{"report_id":"c9939ace-e7cb-4fa7-9872-3a4711055719","version":0,"status":"done","tags":[],"date":"2026-09-17T03:18:07Z","url":{"schema":"http","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"title":"RAINBET™ NZ - best place for gaming and crypto play","dom":{"size":262016,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4149)","md5":"0c9b128d4317e251d9d3d1c561095067","sha1":"1f1ddc0aa5a22a23737ca8d69e3ead34d2e246a3","sha256":"e23bf3542ba4bac4f65150fefdbb80deb520fde7e0aa8b05a03e0a607020d280","sha512":"b11dd91453ab938d5b200c44a2f338ce0853fb72b965141dfe4954e13646b2f3c73de87d1af691696c8fde07832162534b3487723723c2e87b6449d9f2e99126","ssdeep":"3072:EcOmozWdXpGVzKTeB6wrHjMeHKiNVG+Q8YAj0X:EyzdXpeqV","tlshash":"fb44d85b9ba72055752bb23c9fa62759723cc003c505cdf8badde2588fc9b9188b274c","dom_hash":"domhashad248a5e2ae71d8f076f33ab91716aae","first_seen":"2026-09-17T03:15:51.451813Z","last_seen":"2026-09-17T03:18:08.821366Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:18:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbets-nz.com","ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-09","domain_rank":0,"first_seen":"2026-09-17T03:15:46.960346Z","last_seen":"2026-09-17T03:15:46.960346Z","alert_count":100,"request_count":50,"received_data":987224,"sent_data":26422,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-09-17T03:18:08.854124Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8db2b4adbca54b4bc649b8e1b3de927","sha1":"811c636f74c190d7775edb63cd2ec56789d30d35","sha256":"78724ad33b58e3819ea83f4152ac612e95cd50ee9948b52a5cbee4c17aef7ae3","sha512":"d558f7398a1a7d1dd3992a06a34ed82656cdf82cb8a945e14b0a622b6d445e8d677ddd5982a2afd06851b5dac56348cde33b1233e8ab1c8e651f8b24ad80b862","ssdeep":"","tlshash":"5fd0a93c6ab11a724a37903789faef8e7a34502aa18a9c22393c04000fc0f4538a08b1","size":213,"data":"","first_seen":"2026-09-17T03:15:51.504028Z","last_seen":"2026-09-17T03:18:08.85465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"612ed3f19e4d1409ffd23f27cac41740","sha1":"05e72f2cd19b1c799c6c0ba46d06d020ac171d6a","sha256":"baa39999002671aeda3b3c01a9d9b56131c063cfbf95dd02a55df956d374dd4a","sha512":"7e0f5979bd078337fca2f09a8b104befe3bda54d2c4b60c1a2d418976bef1d668871efc85717d9f11b62cb67c033eacf0c78cd7a5187fba57d6cceb7d90d7ea7","ssdeep":"","tlshash":"2e41fb31b3bd243147bf60b529e5269e2a39508239838ca6cc9c9c0624c0e5d4875cbe","size":1916,"data":"","first_seen":"2026-09-17T03:15:51.505131Z","last_seen":"2026-09-17T03:18:08.8553Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-09-19T12:56:51.184273Z","times_seen":59203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86251445d0e8ac3a017d8a0ce3acd5a1","sha1":"c888c1b67dfc8ff22964cb4e145d94e44690e96e","sha256":"6f6559d0a82ede2c87509bc418cdca6a2b7f63d435807f0b45f23dbd7145402e","sha512":"4c44eb57fee9bbb93fb419ad97b6400d38a0e035c009e0ae3b1c174fa304d253c0488321a52a879c1f3c70c1d704b303be4bc73907abbb4b371ac42d79189af0","ssdeep":"","tlshash":"7ef0ac842c79992744d2a2cb35aa7904b06df910537f6d47b20e08491a50e6daaf395c","size":567,"data":"","first_seen":"2026-06-24T15:19:36.100206Z","last_seen":"2026-09-17T03:18:08.856534Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"faa5729e200ea02e8833220071f6e0fb","sha1":"9dccac9887657a0159b2f783d989d24ba2a7269e","sha256":"3040027b0eea1f5ad24c990210b1c23a3cc39aef0c397d5057e2f8a98daae8ed","sha512":"a0c1ff627d6ea4ceb663f3f3046fa46b355e1c4a8e48782ce2e6a4b56002987c2921e77c28d7a6e89a8d9cc516602dfff067550721c33945bf7ebbec88774602","ssdeep":"","tlshash":"eac0809ad5e82c4924f5c168417c1325f1249517cf2f5ea5f24e014c5fb807db5245ca","size":189,"data":"","first_seen":"2026-09-17T03:15:51.507634Z","last_seen":"2026-09-17T03:18:08.857041Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f3406c30fe1032ce37e2357a2fa0ffe","sha1":"70b7793b1e1ea139a64e1f54a2cad14398114caa","sha256":"66290d0ded25533cb892002c2d5ba1c21ffa11f22ae8f600a46e3ad1af9899d6","sha512":"6aa43fcf4d943e9a44f29059ff0a43135de760e951f3fea9f0a9f1cf4a480181bda302b351b73996c15efdcdd818b748d1782613e690d65db00f7d4fa5598e0a","ssdeep":"","tlshash":"8ab02b154ed40f5221d01ef5c4204772116c3420cc1098808283c44001265734a48000","size":121,"data":"","first_seen":"2026-09-17T03:15:51.510956Z","last_seen":"2026-09-17T03:18:08.857758Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8188552f4b3165689d154ca8584982b","sha1":"b962a3910231951e091f2c50158034691465469e","sha256":"edd24643a5b691bcd8b27120184687719669b99dc780086b2ccf668097fa37a2","sha512":"42fbe19de342ce5da5973a6b40760491a78e912c64bb4c86241706226f508e8d8e010451ac8b03c7f8314f8b73f66348575f0ea3afa51bf6dcef4d7ae76570d4","ssdeep":"","tlshash":"cef059db6b5c0432c25f305e105eb3cd3d7d803269412d67fc78c45248f0d98966289d","size":544,"data":"","first_seen":"2026-06-10T08:18:22.009293Z","last_seen":"2026-09-17T03:18:08.858378Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a85ad5ad6b7dc5739c536ead402ece9","sha1":"4f0bad18af7987df0ba4d003059b1229bf542b4b","sha256":"9bced38b31e02c72ccf4ab291b5cf6383aa18fc295986e66f14aaae8c684257a","sha512":"b5fcc29d39b6101604d6ff9bf50b8f74e98074175a795ed6ac5e77cd34267a203a827c23f9f7cc35b7195a7cb960243f4fe6224fa1d29bc8267ecf67b8bb86e7","ssdeep":"","tlshash":"842147c2f70c2432d5fe343f694a52cc252da071ac1014ba7d1c672c0572f9d46aa6ac","size":1366,"data":"","first_seen":"2026-06-10T08:18:22.012949Z","last_seen":"2026-09-17T03:18:08.858869Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-09-17T03:18:08.840008Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-19T12:41:53.450861Z","times_seen":436207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/contact-form-7-js-translations","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"493bef72b929d60b14d1d66a14d03e54","sha1":"c5287ea2e7b4deb6bd69f35b829f206546399dd4","sha256":"1c2bb1f18347d95483d86e6e5b285854103ed5a2cc9a2e8aa899679dc0968dbf","sha512":"9d655d49d556b5512e7995d5001b1c9e35b24e1aa8f32fedac814e465652e76459349b94806fc2c72205543f6da0850b0094dce594a81428150d450564de84d3","ssdeep":"24:qq2WBWUcWLNVT7sJKcQSxHTDQHcHoc0ZSWv:t2WBWUcWLrTY4cQEHTISWv","tlshash":"05f10c84ec78d92784d2a2fb35aa7904b06cf810c37f2d47b20e08491a50f6daaf390c","size":7694,"data":"","first_seen":"2026-09-17T03:15:51.516143Z","last_seen":"2026-09-17T03:18:08.859394Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/scripts-js-extra","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6583436ee2591582c71ecf3fa6a25b2a","sha1":"5a12626dd42ebb0c9eb836320a92964074ea93bc","sha256":"7dc0cbad17660c4454e1a0377fbafb3797c4d05447265b16687882b3b68e9e40","sha512":"475603ec5d436cb463d80e72e26e10b54a3779992d78902c91f1086051e43de44a14465555e6913756560a7c32f20e0cd92e896e3acce6c35cc4ea1fee4d22f6","ssdeep":"3:Hr6EDew5vNVBgVgrTHnJH+LX/7uyGY3r:X9x+VgrTQLXyyGY7","tlshash":"e5e12b15ced40f5261d05ef5c820477311ac3420cc50d8808287c44001265734a48000","size":7267,"data":"","first_seen":"2026-09-17T03:15:51.501255Z","last_seen":"2026-09-17T03:18:08.860131Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-19T12:38:59.37031Z","times_seen":238232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-09-17T03:18:08.837113Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-19T12:32:53.977897Z","times_seen":10935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-i18n-js-after","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