\r\nHost: rainbetwin.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetwin.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 09 Jun 2026 13:25:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 195\r\ndate: Thu, 23 Jul 2026 00:54:51 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":381,"size_decoded":451,"mime_type":"text/javascript","magic":"ASCII text","md5":"17eec6f516580d861c00bdcc991a5c9b","sha1":"8ff5f921d598114aae859c1e1faafc4f492bfec8","sha256":"d4e27b2ea92a0252fc7dd1d3f6612e3eddf7f5d5a982c5425cd38f79947f0995","sha512":"003b797d9f31a7f5a6149cb1661188a818bc6f0b6c9a669cee66017b2f4c11d7a944fbb4fed71ed330c5ea2e80df8fbc3a16da8ce2a56fe1926a34fb959369bc","ssdeep":"","tlshash":"b1e06f1993403a3984e2e53c363ebb404a3e00a32880b828a40346bf3cf879b407289f","first_seen":"2026-07-23T00:55:24.325691Z","last_seen":"2026-07-23T00:55:24.325691Z","times_seen":1,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"rainbetwin.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}