f0680be324c2228a33faf9bf7ad004","sha1":"f7ab9715ec98cbd2646d0b497ab1b73e316cd901","sha256":"99c56d35783eba328602ff3ff862178ccb6d5b3d3540cfe1ba04d319fe6ed088","sha512":"ab70b28a5bd3dd20b297f26b2f23910711387e6c3833ffd7037b1ccc9d78cfff0e620abf601232215e98c5d97864584a6ce3a59da944be2a727c942eeeb2c977","ssdeep":"3:HqaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:KBLxTqtGmVOiFM/KGNMJ2","tlshash":"21e112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":7219,"data":"","first_seen":"2026-01-19T12:28:15.708975Z","last_seen":"2026-09-17T03:18:08.860884Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-19T12:23:07.493177Z","times_seen":245050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","size":8564,"data":"","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-09-17T03:18:08.834252Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-19T12:32:53.988226Z","times_seen":11100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/contact-form-7-js-before","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1acee37b14f7d2f85ba813ad876e616b","sha1":"a598ed40f23af6a86af6f87e3befe0ee017979bb","sha256":"fb724be337a76460af8e67aba89cc586c80912b3c4bdf0dd4fb372bbb7491613","sha512":"56ff49131361bba1f39361d36d9070dc456d95e41576eabd08534452641ce3ca96937a2996253570090318246bc63a17bd61183bfe81dc5cc740f01aeadbf3d6","ssdeep":"3:Hj6SVGDSiCmbFFlHrBcBF/FFhhzVEGUHsR5pHdFQhN9GEawUWKLlUFrQAv:XLiRhDK1ulgpwLkuKZ4rQAv","tlshash":"95e1c09ad6e82c0920f5c138403c0321f0249117cf2f5ea5f24e000c1ff807db4281ca","size":7324,"data":"","first_seen":"2026-09-17T03:15:51.500261Z","last_seen":"2026-09-17T03:18:08.861472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.552Z","timestamp":1789615057552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-30e0\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQFTIn8CQa5uAiBnxrHtBNWuHZkV99dLlVTVSmHUxJoyzPXxSou0oS6CgTgsGUGGYO%2FHh98W%2By5ClxmwP1Z5AtE3T3kUV5AenQ2aw7FBMCUAs%2B8SMNi3xRnJ0hxKIAsotJQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f57dbdbd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":4324,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-19T12:38:59.37031Z","times_seen":238232,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/08/pragmatic-play.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.565Z","timestamp":1789615057565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/pragmatic-play.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 27 Aug 2026 13:27:57 GMT\r\netag: \"6a903b5d-12cce\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tY6UOsa01Cvg2olxUeWJ0vubGGIZRrChksZkAeCuBkMaR4EdKIT6gcwKh13ljyW0n9FUBts675h29b7lAx6J8FZKRKAZYYnMG1BJOKsgx%2BDLO3uPTOuvr5Isfe44ZfFc9SQ%3D\"}]}\r\ncf-ray: a3c4f57dcdc48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77006,"size_decoded":77790,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1b5e983a9b2e77fac2bcaa75002119e","sha1":"62f2df51f410a6ea0a88c6f3bfec812e37d371df","sha256":"ee2da57a719ec46f49b142fdd85ff5fef5abf62a653acc88f7a9536f8b655c4f","sha512":"186ad6295a3d6a1527c959797c1155b545f785f51adf8e5a77e9543243a2b5bd287720d777d74f0d6a425b645d8a901d7db977e73f7d7abb8a2b898160db287d","ssdeep":"1536:eZObS4+2lC3pyYW798DA57aDLj9GUKQsmQcJtAd++L:eMbS12lC3p48DRd3KQ8cJts","tlshash":"e573020a2bb11b26025dc767735a046bbff80983a6d071c063fe9169b9c710e78f61a7","first_seen":"2025-07-29T09:28:41.59118Z","last_seen":"2026-09-17T03:18:08.823096Z","times_seen":17,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.753Z","timestamp":1789615057753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4bc4\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAEv1XpVUcUws3LLB3A2Rh%2BpqcLEq1qXXeUbXYqTqr%2FhyEwMbOsXnknce6NkkUguwuaMElE93tjQqdcxwUbp4jvTdoNmjCR%2Ft6VhYUDEG%2BrTuXaHDp7uuJKTMSklD7KL21c%3D\"}]}\r\ncf-ray: a3c4f57efdf08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20188,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-09-17T03:20:30.256481Z","times_seen":195,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.777Z","timestamp":1789615057777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHxQ%2FCjXWsxlaUdEG80S8aqVPQCR19brrsybnkSNqdRwe9ptk1IvwUbtUchG0Dhgtp1pPxur3eaEOoFfLidvhpS48xaOZj9Np1LJoK4%2BM6eiM1IDYzSkzWSdgM3goJOlZ2w%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=4,i\r\nage: 141\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a79c51a-11a\"\r\ncf-ray: a3c4f57f1df68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":976,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-09-19T07:49:42.760713Z","times_seen":151,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/08/bgaming.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.570Z","timestamp":1789615057570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/bgaming.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 27 Aug 2026 13:27:58 GMT\r\netag: \"6a903b5e-3cac\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uw2DoJj%2B4ih0LjsB2UakyCv5aaFynNdIEDLblbtLMLkGPOJ%2Fq5ovbJ8YmeKJZ1QOQ8guJ%2BNQlIZH87M9yEk3YusJiPFJEXGc2SmefSgaHBjZHvuSrblCWC2JZZxWarUD440%3D\"}]}\r\ncf-ray: a3c4f57dddc88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15532,"size_decoded":16319,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c8c44899a05af19f66091db640f11392","sha1":"53854ea499401731d5232007e7e631fcb507c73d","sha256":"6aaa9e2e480ba1a6a979c2b3252d1a99d770b1c2024db176a063eca561baa6e9","sha512":"0ab4642084d02001dc8755e137893c9d626c1be8ed4df017c629a257293f42018ed68437fe24aa01845d73acfed8768098a73149f6285a0782f1b56af9ca989d","ssdeep":"384:IwfIJvoEhnpG7EKEk7mcp4Yv0qMSKovz/9FN:IwjEhnpXUUqMboDd","tlshash":"2b62f17a7bb9d1308e7068b2c29696bde42931c761948d341bd0f8a7cd7508ee791f34","first_seen":"2026-09-17T03:15:51.461473Z","last_seen":"2026-09-17T03:18:08.825151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/ncpg_logo-1_result.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.581Z","timestamp":1789615057581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ncpg_logo-1_result.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 14:35:58 GMT\r\netag: \"690377ce-e2e\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KV%2F06jH5I3xZjjmag4JzZqHKUTX7GNr8%2Fbio3t7UIpwAeO%2Fxp0qvmSYSc8AcjKjk9mvMyL1kTzy9q0hg2ppiXZDxe7H4hA7cqyKF2WIdvZuDPV0Vuft0tbm1gMieq89j7EQ%3D\"}]}\r\ncf-ray: a3c4f57dedd38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3630\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3630,"size_decoded":4415,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9fb70e7c58aa296919ac36d0cba4155","sha1":"273e84b5a6405cda320bc3fd953e83aa7b8ece4e","sha256":"5c1c19ee8a78ffb1c3dfdd260d9ba275befe898d91b9ec18207b5161bbf014cc","sha512":"3f0b0be1ecb265bc2b6426ac3e69f082f6a90b3d401550b074fa38852dce4d45fd4ecec8839958c9a963059f6eed24922ec40405fdd40ca16b5000f12173d64a","ssdeep":"","tlshash":"a3716d3801d250c59b9ce03b678a6bdd945785f9c921965b1a03b3eefd42b0d38e3492","first_seen":"2026-09-17T03:15:51.456241Z","last_seen":"2026-09-17T03:18:08.825866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/02/visa1.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.586Z","timestamp":1789615057586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/visa1.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 03 Feb 2026 11:28:51 GMT\r\netag: \"6981dbf3-213a\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVXt7i5fh0ugSLsOsJAmDZNlx1xmVVJ%2F80S6WPhPUPiBabRT%2FDpaAxe5iz6UafzlnLXAT37EUVRz2Lv3jL09vLY4J%2BQc2dqKAZO3GlFG6zZINDEAm1%2FKtE00xwDCjjtJxwE%3D\"}]}\r\ncf-ray: a3c4f57dedd88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8506,"size_decoded":9294,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68025fbca8fd504bdcd6184624d2774e","sha1":"a1eb2e4cc9860d6b90f38449a8bb977f4b8e8b19","sha256":"7d82cca909edd45a60983e84b4226502da46cba06eb8b738d3e18185cbf8de2c","sha512":"f8f141d3a32ff99b0f40f3d8d828700f1c7e18602ba92834775b2561e98f658ac61355ef459ff81f2f7239413696b0790bf35b5c745ad15eda726d86b4481839","ssdeep":"192:5wiNihe52o5qGehYztwGE7EaAuQzw0Vor8JXjMWsN/KXTqiats:5wiNIe9MeOGE4ne04a4X0Gy","tlshash":"4302af3337419377d1301df8a05aaa9787341f632e1fa969995117d12fdc14f1368d86","first_seen":"2026-03-28T20:05:45.576712Z","last_seen":"2026-09-17T03:18:08.82651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T03:17:36.333Z","timestamp":1789615056333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbets-nz.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbets-nz.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbets-nz.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5djOw8oVaitnx9VO3O42GTDCUrOdEBPmqUKq9ubsdhgttqcHvbaGqTwLGt3tlMUTKcRCTN0YoSLlDMf3G6hL6X%2FMQt1bxr1SqMRRwrnj9ON%2FXNL2GCrdqdblHe%2Fyzqxn2w%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3c4f5763d2e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264346,"size_decoded":51022,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4149)","md5":"594de4953e221048ef61d1a3fdce7209","sha1":"6bed309763747a15d0b427f1fbebb9923b520925","sha256":"cce9e803b4a99bbd5e6a1fc59037582d261f27b7ccd0715b8155799fb5ea9a5d","sha512":"8ae0ead975d84d15331da88abfe42aea225bab3b07a8c1f995963b9413b8e8d9d30122097de79a85377873c3eff5fa6ceb5b39ddde3f53a202598467f197805b","ssdeep":"3072:n/OCozPdXpODIKK1YzNMljMThKeNVG+Q8YAj0V:ntWdXp84b","tlshash":"b944d75b9ba71055752bb23cafa62759723cc003c505cdf8badde2588fc9b9188b274c","first_seen":"2026-09-17T03:18:08.82721Z","last_seen":"2026-09-17T03:18:08.82721Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1096,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":982,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.551Z","timestamp":1789615057551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 14:25:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a870e64-169f\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4hOevGuPS4tYWhSM0xj1pwQkTqIRUkGdJ8wd9b3XQSz%2BxEO0bNYCnww%2B9Mjw3TXYdp29sLyqov3k%2FnDUEmuZbkZNtSbvosstBYnNPg%2FfLB1o938v4f%2FzTIqcTrzPMdE9ZY%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f57dbdbc8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5791,"size_decoded":3317,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-19T12:32:53.977897Z","times_seen":10935,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.549Z","timestamp":1789615057549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 14:25:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a870e64-13f3\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gR8HPUE7CVhGlcVvy1oblrxNuXKW9UfeDew8eE1EtAUSFEU8UfjnONMogexxFqMK9QqHAsaGqyj%2FWYBQzrTM83B4tEhD1y7Y8WShsJAVOeVbLWjmjmcbgjcZqH90Q34l1FA%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f57dbdbb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5107,"size_decoded":2677,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-19T12:32:53.988226Z","times_seen":11100,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/08/evolution.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.571Z","timestamp":1789615057571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/evolution.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 27 Aug 2026 13:23:52 GMT\r\netag: \"6a903a68-3692\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRgua1FdvGsZzW7G8uG0suOK1vCJvrUBONMtABk0gIb9t65L2pxSGUPGLo16M50ma873t%2B6yaPg1zoKwD7CGJ7ZnmsSMx43nUrhgnhThrIUSYo8uTIr1Y87C6P%2FCkRJ42W4%3D\"}]}\r\ncf-ray: a3c4f57dddc98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13970\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13970,"size_decoded":14755,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f6abd09185529087dc1037c3e6ece7d","sha1":"bd61d269ba99aac9a4503bef3921e5b45b435b87","sha256":"c323264e765b58b04cbe65b8b9e2d8368d82fdb14c3371e52cc11381ace3ec34","sha512":"000856c9ead4a77dd19574bf14f7aa2810eab88c5af229e7430b8790d16db27e4e5e76c245ddabc227ea5fe6482bcf05b3f62ae9a220af5f93b21590372569b5","ssdeep":"192:JLZsguqIc4MeTpK4huLu7F3vRD7tWP9EcXUUXFtWlEEZU7i9g941yLWZ9XTz/rmV:JNs/GeVV3lvl7YCcPFtb0U7i9IEJTD6","tlshash":"5652d1da4f8b7106ec5803348eeb1fc510f7d13373a9786c60983642d3c6661ad6aee1","first_seen":"2026-09-17T03:15:51.48731Z","last_seen":"2026-09-17T03:18:08.82971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/visit-our-official-website.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.579Z","timestamp":1789615057579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/visit-our-official-website.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 20:39:26 GMT\r\netag: \"690129fe-6650\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r34sIRSmcKyTsRIGhPU6z%2FI%2FZK7z3OBpPjnD0Q%2Bmb%2BdlWOT7nXRfuop%2FlvAXGyHt6WEseOJp9TnaW%2FS8wscgcFtf4qlhFFUzZLxldNHwzwa4UMKJHxkEOwivFMBsVKLFD4Q%3D\"}]}\r\ncf-ray: a3c4f57dedd18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26192\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26192,"size_decoded":26985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a645c31e6ccdf18b1ff596e53502b89d","sha1":"087395e8dbbb15eceaad64430bd5f7c3f7023bce","sha256":"14448d401c91e51a98e3236c1b64c44ccef9df5cd92acb65bb171a59268780b4","sha512":"0feac31d9057d6ed421d2d39f9bbb9c0ca230d88cfc0a5823982d53452673e4ce427db5466957c24dc3c7e2414bc669cecf39807d84025d459c881f21d58eb70","ssdeep":"768:Rt8lGJR+PY3aVjn5PWPaJVrWRuXK5hehs8Y79am5RrK4t1v:R7Qe2PJVrWUCWs+gRrK4t1v","tlshash":"07c2f1a48cd3b6074f86093c8891bafdb34af7c642612b50db14d2420d36e88ad7f56d","first_seen":"2026-09-17T03:15:51.478892Z","last_seen":"2026-09-17T03:18:08.830581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/pragmatic-play-logo.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.583Z","timestamp":1789615057583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/pragmatic-play-logo.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Oct 2025 12:36:04 GMT\r\netag: \"6904ad34-2230\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZImRDfhigMI9X2kqg%2BfPwKHW6voulDMP4dFN0MsKZrwOWes1704VnP0fKjhLtWcGJVX8lJvl3A4y0e8iNyFfH%2BCj3N7y%2B3n%2BtG4NZSdutCoe%2FQGWOV9toJvBdMVle75Z9I%3D\"}]}\r\ncf-ray: a3c4f57dedd58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8752,"size_decoded":9542,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"964caabb721e726bd01992a58e0622b3","sha1":"9899b69130e11de984e8401a25b39b5adaed91fd","sha256":"84d8047b46b0a47af81ae3fdcaca9b5e70339bac1dd70b177416bb1b0da655a0","sha512":"07df61b35cdebfde0b2bda81e784d43d3a392364c69eda01053fcbc9253b0517dbab04ee6e706696df02ff95a556ca483868e23f206e7076e412db4e90327af3","ssdeep":"192:UQvjb/a9MpLZM5m+04ZrWGxk8FJx6ncYgi/xRGSmhMdVaXHwh22:UQbbMuYm+04hWGTFKncYgiWS6MdVaXHA","tlshash":"b502c08134834678e05ce02affbfd8639df4c52f7292a5d05746e5f0c730b50a90a2c9","first_seen":"2026-09-17T03:15:51.484251Z","last_seen":"2026-09-17T03:18:08.831289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/02/mastercard1.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.587Z","timestamp":1789615057587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/mastercard1.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 03 Feb 2026 11:28:45 GMT\r\netag: \"6981dbed-1c26\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mbE4h7U0ogXpYmSUyu%2FZH8K9RT1CPvEGLUhYg%2B%2BwjK9QR6skHUbG%2B5c0XAKPMMbrwk2EOz8XWjI8hOCXbZb1jiJ1xNIx2wWbsfPNGLU%2BWKdTqUhf0Vbzkd4XvOsNB%2BYyk8%3D\"}]}\r\ncf-ray: a3c4f57dedd98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7206,"size_decoded":7998,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15e52216b45e712f564d938f13b8d124","sha1":"59c3cd0b8a6d3f4fff786466dcf3ef0f3796d859","sha256":"4f68025b388e35c50f8be6a70da8b0e8a73e1a9fcd136b11c9c2126c91bf4a33","sha512":"34822a70b39b5d30efacab463342e73694882db8d6111254bf8f3ec3d50011787005506e656d3e2299b4fec99f3abc6d34ecdbd8d33c8e5839d6843a47bd3a26","ssdeep":"192:cwJrGyml2R+I2tLejy8xuyIvyn9x42s2+:cwJ6y/+7cjNMvynks+","tlshash":"a8e18e5fd3190b4fc8885b3bb5c3574adffabd1b5d5a5a46b2041b8233152fa7988006","first_seen":"2026-03-28T20:05:45.596242Z","last_seen":"2026-09-17T03:18:08.831984Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/cropped-0x0-1-192x192.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.805Z","timestamp":1789615057805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-0x0-1-192x192.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 14:06:24 GMT\r\netag: \"690370e0-79a\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlohIcHTAr2UsW24l7FRPVQucxwQAyv41p29Evo3FtR5ZlERZGJnZ150vAawHoNUZ%2BnTXamNEmi1xRV4zChA52bodj%2FQh6CR0TNjQAbTcIOjXtjdSH0FztydV8ualD9mzZQ%3D\"}]}\r\ncf-ray: a3c4f57f4dfe8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1946,"size_decoded":2732,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"307f3c369737347d7e5c88b4d78b7378","sha1":"66d787d553361db25c8063a09685d4550bfaa434","sha256":"e20ee22fca3c6c38c816630dbde7b6b352fa1b185610ab83d23266dd0672f3c9","sha512":"086afc507b1c6a0aede13694968fe6af45e2f3704211503971fdb14dd13afa9a6a49c76ebcd5636f49cd1b1fa824512828b5cf1d05cf5ab8b926de6031c9899e","ssdeep":"","tlshash":"5f412c9a51b44c64614ef52a9c26ff726f990021187009506f60bfec4510fe8fd02a3b","first_seen":"2025-11-01T17:37:40.35477Z","last_seen":"2026-09-17T03:18:08.832708Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/noah-l.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.577Z","timestamp":1789615057577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/noah-l.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 19:58:50 GMT\r\netag: \"6901207a-998\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGJPAqgltF%2FtwL4WOnR%2BCGYz9xM%2FhPKBt9CGU8Lsp%2FBKU5UUDAzvdnLzDgAIXPSe1tk0vMYdWnA63HuFBWhFFYDatZ05pHpuewW1urgcAcNLiWOxfA0dmSb5ppAgNZVYikk%3D\"}]}\r\ncf-ray: a3c4f57dddce8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2456\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2456,"size_decoded":3243,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fd4d52a96089f9fae950ef387426994","sha1":"f842f6197672bd1b8d8eb3652e9793b48233726a","sha256":"a60d98d4d74a116cc2cb2e45444f7b4149fea7a0ddb19af6796080d863e45960","sha512":"9d38a641ea6606f45f2928c717e4ea3ed79ed8ba00f50f9658fdff44ec7d260431a05f6448d70415a0c7e4c68ebb8239d5307825ad21d5f43dde0e8feea135b9","ssdeep":"","tlshash":"36514c4554d9c908ea7009326ef4f996d0652d6b4aa173ac833c0b9eb31df950710ba2","first_seen":"2026-09-17T03:15:51.49223Z","last_seen":"2026-09-17T03:18:08.83363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.555Z","timestamp":1789615057555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a79c51a-2174\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEDlpZWVnvJiN6%2F7ymqhbT4nuECO9LInIVsYe0ctzOIbLREB8iuPXX2l2Zop0Z1h%2Bp38Wz0w9TDft6ElWw3OB9tCPNTmHeauZkzLMqbpweJIk7VY2WNrlQOgaUrle19Wb30%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f57dbdbf8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8564,"size_decoded":3507,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-09-17T03:18:08.834252Z","times_seen":25,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/lucas-d.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.576Z","timestamp":1789615057576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/lucas-d.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 19:58:49 GMT\r\netag: \"69012079-3cb0\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OrcyN4z1TG4JN%2FD9v1P7s2QW6WCjnQXMjKq4iXq7u0PtC6zzlZwgBCC4CnUDPIKKC34KCcEWwfN%2Bu%2BIDd%2FeRCvjK0zgskCpE5hUOGh%2B63LgurMBMDJoouCP89XaX7y3SS8%3D\"}]}\r\ncf-ray: a3c4f57dddcd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15536,"size_decoded":16327,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d2b309d807c71b062e8b3af35ec93a6a","sha1":"baf13f381f7a1079e98fbc7ee5b0a166560f3994","sha256":"f9ca3f92d5dcccc8b889610a50e8c32538ddd0c1e85fce2b10dc02c5562e2908","sha512":"2a45de8e2d33b2e88676928114e72f91d7040e61b72a18f519899cfc932d0c0a9a90e8363f50bf8e51e247eff750b90ae291f811e46d813e956cb6069f90fd8a","ssdeep":"192:Z+sNTNihrTWpjf3SWaQQavGJekDqkXjKPuTYAcmSQh+CsSs+k1fhPgxdCl8LCIwQ:ZTTEXWPQMDkW6j+uMAwQh+LBbgx5LC4","tlshash":"e862cf0a89ac8a253375db47bf6dd3041260c483a7b4bb14c8cd668679035e4e6aa3de","first_seen":"2026-09-17T03:15:51.496561Z","last_seen":"2026-09-17T03:18:08.834864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.755Z","timestamp":1789615057755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4c7c\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tp9eNtAPUS5fDT%2FxoQtlKp%2BYJT%2Bp%2FeGNDPoBUA2tMFu0A8hXuxLrsVouKjjksF5gcfvIw19j9e6F0POGmZcDIhCNJGg6lwCsALSryMEmrd2dKnf0%2FejRUx209hxZZ3WkKyE%3D\"}]}\r\ncf-ray: a3c4f57efdf38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20374,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-09-17T03:20:30.277154Z","times_seen":220,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.757Z","timestamp":1789615057757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4c08\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zILo0DQUmARF0x4anOgBP%2F9shR7yArqKJ1u7%2BSz6wykbJq%2B0kQvGVQ6RlprENCgpOixLZAwNQGkPaURIQEdaSYgADHoH1e7elS%2BCchIrhy1Lbkt2ItOvF90DAdJ8QpiEKE%3D\"}]}\r\ncf-ray: a3c4f57efdf58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":20256,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-09-17T03:20:30.243132Z","times_seen":211,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.554Z","timestamp":1789615057554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-348c\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39%2BqT64EI9TlciVf9ZbmwtRzlDHfwqdZ30aVbhhTGLELBduyKpKwTaBldAqOkVBDbqFP4xq0sKCCfmCh%2FBFG9oNtnXuE5ogHwZ27I0AasptK7TctGjaCBq8z7Tf1wK%2F%2B9lE%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c4f57dbdbe8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":5088,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-19T12:23:07.493177Z","times_seen":245050,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.558Z","timestamp":1789615057558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWwMtZdrer4Q4eJzeNbowWIqxQh3NiYVKXcXE7vYuC6n6GS9EHlM%2FuuId5%2BCeDRBX4viY4t5X0TjUobvZsTkX5ZR5LUw1Z8sxOXCCS6tlVjra1t3ynZlH50s2sm0CwhcKL8%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\nage: 141\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"660dd398-256\"\r\ncf-ray: a3c4f57dcdc18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1131,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-09-17T03:18:08.837113Z","times_seen":71,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/gordon-t.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.573Z","timestamp":1789615057573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/gordon-t.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 19:58:48 GMT\r\netag: \"69012078-26ca\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkOdDL5Fic2WwzXB%2FugE0Fbx6B09K8%2B5ypQimIxJP5ob02eve%2FROTky96ECmSWB1SxJclJ2Hvu3ZP1oX%2F7B93QBD7x3jNNO7p73XUKb2QXgNbM96Q2heSegpq6Fkw8Ix9es%3D\"}]}\r\ncf-ray: a3c4f57dddca8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9930\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9930,"size_decoded":10718,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"49b2a2f26c099e66cb8d93a4545674ad","sha1":"92f3d890bb02a7c4d8e069191cca0f3904a5be81","sha256":"1570aeac820247d0abf5b7c04942644112de761bcd12c900e2cce3b4cffd244b","sha512":"e643b1f3780033c921b52788f9d83b0a5bde3b590e9ae8336c322a592a288f005d5e23599e2b530033f8d581ae9659fd65d7be9939d04ec1e318c9c75412dff3","ssdeep":"192:K4CqiO3TU2gr67PElHNCP4+3oKxuTuvCDUuM/UXe+chsKfN2VunYuD:diO3VKE+HNmt3oKx1qD9u+cahVCD","tlshash":"e522afc8f4c3ae475fb7818714ea0b99cf2a91f69d78e295e3de381435d146dc52c006","first_seen":"2026-09-17T03:15:51.491089Z","last_seen":"2026-09-17T03:18:08.837589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.911Z","timestamp":1789615057911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH0pVBUNWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4bc4\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUhz1onD339SOQeGS%2FBr7ep4BWU5Hh5lSP1p5hblmO5GmjRSbUl3jbFKnqMUApdt7Hc0T7VkWptbttFZxIzDwg6dYZ8Xkl2hlof1WOgihlz3XP6XjY6ADwRgmg3HeJ%2BRhNc%3D\"}]}\r\ncf-ray: a3c4f57ffe098be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20184,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-09-17T03:20:30.256481Z","times_seen":195,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.917Z","timestamp":1789615057917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH0pVBUNWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4c08\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHeT6ePMsPTo9H7Fvecw%2BUWNKeTR3yCGFV09VimvmynLqBvp6M4JCe%2Bl9FFb1NN7U1o8IwdIo75%2BHLerT31Nca4NmhvsCpEw8hOoQuAyKgUKJqQ%2Bnn5c23nQaCAaPjPf%2B%2FQ%3D\"}]}\r\ncf-ray: a3c4f57ffe0c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":20260,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-09-17T03:20:30.243132Z","times_seen":211,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/06/rainbet_background-2.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.671Z","timestamp":1789615057671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/rainbet_background-2.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 26 Jun 2026 10:22:08 GMT\r\netag: \"6a3e52d0-a7ba\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8giAdgcbFLPL7uDWescjczitU6WN96dqmvawC1XnijraYYAUYUoWmwR3rKJDQREBeo5p71qFtaDlf1r%2F4j6OVhxJqDcUjzwLphQCwkOa92L1s%2BTrbdDR9K4wp20jWzUd3F0%3D\"}]}\r\ncf-ray: a3c4f57e7de38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42938,"size_decoded":43723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1408x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c7b8519163887354ebc9138e8bc5a26e","sha1":"35ae3474188c6ca6c57e30abadd3a85654553f2e","sha256":"c2e1924df645bcbe789118a557c2f51ec044c8f9aa45dc2bee9b902330f5e07c","sha512":"9b2badaa7a4145be4e0bf5b14df56fa8f1073acc97e6430c95c7085785f175b8b6b44ba1c57850e2507a126e3f2a3ffe30c9129e00a9b5b6e5badf4c6e53f02b","ssdeep":"768:qBcP/eG3ELc9JbxQtxJ30mqTsAvysM5GcLYoycB9XQ64s0NT986Ks3E0M:qBcPZ9JbWHJk7s0K81cBVdr6333M","tlshash":"6c1301d2b09728200dd4977e8dd56ea2679744cb80e632767ded48a08f8b1b8e7e4d84","first_seen":"2026-09-17T03:15:51.497593Z","last_seen":"2026-09-17T03:18:08.838278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.913Z","timestamp":1789615057913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH0pVBUNWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4c7c\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lubMgCwTYsZARUsIlYgbXJDoGDeQWJR03FvmOEZPdaJXCjPqPNohxfapx2dokkxHFSlcPiyEwqf%2BfmRQhlta8FEH3PLGPnEqZ3jqWSGyVygSCXiBbCOZpmIxCZ4x4ugEMYw%3D\"}]}\r\ncf-ray: a3c4f57ffe0a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20366,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-09-17T03:20:30.277154Z","times_seen":220,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.536Z","timestamp":1789615057536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:13:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c0b5-d0f\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1AwtWYvPk0az3MCg796gH3IqNXqSfWtbQTS6fp651e%2FrFBKwRuch4gvV5xgZnskXmXP7orBMtiLumaaA7z8JNmlOMmx%2FHo2MdjH%2BrVoXFX1ZFR96p%2B%2FWngEEPSMdcRu1L0%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f57d9db28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3343,"size_decoded":1620,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-09-19T09:27:18.292862Z","times_seen":4918,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-includes/css/dashicons.min.css","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.537Z","timestamp":1789615057537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 12:18:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a79c1b3-e67c\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtqACZf3R2smRTWxTM8ru1gDdwcpc%2Brq0xshiJTuTX0s4y3GMb%2FBwdUus9VT61pjn1uoX6lDq8LVGcmaZ8kP3k36YpBqU4D8l9uuKjgNqZQLOKFQ%2BVBKR%2FWn0Qvp%2FYnvHr4%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f57d9db38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59004,"size_decoded":36536,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-09-19T12:48:53.289119Z","times_seen":73985,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.556Z","timestamp":1789615057556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiVAszr%2FuxGLJL2kTOcd2uOVepgTjCq39DvW9OQHMZzbVH6pBfV5sy%2B37YF0jqfyH8%2Bl3kykkzcSTm5JP6W9oAB0%2BGAxtmN5cuHTRKHvVrYSJz2I6F%2F1AuOwyz7cVx7R6%2BE%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\nage: 141\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a79c51a-3d8\"\r\ncf-ray: a3c4f57dbdc08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984,"size_decoded":1093,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-09-17T03:18:08.840008Z","times_seen":68,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/07/rainbet-recent-wins-1024x193.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.564Z","timestamp":1789615057564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/rainbet-recent-wins-1024x193.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 14 Jul 2026 08:18:55 GMT\r\netag: \"6a55f0ef-569e\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZTG%2F9F63KvTB5GfOT2XP3Z%2Bai2g8hT%2Fu0Z%2FLmYifDbbtkJxMofKSlmz6TPRnp66p49%2BdTl8wwT%2BQCCz6BOkMSJ885FHu2yMUGBNqG2L5cD7kuMeA9BPntJrHqLVt4NTlXg%3D\"}]}\r\ncf-ray: a3c4f57dcdc38be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22174,"size_decoded":22967,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x193, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c99f1860dd13fde3a5cf8bc62f390257","sha1":"bea071289d6fd793f53898a4b54d3fa1535330cd","sha256":"2e35a150fd6073dd91e90564a68587ce36bfa0b0e27c6166a218a0d1ec817807","sha512":"fa4e5459c49aa2896af79aea46f8aaa66dd41a70f0795bf6324bba49387ba01e5897dc6f44ed9ccfb055783bfe1ee7429881f3d757f975b370578edfe5b85f97","ssdeep":"384:bXavTLuj4sovgxbLxWd83mGI1rGvZcvq99MjmvU10/dXTIMnWC:bKb04sooKd83mGIFGRyA9Mjmvc0/J5nW","tlshash":"74a2dfac713907d9ed98f3b87dddde49a4e1c926b0ad096c10022b6d39fa859f64809c","first_seen":"2026-09-17T03:15:51.46761Z","last_seen":"2026-09-17T03:18:08.840525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/cropped-0x0-1-32x32.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.806Z","timestamp":1789615057806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-0x0-1-32x32.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 14:06:24 GMT\r\netag: \"690370e0-15c\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXf5EfFIkMWmzKdMkunMnLvqkkGYV2miQOyTmCXc6dZYVI8QyEx4A%2B3qUKD6lMBDm6UHSYe%2FSUucH8sgEW3bJX%2BcwL0RTaBG627cn91gBSHfQNstsQhRNhLjJYGBMu8rzmw%3D\"}]}\r\ncf-ray: a3c4f57f4dff8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":348,"size_decoded":1135,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d859220647bab57706164305d5a4e81d","sha1":"29f8228557a88c22a8a3771fd421cbab406fac45","sha256":"c14e1535f2c2feb238ca304c80e9dd94a75816622ee6c6672a2199b920a44df4","sha512":"077d9a49bbc423204054c0955ed0355d7f7e782aae666f91d1fd429fb4507b9e50d1225bf7e369a6005eadd1ac7a6caeaa44320f3b5f97aed0e20728c7a2f7ee","ssdeep":"","tlshash":"22e0c0ce33118d59fde29c2a1b163f22457406dace951381e4f011f510e67121035e08","first_seen":"2025-11-01T17:37:40.368317Z","last_seen":"2026-09-17T03:18:08.841067Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.915Z","timestamp":1789615057915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH0pVBUNWCFYV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4d38\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeQJfg3cWsOkaNrCTMoabGorY0c2s5FB4i6RYYWJhR6skYn4MjQxRDsJdkaY68dSgfVM93G10YG%2Bwtd34qubpU4cN%2FWZvbPf5ik5DPLeWK5O7aUaZXlVgbKOCu%2FcjglIMcs%3D\"}]}\r\ncf-ray: a3c4f57ffe0b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20558,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-17T03:20:30.242075Z","times_seen":236,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.542Z","timestamp":1789615057542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 141\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRSsfCNQVC7ZmTx83LGysMRY58ImTwkA%2Ffnbu4ipJ4OzNEbFe6bOdDJ2ayr0zpwqjtMO%2BB4lYqugNVoqCIniNnmEuxT5o7ZkJtzyIenP811j%2FIyW5DunbNL1uYnjI0K6H28%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c4f57dadb58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1027,"size_decoded":1254,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-09-17T03:18:08.842216Z","times_seen":73,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.548Z","timestamp":1789615057548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 19 Sep 2026 03:17:37 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWnVRFW1s4in4RriPFjn2uRSkYNqcvSvtADt8k1sGzAa%2F0d3I0W2KV%2BSy2HTjE460Q8A34wGWXozk1P%2BK%2B6jHkp6l5ddXnlBiUnXqxRoRj3y9%2BvILHUJWfm9qHq%2FmJAWseA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\nserver: cloudflare\r\ncf-ray: a3c4f57dadb88be6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-19T12:41:53.450861Z","times_seen":436207,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/08/relax-gaming.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.568Z","timestamp":1789615057568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/relax-gaming.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 27 Aug 2026 13:23:50 GMT\r\netag: \"6a903a66-1276\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26cHRZ6u5grl%2BTt9ZgWgU7b%2BrqhH0VxI8dheKvW%2FANts1t%2FaWTBX1gHpaYl8CXL34JXjfsnD4Go6LtkKN0Fzqw%2Buk61jGZeYq2fpAIJH2kI00lmizAxYimzKWnkd%2B4aPKzc%3D\"}]}\r\ncf-ray: a3c4f57dcdc78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4726,"size_decoded":5518,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b36e7d7fef8b8c0635bf6f5da22a9731","sha1":"c1955510fba20cde45b26f657b47747b37de51f9","sha256":"6a5a8a6bcdb5d86054ef7fc9c219fcb2daecd2160c9170dfce696d771f1f4b5d","sha512":"22462793b5322aea4c8c35cf942cabcfbc46e28a93dc238491550856d549cd800f3040e14309cc365db143c0f4f39a42a8088c377623c1b57b76675c37d04f2c","ssdeep":"96:Gi2YB753yGOIEGCluDBZUvqPKIvfHhknmWIZ4NMxeHowHH9:Y853ypIfCA9ZgqCI3BknfMxeIw9","tlshash":"bba15c4af9231e1041eeee2535fd411bae7709608dc4a299bccf8d1755302b9cd1a6e7","first_seen":"2026-09-17T03:15:51.470339Z","last_seen":"2026-09-17T03:18:08.843542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/08/nolimit-city.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.567Z","timestamp":1789615057567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/nolimit-city.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 27 Aug 2026 13:23:49 GMT\r\netag: \"6a903a65-442\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dSqu1laCNX0S5H0IM9d4fVeXkyszl%2FwAULp5BkaozESwfg1uNQtYFdB06oEWMNOITXc647QIewIZHI%2BegtDPvOFcz6CJ9Q8fBoeBjgLshGcxq3Sxb8oE8Ue0rAxPX%2B3Cvg%3D\"}]}\r\ncf-ray: a3c4f57dcdc68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1090\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1090,"size_decoded":1875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"771722a415b7a543fbf3555905b89a98","sha1":"cbaa6346abaa786b5ef0acc179888c7d24b2657b","sha256":"d9048acef0b3250527009463d404e31bf20258ee008dbbc4b8acbf1270c2c692","sha512":"16f7c2ba1f160f2256de837e46d9e623f478d13bb610bf470c0e65e2c7391af575d294777193315563575f7b24f6f9c40db610b247c14803f0e951493f19ba6b","ssdeep":"","tlshash":"8c11e90af034c550c17cc9351751a0c8ba17cd8693b83ec91be9a4310af6734fa5afd8","first_seen":"2026-09-17T03:15:51.458772Z","last_seen":"2026-09-17T03:18:08.844213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.673Z","timestamp":1789615057673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FU2n4qUQ1oMJm9hNHazrrIuVre%2Fd2X4t5LiC9sS%2BV2Qp3FFZCdGZHsF8Hka0khZhDGf%2FlEp%2FkUny5iRGIOP3ztd8v%2B43LzJi3JG1Il7tHC0%2BjlKOwP%2Fc07UqkYkv9lQAxjQ%3D\"}]}\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=4,i\r\nage: 141\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a79c51a-df\"\r\ncf-ray: a3c4f57e7de48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":948,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-09-17T03:20:30.283376Z","times_seen":89,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/emma-j.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.578Z","timestamp":1789615057578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/emma-j.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 19:58:46 GMT\r\netag: \"69012076-9ae\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSRJOPdSW2qocw6r%2Bs8auuED2AMFsinL65YTBP1bvIRbf122%2Fyv4bZpFhRGJPYD%2Fc0sbjEOqBBNQcLSKQBIJh2G7sI9QLkV8mdhLG6M4%2B0TVP7PmDNOMDQ7kJdgoKL5ZCms%3D\"}]}\r\ncf-ray: a3c4f57dddd08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2478,"size_decoded":3265,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"769f491b9b4e1de3ae05dd5cea7664a5","sha1":"316ec78e0ac2ce7044dd350b8a85957c24645583","sha256":"578d54b914977153f5a1b9a709b4796102c7b55f68b526f1b6ab968ebf155067","sha512":"6c26a1c8d2874e872951b1aea5382bf666f88046a97167ef80b1e005203358182b532063e3ef4ac0c239640846194d36986d279398255218e11260af9ed1bd81","ssdeep":"","tlshash":"6c51174cd1b64c300b738de22e80a2d118df287b6542d2d386abaa462367266875764e","first_seen":"2026-09-17T03:15:51.493498Z","last_seen":"2026-09-17T03:18:08.846278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/ethan-m.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.575Z","timestamp":1789615057575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ethan-m.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 19:58:47 GMT\r\netag: \"69012077-28fa\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv806MzpDyiUaNcgzaTJd945Vanroz0%2BWOsaj5ISq6NaaPKiUiYrol5n1R8cAdSimRl%2F9jAGHmfC2gYBktbLvx6uCXcyGNkegdKH8RHToawDjhpLw6s5r3nnFqFda%2B%2B0qsY%3D\"}]}\r\ncf-ray: a3c4f57dddcc8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10490,"size_decoded":11279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dab9a36d5ad0ed34c926a9ac8db82e83","sha1":"136d77e245b4fe78d784dcfddfd06a8434a8a8c7","sha256":"10dde996b33ab057de9e6923da66a356e7c285df3b91c504c7ca98bab11c9a77","sha512":"bb855c06f5898d0590666f62bbfc779b3654811279465ce570cb0adbc89eb4a0fb3f2d3aab6cfd863f7c44be9286f885a50234e081213bd44451b342305b10e8","ssdeep":"192:5PeOh0yNFojLcLi8qVWTTuQWslwlJzTsgZhZW52LbGlzxoGr+six8RhmhNS:5PeOh0yULaTqk3AIwlJzzW8bGlzx1TmG","tlshash":"3922b087b708e874de4d0634f60283e258e9c579e8663aec9b244747c2271c11ad62ef","first_seen":"2026-09-17T03:15:51.499087Z","last_seen":"2026-09-17T03:18:08.847461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/egba_result.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.580Z","timestamp":1789615057580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/egba_result.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 14:35:39 GMT\r\netag: \"690377bb-250e\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7y6n5IG3hSgGZLLjo2pFfCcnlc6GDc%2Bp2Sjbt0wQo20SaIkiKA%2Btg5Kx%2FNi%2B09XM2fhi%2FyQaQdY96saSkyeYRKGuGDtPfWBXmtlWq%2FBMDKxL5mbhqNuCCJoJfvFUvfOXI30%3D\"}]}\r\ncf-ray: a3c4f57dedd28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9486\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9486,"size_decoded":10278,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb68552062e7e74eea97c4935fbc0a78","sha1":"ed873aa576826b1caf594c32648d9a5bfa1fc1a8","sha256":"a06fc38dc51213bafe89d295d3a89764f4139e1afc7e47546b130707e7a799c3","sha512":"0e1c0226d44864e1640b1ca65f0885b81362ba560af1a0f70fb1e7cd40daf0f849704419c5a0119814a265796eb67f56a6bd380ee4777674931b1b3efc042ad0","ssdeep":"192:MtEBTyubrdUPoKDePWWKfH7EXlFpLdVP8hcKirQLYxDKIldDT/o:MtB0rdUpDeetTEXldVlKduGIldP/o","tlshash":"d312c00ddea50ccb3153299f38c66a5fdb53efbc5e615d840a285ba43c5c312b02d06b","first_seen":"2026-09-17T03:15:51.483122Z","last_seen":"2026-09-17T03:18:08.848222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/gamcare-logo_result-2.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.584Z","timestamp":1789615057584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/gamcare-logo_result-2.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 14:42:45 GMT\r\netag: \"69037965-7ea\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmJsuS%2B5SIk%2FPdaQ%2FAYWQA28EOAOQyTFOIXmoU%2BzzTb4TqEag0LyyhRRkfn2qD4AcictgYkbBdLi2xHuB1YhCTkwh7VoHNxr%2BCSAQacl9k1K7jc2QPJQyJ%2B4yCbY3McUClw%3D\"}]}\r\ncf-ray: a3c4f57dedd68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2026,"size_decoded":2817,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b176b276bcf2bac90af93097fc46ef8","sha1":"e86b9e247e65de20a2072a396fe82a9bf6995122","sha256":"abe35ce78bcae04416e60c6f868c8489d34261b6406824fb8687ab8976df0617","sha512":"5d7a739bd6849246eb31079e5f08e2d121bb4a29ac2bcfbf5e7f9a9ff2146dc5de7baba9108e3f94ee0c196e5a3cdf0a9b9d5053ebfb30debd7daecad8baad14","ssdeep":"","tlshash":"47410af7afdc4205662d351d97ba125045275485c464047c0b257b88bd145acecf2ecf","first_seen":"2026-07-08T12:06:19.260212Z","last_seen":"2026-09-17T03:18:08.848941Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/02/crypto1.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.585Z","timestamp":1789615057585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/crypto1.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 03 Feb 2026 11:29:23 GMT\r\netag: \"6981dc13-1dc8\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WH7mYwTjXnJki9ZxNaMvkKtnS811kBGzheNczIcuJgdN2CTJVkgc0A%2FDTidAC8vHUiPekVA4FcF9Skt4KkRqZ5Dgup7xx7Mira3js%2BBBvN9ziYyF%2Bo4UKCpqMlbcv6Kb2gw%3D\"}]}\r\ncf-ray: a3c4f57dedd78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7624,"size_decoded":8410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f5527bf4e0c906797198a618f6cd40f","sha1":"aa5ae48c6a0978f7a203438a792cd188d28c6667","sha256":"9a06a681d92494d24bb196b50df498aeaae2b4009261a4bd7b15b2e27eaac158","sha512":"f6e852f17a520ad3ff74357b2a279da8b07a141d9d97bd38463b79a7b5d7fc3e4c45c517a619a749b446218c9567f63b5da95cd747c6b3afa49d3d42ab353521","ssdeep":"192:PwX5BYGO3W7Jdcmlb0+rHn+4kary/8uhI0aN:PwX5BY8n0uHBri9hyN","tlshash":"a2f17deadb5907f8e71c70b89790371a8515650657eadbbce0b643bd35888963acc009","first_seen":"2026-07-08T11:54:26.611152Z","last_seen":"2026-09-17T03:18:08.849571Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/06/rainbet-logo-scaled.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.563Z","timestamp":1789615057563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/rainbet-logo-scaled.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 26 Jun 2026 10:53:30 GMT\r\netag: \"6a3e5a2a-10df2\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbLyM1HyM5PGrL33MFnOlviteKbP0oglVZGNABciy9G%2FJXmFCYzGun1tggir85x11wpZ0yBCOqDmIrgluNF17XJpqHQQmRcVcaKqTE3L5i3M6hRzvXyfwJA2uS5PWkx7r6g%3D\"}]}\r\ncf-ray: a3c4f57dcdc28be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69106\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69106,"size_decoded":69890,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9061f7ed4f1e3187f0e781e3fb87e5a9","sha1":"5bbcc6988f6bc3dc8802913c4ee37f327e1c5e6b","sha256":"8528df22dd1b16060c966ae1eef454a3835cdb22fc0e7b02d408d3dfda928a15","sha512":"e9346c0bd7dc16cc23ae17fd6e7af5c9c170582fa00a6eb5313fbceb89a1ad40da19155809740f1fcd57a565d4c0b1dfa77e545180c905fa6505cf579d4382b3","ssdeep":"1536:ZEcCE26CntmepquaQ8iRmBEF3OISJsNQnHNlNCtHCI:ZEcw6CntmSiQDmBI3YJsKntCtZ","tlshash":"5163f2af8192b472097b7a8437eb4480662393375a45789be7c357ef418eb184b5307f","first_seen":"2026-09-17T03:15:51.454952Z","last_seen":"2026-09-17T03:18:08.850238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2026/08/hacksaw.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.566Z","timestamp":1789615057566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/hacksaw.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 27 Aug 2026 13:23:48 GMT\r\netag: \"6a903a64-2dc8\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wV5zjG7jBddZ%2BrJigttOgBORotQ%2F%2BdSy%2FcAA%2Bs%2FtztKemul4sx5lFbTOmhQ1P23zbC0QgEfS8azGrxcpuRBJGc8nS06y7ORF6De%2FiujRQMtLG7fnA1Ips3KGeMKBIvo3Wg%3D\"}]}\r\ncf-ray: a3c4f57dcdc58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11720,"size_decoded":12515,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf3de9d6878abe202ec76194539b5fca","sha1":"a3f8e4a55ee1e5b823aae197559ff4ed9e7b3f68","sha256":"81507dd7f126b1b134dc293eadf65dcbe4f73d8f2a3e4a21abe78f0b0cd5d9a4","sha512":"71fc852a4e5a89bb3b7d448f85e263e67fd6d2f186192d240761f248632c8c010561bb1a9c1f446af1609859f382c6c322a44c068e118704e272863c4f1b5e03","ssdeep":"192:jAL+6XCTjoIQ8TPHrdwFp7zPN+0XhF+HXQcVKvMGZSUTBraq6wM3X5fs2IcUdpIR:kL+6STkOTPLdwfn1lmHgcZLgrP6wEXRf","tlshash":"5c329fafa6b1ff54f0662dfc618e0ba1f56e90ac06205de48491140897929fedf3950d","first_seen":"2026-09-17T03:15:51.495058Z","last_seen":"2026-09-17T03:18:08.850886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/sophie-r.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.574Z","timestamp":1789615057574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/sophie-r.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 19:58:51 GMT\r\netag: \"6901207b-840\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBaeLWbRvnhjWkYf68hc10XXPVB4xoTMPyeKMRJ0uLhtd%2BFW73ZPvX46hTlLulzy3J72C8f1s%2BwT8qmjScgrknOdDAksR%2BXolYt%2BEkRLcsHPdUUrJEzqMzbZVXJXojdIyyc%3D\"}]}\r\ncf-ray: a3c4f57dddcb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2112,"size_decoded":2899,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"210a847bd5173768b2ea8596c39bd9e7","sha1":"f444d354a2731d68778e92d573a9066071080a42","sha256":"d01f6814e1d231dfffa6c64575296235582ff95728c33056152227f6a5176add","sha512":"1721b29b0771fd8fa3236d444bee94db01bebba6d076f9cd768a3d19844c9b26631cce0c6e6cbf8ebb34b9fe65d40f18b454d1be3fb8f7fe153438e0b5691456","ssdeep":"","tlshash":"ee413c0d0b606a9ab316561e0dde22a52423ced974c1db7bab651130954234273dac06","first_seen":"2026-09-17T03:15:51.480122Z","last_seen":"2026-09-17T03:18:08.851505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.756Z","timestamp":1789615057756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 12:33:30 GMT\r\netag: \"6a79c51a-4d38\"\r\nexpires: Sat, 17 Oct 2026 03:15:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CppGIa1YYcTR9WSIAmQ6RR9Ba7eaGhQluNBBFJoPTCPw7IRu%2BYS03ExpoKZr0l6jfSiRBzhUod2zQmeD574WEc9oKOqPqXv%2FyJS%2BcKS2x6QD%2FA47niNHVRulnzhJeEDAii0%3D\"}]}\r\ncf-ray: a3c4f57efdf48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-17T03:20:30.242075Z","times_seen":236,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/why-players-choose-rainbet.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.543Z","timestamp":1789615057543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/why-players-choose-rainbet.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Oct 2025 21:51:48 GMT\r\netag: \"69013af4-75a4\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijPt0iOLtE2ZEzfmOYgCDi4HMppgErVZI5y6x3W9cYHUBZlJdQev8xAYAZxS65xbSdNKJesbsVaJ1SVWioFDCvAOCy9sRxinXRA14nP6Z7AgTdtu8ZF%2BfDd36VT6XZLf0D8%3D\"}]}\r\ncf-ray: a3c4f57dadb68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30116,"size_decoded":30899,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"378ff284c6541ddbbba3fe025cc7e1b7","sha1":"980026ea64968c2f20317b35f5157f4432da8fe7","sha256":"4c9b99bd8889d4410ea670159817b909c464e3f6a3115d766711ad1592c7a4ec","sha512":"1b97635a4f6fd61d6de5976c7c5c73d26f472ecc7383f5d1e2cb00a4de381b58b7a74b367c81d0e58e457896295222bd0845b506fba6935985c02071f1221301","ssdeep":"768:UYhZgVsFVMc7GrMBctVWb1OQICuodMxQ2T:UYhOsFVDtmm1OQICrg","tlshash":"c7d2f217a88712f4657f7c91356a3268d90fa00e033378df9f6f396bc59a320827b451","first_seen":"2026-09-17T03:15:51.486161Z","last_seen":"2026-09-17T03:18:08.852138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/be-gamble-aware_result.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.582Z","timestamp":1789615057582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/be-gamble-aware_result.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 14:36:14 GMT\r\netag: \"690377de-1672\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0C7%2FApYfFaFQntjRPvvH9nCCu40N%2Bfr4t1ABj7PlheuzbiEEFZBtWnzwPwten6ls%2FXR2Ll9JYwTIVknz%2FKXuFqhKxVY9V0cR1uqUbwayR6BHLnv4INCB0Pq7UKXuicOm7x8%3D\"}]}\r\ncf-ray: a3c4f57dedd48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5746\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5746,"size_decoded":6534,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"266a47f4217c0efa69f6440ec6fa58fd","sha1":"40ad20a80dd5c0ac3253b7803a011c62ca57751f","sha256":"d9ba53d981a3308d61d71a80f79df1e5def4884cdb6bdcb7b62eddf85eff8ebd","sha512":"8aa73705399cc43f363019b1bbe877141ee22b6171d53a3f317643001f209ca8abc6dba10c33a2ecbdf6a1220f08ad04364a343013f360bea9b8cda6a50aec14","ssdeep":"96:CtBOlWJPh3Eyslt5RVkW4rI4mMxG8HygGsglhCGvYkGWOe6OIGQu+k1GfOnK22F3:CtclWJPhCtHVxMxLHCsglbvDGLgIx5t7","tlshash":"b7c1af1908441cebf5b12ddfe1085614e6fbaedb56d1830dd748193744d672822ee4f8","first_seen":"2026-09-17T03:15:51.462592Z","last_seen":"2026-09-17T03:18:08.852778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets-nz.com/wp-content/uploads/2025/10/18.webp","fqdn":"rainbets-nz.com","domain":"rainbets-nz.com","tld":"com"},"ip":{"addr":"172.67.147.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets-nz.com/","date":"2026-09-17T03:17:37.588Z","timestamp":1789615057588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets-nz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 15:32:39 GMT","end":"Thu, 10 Dec 2026 16:31:14 GMT"},"fingerprint":{"sha1":"A3:D6:99:F2:D6:F2:5E:F8:C9:D0:68:A2:F3:21:EE:A9:31:13:05:D6","sha256":"1C:64:B5:7A:C7:E7:4B:E8:43:D6:01:57:34:69:2A:56:EC:DC:EC:EF:56:64:D6:D9:2C:D6:1B:5B:9F:00:E4:96"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/18.webp HTTP/1.1\r\nHost: rainbets-nz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets-nz.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 03:17:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Oct 2025 13:09:18 GMT\r\netag: \"6904b4fe-7a6\"\r\nexpires: Sat, 17 Oct 2026 03:15:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64H7p6JLH5pwCBcF6fOwwxDf8oh8lzO0o%2Fzkwh3mQhpXsDoiTmjWBHoGlT0vHDTqwOdh%2Bp22t%2FmguchNNbGR9qCQiXyRNFIqtbOInyYpJzphg5UJnCHZUtg5aSQCZPuJA78%3D\"}]}\r\ncf-ray: a3c4f57dedda8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1958\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1958,"size_decoded":2743,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e39ca5baa87ee602d8db6b866b3c5db6","sha1":"f84bafa30f39a14993c528fd6753efeabd50409e","sha256":"7fc328bb6f59c39768f1b55768e816af232b572001ad52110ecb8724f1b16849","sha512":"21b2d6d84986f5cb5fc38378355ea973cace2a7538460c6be003137731345ebd791ffb932163f708c7f0c5a00951c5ca2c41fe5b9e30af03c9bd3b37daeea4cf","ssdeep":"","tlshash":"ad410b3d63627364f677577085998b82e79d75218f069d0dc2cc07b00755cc6b489497","first_seen":"2026-09-17T03:15:51.469271Z","last_seen":"2026-09-17T03:18:08.853473Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rainbets-nz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}